Last updated: July 6, 2026
The short version: your sleep diary lives on your device, not on our servers. We don't sell your data, we don't show ads, and your health answers never go to advertising companies. We collect the minimum needed to run the app and make it better.
Your nightly sleep diary, your sleep window, your program progress, and your 3am-mode usage are stored locally on your phone in the app's own database. They are not uploaded to our servers. Deleting the app deletes them.
Two features send data off your device only when you use them, through our own server:
These requests carry no name, email, or account identity. Per OpenAI's API terms, this data is not used to train their models. If you never use these features, nothing is sent.
You can request access to or deletion of the data associated with your anonymous ID by emailing pluffy.sleep@gmail.com. California residents have rights under the CCPA and EU/UK residents under the GDPR — the same email handles all requests, no forms, no friction.
Analytics and purchase records are kept only as long as needed for the purposes above, then deleted or aggregated. Analytics are processed in the EU (PostHog); purchase validation and crash reporting run on providers with US infrastructure under standard contractual safeguards. We apply industry-standard technical measures, though no system can guarantee absolute security. If Pluffy is ever acquired or merged, this policy would still govern your data and you would be notified of any change.
Pluffy is intended for adults 18 and over and is not directed at children.
If we change this policy in any material way, we'll tell you in the app before the change applies.