Privacy

Last updated: 15 November 2026

This privacy policy explains how personal data is processed when you use the Sleep & Sound iPhone app and its associated website.

1. Controller

The provider of Sleep & Sound and controller for the processing we carry out as described in this policy, particularly when operating the website and handling enquiries, is:

Max Wiesner
Hesseloherstraße 17
82396 Pähl
Germany

Email: connect@sleepandsound.de

2. Data processing in the app

2.1 Data and purposes

Sleep & Sound processes the following data when you use the relevant features:

• Audio recordings and sound clips: Ambient sounds, for recording and analysing nighttime sounds. This also includes timestamps, volume levels and classification into sound types such as snoring, talking or coughing.
• Sleep journal: Optional entries about sleep quality, restfulness, waking frequency and sleep duration, notes and associated recordings. These entries are used for your personal journal and to display your sleep history.
• Time and usage information: Dates and times of recordings, sound playback, timers and morning app use. These are used to associate events with times, control these features and estimate sleep duration.
• Settings: Your favourite sound and onboarding status, to remember your choice and manage onboarding.

You rate sleep quality and restfulness yourself using the rating symbols and slider. The app does not calculate its own assessment of your sleep quality or health from these ratings. History views and charts display your saved entries.

Recordings, analysis and sleep journals are processed exclusively on your device. They are not automatically sent to the provider or an external analysis service. The provider has no remote access to this data.

After a recording ends, the app selects segments based on sound levels and processes them locally. Sounds are classified using Apple’s SoundAnalysis. Noise reduction also takes place on your device. Sound classification is not a medical assessment. The app does not create transcripts, identify speakers or create voice profiles. Recordings are not used to train our own models. The stated sleep duration is based on your entry or an editable time-based estimate; sleep stages are not measured and medical diagnoses are not made.

The app does not require a user account and contains no advertising, tracking or integrated analytics or crash-reporting services. Location data and Apple Health data are not collected.

Depending on their content, your sleep entries, audio recordings and notes may contain health data or other particularly sensitive information, for example if you record symptoms or illnesses in a note. This content also remains on your device during normal app use. You decide whether to disclose it through the sharing feature or when contacting us.

2.2 Microphone and recordings

Night recordings are optional. Microphone permission is requested when you start or schedule a recording. It is not required for other app features.

During a recording, all ambient sounds are captured, including while the screen is locked. These may include other people’s voices and conversations. Recording is not limited to detected sound clips. Affected people must be informed before recording and agree to it.

You can revoke microphone permission in iOS settings at any time. No further recordings are possible without it. Previously stored data is not deleted by revoking permission.

2.3 Visibility on the Lock Screen

Recording status and times may appear on the Lock Screen and in the Dynamic Island. Other people may be able to see this information. Audio content, notes and ratings are not shown there. You can adjust this display through the relevant iOS settings.

Ending this display does not stop an ongoing recording.

2.4 Your local use and our role

We provide Sleep & Sound as a tool for personal use on your device. You decide whether to record, what information to enter and which clips to keep, delete or share. Recording, sound analysis and the sleep journal operate locally in the app.

We do not automatically receive locally stored audio or journal content, have no remote access to it and do not use it for our own analysis, advertising, research or model training. We do not offer server-side processing of this content. If you send us content yourself, for example in a support enquiry, Section 7 applies.

Our processing during website visits, contact enquiries and in connection with the diagnostic information described in Section 5 is separate. The respective purposes and legal bases are set out in those sections.

Information is stored on or accessed from your device without additional consent only where strictly necessary for a feature you have expressly requested (Section 25(2) No. 2 TDDDG).

3. Storage and deletion

Local storage and backups

Recordings, sleep journals and settings are stored on your device. There is no cloud synchronisation service of our own.

The app uses iOS file protection and the sandboxed app storage area. After the first unlock following a device restart, journals and clips remain accessible to the app even when the device is locked again. An already opened recording can continue while the device is locked. There is no additional app-specific PIN or Face ID lock.

The app excludes recordings, sound clips and sleep journals from regular device backups. General settings may, however, be included in a device backup. The app therefore does not provide backup of recordings and journals through device backups.

Storage and deletion of any backups depend on the settings and terms of the respective backup service. The provider has no access to them.

Recordings and sleep journals

The full night recording is marked for deletion after the sleep journal has been successfully saved. Only clips you explicitly select are kept when saving. Unselected clips are deleted as soon as deletion can be completed successfully.

Unsaved nights can be saved within seven days of the known recording end time. The overview shows the remaining time. After this period, the entire unsaved night, including all sound clips and the full recording, is selected for deletion when data is loaded or the app returns to the foreground. Cleanup may be postponed while a recording or analysis is in progress or audio files are in use. Deletion is not performed in the background with precision to the second. Saved journals and explicitly selected clips remain until you delete them. If the recording end time is unknown, this automatic deadline does not apply; you can delete the night manually.

If the app is not running or deletion fails, removal may not be completed until the app runs successfully at a later time. A limit on recording duration is not a deletion deadline.

Saved journals, ratings, notes and selected clips remain until you delete them. You can delete individual clips and entire nights in the app. Deleting a night includes its associated journal entries and recordings.

Deleting an individual clip does not remove its content from a full recording that may still exist. The full recording is deleted with the associated night.

If errors occur, files or temporary copies may remain until deletion succeeds later. Pending audio-file deletions are retried. Immediate complete removal cannot be guaranteed if errors occur.

Deleting an individual night does not automatically reset general settings or the most recently saved time information.

“Delete all sleep data” in the privacy view can remove all local recordings, clips, journals and associated time information. This feature is unavailable during recording, scheduling or processing. Your favourite sound and onboarding status are kept. If deletion of all sleep data is interrupted after it has started, it is retried the next time data is loaded.

Copies saved or shared outside the app are not deleted with the originals.

4. Sharing and external links

You can share audio files with recipients or services you select. File names and associated file information may also be transmitted. Ratings and notes are not shared as an accompanying sleep journal.

You independently decide which recordings to share, with whom and through which service. You are responsible for selecting the content and recipients and ensuring disclosure is lawful. In particular, the rights and required agreement of other recorded people must be respected.

The chosen recipient is responsible for subsequent processing, storage and disclosure. The respective service’s privacy terms apply. The provider of Sleep & Sound does not control that processing and cannot delete copies stored there. The provider’s own statutory obligations remain unaffected.

When you open an external link, the respective website provider receives the connection data required for the request, particularly your IP address. That website’s privacy information applies to its processing.

5. Apple services and diagnostic data

Apple processes data in connection with iOS, the App Store and, where applicable, TestFlight under its own privacy information. Apple may provide the app provider with usage statistics and crash and diagnostic information. For regular App Store versions, this depends in particular on the respective service and your Apple privacy settings.

For beta versions distributed through TestFlight, Apple automatically collects usage and crash data and makes it available to the app provider. This transmission cannot be separately disabled within TestFlight. Voluntary feedback and attached screenshots are also shared. Depending on the invitation type and feedback, your name and email address may be visible.

This information may include invitation status, installation and session counts, app and operating-system versions, device model, device ID, language and crash logs. Voluntary feedback may contain further device and connection information and sensitive content in comments or screenshots.

Where this information contains personal data, it is processed for troubleshooting and to improve stability and security. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is reliable and secure app operation. We do not maintain an additional diagnostic archive of our own.

Retention within Apple services is governed by their terms. Apple specifies a one-year retention period for TestFlight feedback; crash and usage data may be retained until errors are resolved.

For people in the European Economic Area, Apple identifies Apple Distribution International Limited in Ireland as the responsible legal entity. Data may also be processed outside the European Economic Area as part of Apple services. Apple describes in particular the use of standard contractual clauses for this purpose. Information and a copy of these clauses are available through Apple’s privacy contact.

More information: Apple Privacy Policy, TestFlight & Privacy and Apple privacy contact.

6. Website

Hosting and access data

The website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany.

Visits involve processing the connection and access data necessary to provide and protect the website. This includes in particular your IP address, the time of access, pages or files requested and browser-supplied information about your browser and, where applicable, the previously visited page.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is reliable website delivery, error detection and protection against attacks.

According to STRATO, full IP addresses are retained for a maximum of seven days to prevent attacks. STRATO also provides web server access logs for the previous six weeks. According to STRATO, the host or IP information in these logs is anonymised. The website provider does not keep an additional archive.

More information: STRATO on connection data and data processing agreements.

Cookies and external content

The website does not use cookies for visitor analytics, tracking services or externally embedded content that causes data to be transmitted to third parties when a page is loaded.

7. Contact

If you contact us by email, your email address, message content and any further information you send are processed exclusively to handle your enquiry. The email service is provided by STRATO.

For contractual or pre-contractual enquiries, the legal basis is Article 6(1)(b) GDPR; for other enquiries it is Article 6(1)(f) GDPR. Our legitimate interest is appropriately handling and responding to enquiries.

Messages are deleted once they are no longer needed to handle the enquiry. Where statutory retention obligations apply, or further storage is necessary to establish, exercise or defend legal claims, the relevant information is retained for the required period and then deleted.

8. Recipients of personal data

STRATO processes data in connection with website hosting and the email service as described in Sections 6 and 7. Apple processes data through the services described in Section 5, which also explains what information we may receive through them.

The app does not automatically send your audio recordings or journal content to STRATO, Apple or other external analysis services. When you share an audio file, the recipients or services you choose receive the data described in Section 4. If you send us content by email yourself, it is processed through our email service.

Other disclosure takes place only where required by law or necessary and lawful to establish, exercise or defend legal claims.

Personal data is neither sold nor shared for advertising purposes.

9. Your rights

Subject to the legal requirements, you have rights of access, rectification, erasure, restriction of processing and data portability.

Where processing is based on legitimate interests under Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation.

You can withdraw consent at any time with effect for the future. This does not affect the lawfulness of processing before withdrawal.

Requests to exercise these rights can be sent to connect@sleepandsound.de.

The provider does not possess app data stored exclusively on your device and cannot access or delete it remotely. You manage and delete this data using the available features on your device.

You can lodge a complaint with a data protection supervisory authority, in particular where you live or work, or where an alleged infringement took place. The Bavarian State Office for Data Protection Supervision is generally responsible for the provider.

No automated decision-making with legal or similarly significant effects takes place.

10. Changes to this privacy policy

This policy is updated when data processing or legal requirements change. The current German version is available at sleepandsound.de/de/datenschutz/. The privacy link in the app points to sleepandsound.de/de/datenschutz.html, which redirects to that page.