Last Updated: May 1, 2026 | Version 2.0.0
Slumber Pte. Ltd. ("Slumber") is committed to protecting your personal data in compliance with the Singapore Personal Data Protection Act 2012 (PDPA) and global privacy regulations including GDPR, CCPA, and LGPD.
Account Information: Name, email, date of birth, profile information.
Payment Information: Processed by PCI-DSS compliant providers (Stripe, Apple/Google Pay). We do NOT store full payment details.
Usage Data: Sleep patterns, audio listening history, app interactions.
Technical Data: Device info, IP address, OS version, crash reports.
Health Data: Sleep duration, quality metrics (with explicit consent).
Provide and improve sleep tracking, personalize content, process payments, send service notifications, analyze usage patterns, comply with legal obligations, and respond to support requests.
We NEVER sell your personal data. We may share with service providers who are contractually bound: AWS (Singapore region), analytics providers, payment processors, and customer support tools. We may disclose when required by Singapore law.
Your data is primarily stored on AWS servers in Singapore (ap-southeast-1). Transfers outside Singapore are safeguarded by Standard Contractual Clauses and PDPA-compliant agreements.
Active accounts: data retained while account exists. Deleted accounts: anonymized within 30 days. Payment records: 5 years (Singapore Income Tax Act). Analytics: anonymized after 24 months.
All Users (PDPA): Right to access, correct, withdraw consent, delete, and data portability.
EU Users (GDPR): Additional rights to restriction, objection, and complaint with supervisory authority.
California (CCPA): Right to know, delete, and opt-out (we do not sell data).
Privacy Inquiries: privacy@slumber.app
Data Requests: data-requests@slumber.app
DPO: dpo@slumber.app
Security: security@slumber.app