Effective Date: May 10, 2026
Contact Email: [email protected]
1. Introduction
Welcome to Sunya Sleep ("we," "our," or "us"). We are committed to protecting your privacy and ensuring that your highly sensitive biological and psychological data remains exactly that—yours. Sunya Sleep is built on a "Zero-Retention" architecture. This Privacy Policy explains how we collect, use, and ruthlessly protect your information in compliance with the General Data Protection Regulation (GDPR) and other global privacy laws.
2. The "Zero-Retention" Rule (Voice & Text Inputs)
Sunya Sleep is designed to be a safe, private space for somatic regulation and cognitive offloading.
- Voice Recordings: When you use the microphone feature, your audio is temporarily captured in your device’s volatile memory and securely transmitted to our AI subprocessor (OpenAI) for transcription. The instant the transcription is complete, the raw audio file is permanently destroyed. We do not store, listen to, or maintain logs of your voice recordings on our servers.
- Raw Text Inputs: The raw, transcribed text (or typed text) of your "Brain Dump" is processed by our AI to extract action steps and diagnose a nervous system state. Once this extraction is complete, the raw text of your entry is permanently deleted. We do not save your private journal entries on our servers.
3. What Data We Actually Collect and Store
Because we delete your raw inputs, we only store the minimum data required to provide you with your features. We split this storage between our secure cloud and your physical device:
A. Cloud Storage (Encrypted Supabase Servers):
- Account Information: Your email address and basic authentication data used to create your account.
- Derived Data (The Vault): The AI-extracted To-Do list (actionable tasks only) and your detected physiological state tag (e.g., "Cognitive Overwhelm").
- Usage Data: Which audio protocols you completed and the timestamp of completion, used solely to calculate your "Insights" and weekly shifts.
B. Local Device Storage (Your Phone):
- Clarity Sessions: Your past Clarity Session conversations and generated Action Plans are saved using AsyncStorage strictly on your physical device. Sunya Sleep does not have access to this conversational history, and it is not backed up to our cloud.
4. Third-Party Subprocessors
To deliver our core services, we securely share specific, limited data with enterprise-grade infrastructure partners. We have strict Data Processing Agreements (DPAs) with these partners:
- OpenAI (API): Used for voice-to-text transcription and "Brain Dump" analysis. Under OpenAI's enterprise API terms, your data is NOT used to train their AI models, and is retained by them for a maximum of 30 days strictly for security and abuse monitoring before being permanently deleted.
- Anthropic (API): Used exclusively to power the "Clarity Session" feature. When you engage in a Clarity Session, the text of that conversation is securely transmitted to Anthropic to generate your action plan. Under our Data Processing Agreement (DPA), Anthropic does not use your data to train their models.