Privacy Policy

1. Who we are

SleepOnYourBack LLC is the operator of the Services. Our business address is 4550 Freshwater Dr, Las Vegas, NV 89103, USA. For privacy questions or requests, email Info@sleeponyourback.com.

2. Information we collect

• Account information: your email address, account identifier and authentication information needed to create, secure and manage your account. If you use Google sign-in, our authentication service receives information permitted by that sign-in process. We do not request a separate display name or profile photo for your progress account.
• Quiz and progress information: answers about sleep positions, habits, comfort preferences and safety considerations; quiz completion dates; saved AI starting plans; nightly check-in dates; and comfort scores.
• Communications: information you provide when contacting us, including the contents of your request and our responses.
• Technical information: our hosting, authentication and AI service providers may process IP addresses, browser and device information, request logs and session information necessary to deliver and secure the Services.

Some quiz answers may reveal sensitive health-related information, including pregnancy, breathing concerns or clinician-directed restrictions. Provide only information needed for the quiz and do not submit medical records or unnecessary identifying details. You can choose not to complete a quiz or request an AI plan.

Checkout is not currently available. Selecting an add-on does not create an order or payment record. Before purchases are enabled, applicable payment processing and purchase-record practices will be disclosed.

3. How we use information

We use information to provide accounts and saved progress; personalize general educational starting plans; respond to requests; maintain, troubleshoot and secure the Services; prevent misuse; and comply with legal obligations. We do not use quiz answers to diagnose or treat medical conditions.

When you are signed in, completed quizzes and generated plans may be saved automatically to your account. Nightly check-ins are saved when you submit them.

4. AI-generated plans

When you request a personalized starting plan, your submitted quiz answers and the instructions needed to generate the plan are transmitted through Lovable AI Gateway to an AI model provider, currently OpenAI. The response may be saved to your account. These providers process the request under their applicable terms and privacy practices.

AI-generated text can be inaccurate and is general education, not medical advice. Do not include names, contact details, medical records or other unnecessary personal information in answers submitted for AI processing. We do not promise that providers retain no request data or that all processing occurs in your country.

5. When we disclose information

We disclose information as necessary to service providers that support hosting, account authentication, data storage, security and AI processing, including Lovable Cloud and the AI services described above. If you choose Google sign-in, Google also processes information under its own privacy policy.

We may also disclose information when reasonably necessary to comply with law or valid legal process; protect rights, safety and security; investigate misuse; or in connection with a merger, acquisition or transfer of our business, subject to applicable privacy requirements. We may disclose information at your direction.

We do not sell your personal information or share it for cross-context behavioral advertising. We do not currently run advertising pixels or third-party marketing analytics on the Services.

6. Browser storage and email

The Services use browser storage and, where applicable, cookies to maintain authentication, sessions and essential preferences. Blocking or clearing this storage may sign you out or prevent account features from working.

Automated marketing email journeys are not currently enabled. Account-related messages and responses to your inquiries may be sent as needed. If we introduce marketing emails, we will provide any legally required consent controls and an unsubscribe mechanism. We will update this policy and provide appropriate choices before introducing nonessential tracking.

7. Retention and security

We retain personal information for as long as reasonably necessary to provide the Services, maintain your saved activity, resolve disputes, protect security and meet legal obligations. The appropriate period depends on the type of information and the purpose for which it is held. We may retain limited records after an account deletion request where legally permitted or required; backup copies may remain until overwritten in the ordinary course.

We use access controls and other reasonable safeguards designed to protect information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for safeguarding your account credentials.

8. Your choices and privacy rights

You may decline to provide optional information, stop using the Services or contact us to request access, correction or deletion of personal information. Depending on your residence and applicable law, you may also have rights to obtain a portable copy, restrict or object to certain processing, withdraw consent, opt out of qualifying uses, or appeal a privacy-request decision. These rights may be subject to exceptions.

Send requests to Info@sleeponyourback.com. Include the email associated with your account and describe your request; do not send your password. We may need to verify your identity or an authorized agent’s authority before responding. We will respond within the period required by applicable law and will not unlawfully discriminate against you for exercising your rights. If a right of appeal applies, reply to our decision to request an appeal.

You may also contact your local privacy regulator. Because we do not currently sell personal information or share it for cross-context behavioral advertising, no such advertising use is performed regardless of a browser opt-out signal.

9. International users

We operate in the United States. Your information may be processed in the United States and other countries where our service providers operate, whose privacy laws may differ from those in your country. Where required, appropriate legal transfer safeguards must apply.

Where laws requiring a legal basis apply, we process information as necessary to provide requested Services, comply with legal obligations, or pursue legitimate interests such as security, subject to your rights. Where consent is required, including for certain sensitive information, we must obtain it before the relevant processing. This policy alone is not a substitute for any required consent.

10. Children’s privacy

The Services are not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has provided personal information, contact us so we can investigate and take appropriate action. Additional age and consent requirements may apply under local law.

11. Updates and other websites

We may update this policy as our Services or legal obligations change. The effective date above identifies the latest revision. We will provide additional notice or obtain consent when required by law. Third-party websites and services are governed by their own policies.

For the conditions governing use of our Services, see our Terms of Use.