Privacy Policy for Sleep Oasis

Effective date: 04/09/2025

Last updated: 04/09/2025

D-bug Station Limited (“we”, “our”, “us”) operates mobile applications, including Sleep Oasis (the “App”). This Privacy Policy explains what data we collect, how we use it, and the choices you have. It is designed to meet Apple App Store and Google Play requirements, including App Store Privacy “nutrition labels” and Google Play Data safety.

If you have questions, contact: info@dbugstation.com

1) What we collect

We collect only what we need to run the App and improve your experience. Exact data points vary depending on the features you use and your permissions/consent.

A. Account & Profile

Email/login ID, display name, and (optional) profile photo.
Profile photo access: If you choose to change your picture, we request Photos/Media Library permission to let you pick a photo. We only access images you select; we do not scan or upload your entire library.

B. Sleep, Wellness & App Usage Data

Sleep entries, schedules, habits, moods, meditation sessions, timers, and in-app activities you choose to save.
App usage events (e.g., screens viewed, buttons tapped) to help us understand what works and improve stability.

C. Microphone (optional, permission-based)

For features like snore/sound detection, breathing guidance, or mindfulness tap sound effects, we may process microphone audio on-device.
We do not store or transmit raw audio unless you explicitly choose a feature that needs it (rare). By default, audio is processed locally to compute derived metrics (e.g., noise level, snore events) and only those metrics may be saved to your account.

D. Motion & Fitness / Health Integrations (optional)

If you connect Apple HealthKit or Google Fit, we may read and/or write sleep-related data with your explicit consent.
HealthKit/Google Fit data is used only to provide health features in the App. It is not used for marketing or advertising and is not shared with third parties for those purposes.

E. Device & Diagnostics

Device identifiers (e.g., Instance ID), app version, OS version, language, crash logs, and performance diagnostics for security, support, and bug-fixing.

2) Why we use your data

Core functionality: track sleep and habits; play sounds/meditations; show insights and progress.
Account & sync: save your data across devices and enable restore.
Support & safety: troubleshoot issues, detect abuse, protect accounts.
Analytics (with your consent where required): understand feature usage to improve the App.
Notifications: send reminders (e.g., bedtime, breathing, streaks).
Ads (see Section 5): show ads to keep parts of the App free.

3) Permissions we request (and why)

Microphone: to detect snore/noise events or create tap/breath sounds. Raw audio stays on device by default.
Photos/Media Library: to choose a profile picture only.
Notifications: to send reminders and updates you opt into.
Motion & Fitness / HealthKit / Google Fit (optional): to read/write sleep and wellness data you consent to.
Network/Internet: to sync data, display content, and load ads (if enabled).

You can change permissions anytime in your device settings.

4) How we store & retain data

On-device: many features (e.g., live microphone processing) run on-device.
Cloud: account data and saved entries may be stored securely on our servers or trusted providers.
Retention:
Account/profile & subscription records: kept while your account is active.
Sleep & wellness entries: kept until you delete them or delete your account.
Crash logs/diagnostics: typically ≤ 90 days unless needed longer for security or legal reasons.
We use industry-standard safeguards to protect data at rest and in transit.

5) Advertising & tracking

We aim to keep ads respectful and privacy-preserving:

Default: We show non-personalized ads (contextual) where possible. We do not share your personal data for cross-context behavioral advertising by default.
If you consent to personalized ads (optional): our ad partner(s) (e.g., Google AdMob) may use device identifiers and coarse app activity to personalize ads. You can withdraw consent anytime in App Settings or OS settings (“Reset advertising ID” / “Limit Ad Tracking”).
No raw audio, HealthKit, or Google Fit data is used for ads.
We do not sell your personal information.

Ad Partners (illustrative): Google AdMob (Google LLC). See their privacy terms for details on what they process as an independent controller when you opt into personalized ads.

6) Sharing of data

We do not share your personal data with third parties except:

Service providers / processors who help us run the App (e.g., analytics, crash reporting, subscription management, cloud hosting). They are bound by confidentiality and only process data on our instructions.
Legal & safety: to comply with law, respond to valid legal requests, or protect users and our services.
With your direction/consent: e.g., if you connect HealthKit/Google Fit, or export your data.

We may share aggregated or de-identified statistics that cannot reasonably identify you.

Common processors we may use:

• RevenueCat (subscription management)

• Firebase / Google Analytics (analytics/crash; consent-based where required)

• Google AdMob (ads; non-personalized by default, personalized only with consent)

We will keep this list up to date in the App/website if providers change.

7) Your choices & rights

Permissions: turn off Microphone, Photos, Health, or Notifications in device settings.
Ads controls: toggle ad personalization in the App (where offered) or in your device settings.
Access / correction: request a copy of your data or ask us to fix inaccuracies.
Deletion:
In-App: Settings → Account → Delete Account (this permanently deletes your account and associated data after a short safety window).
Or email info@dbugstation.com from your registered address with subject “Delete my account”.
Withdraw consent: you can withdraw analytics/ads/health data permissions at any time; this won’t affect processing already performed with your consent.
EU/UK (GDPR): you may have additional rights (object, restrict processing, portability).
CA (CPRA): we do not sell your data. You may request access or deletion.

We will verify requests and respond within applicable legal timeframes.

8) Children’s privacy

Our App is not intended for children under 13 (or the minimum age required in your region). We do not knowingly collect personal data from children under that age. If you believe a child has provided us data, contact info@dbugstation.com and we will delete it.

9) International transfers

We may process data on servers outside your country. Where required, we use appropriate safeguards (e.g., contractual clauses) to protect your information.

10) Security

We use administrative, technical, and physical safeguards—including encryption in transit, access controls, and monitoring—to protect your data. No system is 100% secure; we continuously improve our protections.

11) Developer statements required by Apple & Google

HealthKit / Google Fit: Data accessed via these services is used solely to provide health and wellness features in the App. It is not used for marketing, not shared with third parties for advertising, and not sold.
Microphone: Unless you explicitly enable a feature that needs cloud storage, raw audio is processed on-device and not stored. We may save derived metrics you choose to keep (e.g., snore events count).
Photos: We only access the photo(s) you select to set a profile picture.
Tracking: We do not track you across apps and websites owned by other companies without your explicit consent (e.g., ATT on iOS).
Data Minimization: We collect the minimum necessary to provide the service.

12) Changes to this policy

We may update this Privacy Policy to reflect changes to our practices or for legal reasons. We’ll post the new version in the App/website with a new “Effective date.” If changes are material, we will provide a prominent notice or request consent where required.

13) Contact us

D-bug Station Limited

Dhaka, Bangladesh

Email: info@dbugstation.com

Official website: