SleepWindow — Privacy Policy

Last updated: 2026-10-19

SleepWindow is a sleep-timing planner. Your bedtime entries, wake targets, and saved presets stay on your device. We do not operate a backend for your data. The only data that leaves your device is anonymous product-usage analytics, described below.

What we collect

SleepWindow sends anonymous product-usage analytics to PostHog (US cloud, project 389134). For each event we send:

• The event name (e.g. paywall.viewed, paywall.purchase_success, screen.viewed, settings.toggled) and non-identifying event properties such as the screen name, user segment (anonymous/free/trial/premium/lifetime), days since install, and locale.
• A random per-install identifier generated by the PostHog SDK. It is not linked to your Apple ID, email, name, phone number, or advertising identifiers, and we do not request the App Tracking Transparency permission.
• Your app version and build number, your device model and iOS version, and an is_review_env flag that marks events from TestFlight or App Review sandbox builds so we can exclude them.
• For in-app purchases: the StoreKit product ID, the transaction ID, the price PostHog receives from the device, and whether this was the first purchase on this install. We never see your payment method, Apple ID, or billing address — Apple handles the transaction.

We never collect your name, email, Apple ID, phone number, precise or coarse location, contacts, photos, health data, IDFA, or the contents of your bedtime entries, wake times, saved presets, or notifications. We do not share analytics with advertisers and we do not use them to track you across other apps or websites. The PostHog iOS SDK is configured with autocapture off, screen-view autocapture off, session replay off, and personProfiles = .never; only the events described in this policy are emitted.

Identification after purchase

After your first in-app purchase on this device, we associate that install's analytics events with a pseudonymous identifier derived from a hash of Apple's identifier-for-vendor (IDFV): we take MD5(IDFV), keep only the first 12 hex characters, and prefix it with anon_. The raw IDFV itself is never sent. The IDFV is the same value for all apps from this developer on this device, so this pseudonymous identifier lets us count how many of our apps the same device has paid for; it is also stable across reinstalls as long as another of our apps remains installed. Apple's App Privacy taxonomy classifies IDFV-derived values as a Device ID, so we disclose it as such on the App Store listing. The pseudonymous identifier is never combined with your name, email, phone number, Apple ID, or payment details, is not used for advertising, and is not shared with data brokers. Turning off anonymous analytics in the app's Settings ("Share anonymous usage data") stops this identification from being sent.

Crash diagnostics and install attribution

• Crash diagnostics. If the app crashes, iOS (MetricKit) gives the app a crash report on the next launch. We send a short, PII-free crash signature (for example the exception type and app version) as an analytics event. We also send basic session timing, such as session length and screens per session, so we can spot performance problems.
• Install attribution. On first launch the app asks Apple's AdServices framework for an attribution token and sends it to Apple (api-adservices.apple.com). Apple replies only whether the install came from an Apple Search Ads campaign, and if so the campaign and ad-group identifiers. We record that on a single first-open analytics event to tell paid installs from organic ones. No personal information is involved. You can turn off Apple's ad attribution in iOS Settings → Privacy & Security → Apple Advertising.

What lives on your device

All of your settings and saved presets are stored locally using UserDefaults, a standard iOS mechanism for app preferences. This data never leaves your device. Uninstalling the app deletes it.

Network activity

SleepWindow talks to three destinations over HTTPS:

• Apple's App Store, for the optional in-app purchases (monthly and yearly subscriptions and a one-time Lifetime unlock) and to verify your entitlement. Apple processes the transaction; we do not see your payment details.
• PostHog (us.i.posthog.com), for the anonymous analytics described above.
• Apple AdServices (api-adservices.apple.com), once on first launch, for the install attribution described above.

Notifications

If you enable a bedtime reminder, SleepWindow schedules a local notification using iOS's notification system. Nothing about the reminder is sent to us or anyone else. You can disable reminders at any time in the app's Settings or in the iOS Settings app.

Retention

Analytics events are kept in our PostHog project for internal product analysis and are not sold or shared with advertisers.

Children

SleepWindow is not directed at children. We do not knowingly collect information from children.

Changes to this policy

If this policy changes, the updated version will appear at this URL with a new "Last updated" date.

Contact

Questions: tony@custody-compass.com.