InSleeps · Legal

Privacy Policy

Last updated: 2 August 2026

This policy explains what personal data InSleeps collects, why, who it is shared with, and the control you have over it. We have tried to write it in plain language rather than in the shortest legally sufficient one.

1. Who is responsible for your data

The data controller is:

For any privacy question or request, write to [email protected].

2. What we collect

2.1 Data you give us

• Contact details — your name and email address, when you request access or join the early-access list. A phone number only if you choose to give one.
• Your dream journal — the dreams, notes, mood ratings and other entries you write. This is the most personal data in the service, and we treat it accordingly.
• Messages to the AI guide and to support — what you write, and our replies.
• Posts in a shared space — anything you choose to post where other users can see it, in the parts of InSleeps that have such a space. The web application does not; the Telegram community does.

2.2 Data collected automatically

• Usage data — pages viewed, features used, timestamps, approximate location derived from IP.
• Device and connection data — IP address, browser and operating system, device type, referring URL.
• Cookies and similar identifiers — see section 8.

2.3 Data from others

• Payment confirmation from our payment processor: that an order succeeded, the amount, the country and the last four digits of the card. We never receive or store your full card number.
• Advertising identifiers from ad platforms when you arrive from an ad, used to attribute the visit.

3. Why we use it, and on what legal basis

4. Your dream entries, specifically

Dream entries can be intimate, and they may incidentally reveal things that data-protection law treats as sensitive — health, beliefs, relationships. We do not ask you for that information and we do not use it to profile you. Please only write what you are comfortable storing.

Your entries are:

• visible to you, and to us only where you ask for support or where we must investigate abuse or a security incident;
• sent to a third-party AI provider when you use an AI feature, so that a response can be generated;
• never sold, never shared with advertisers, and never used to target ads at you;
• not used to train third-party AI models, under the terms we have with our AI providers.

We may analyse entries in aggregate and de-identified form to improve the product. That analysis cannot be traced back to you.

5. Who we share data with

We do not sell your personal data. We share it only with service providers who process it on our behalf, under contract, and only as far as they need to:

• Payment — plata by mono (Monobank), our payment agent for card payments on insleeps.com and in Ukraine. Your card details are entered on their page and never reach us; we receive only your email address, the order reference, the amount, and confirmation that it was paid. If we later add a merchant of record for international orders, that company becomes an independent controller for the payment itself and we will name it here before it applies to any order.
• WayForPay — the alternative card processor for Ukrainian orders, on the same terms.
• Hosting and infrastructure — to run the service and store data.
• Email delivery — to send your access link and service emails.
• AI providers — to generate responses to your entries.
• Product analytics and error monitoring — to see what is used and what breaks.
• Advertising platforms — to measure campaign results, using hashed identifiers rather than plain email addresses, where you have consented.
• Messaging platform — if you choose to receive lessons through the Telegram bot, your use of Telegram is also governed by Telegram’s own privacy policy.

We may also disclose data where the law requires it, or to establish, exercise or defend legal claims. If the business is ever sold or reorganised, data may transfer to the new owner under the same protections, and we will tell you.

6. International transfers

We operate from Ukraine and use providers located in the EU, the UK and the United States. Where data leaves the European Economic Area or the UK, we rely on an adequacy decision where one exists, or otherwise on the European Commission’s Standard Contractual Clauses (and the UK Addendum) with the recipient. You can ask us for details of the safeguards in place.

7. How long we keep it

• Account and journal data — while your account is active, and for 12 months after your last activity, then deleted or anonymised.
• Order and tax records — as long as accounting and tax law requires (generally up to 7 years).
• Support correspondence — 24 months.
• Early-access list — until launch, or until you unsubscribe or ask for deletion, whichever comes first.
• Analytics — up to 14 months in identifiable form.

If you ask us to delete your data, we do so promptly, except for records we are legally required to keep.

8. Cookies and tracking

We use a small number of essential cookies to make the site work. We also use analytics and advertising technologies to understand how the site performs and how our campaigns do. Non-essential cookies are set only where you consent, and you can withdraw that consent at any time through your browser settings or by contacting us. You can browse and buy without accepting non-essential cookies.

9. Your rights

Wherever you live, you can ask us to:

• access the data we hold about you, and get a copy;
• correct anything inaccurate;
• delete your data;
• export your data in a portable format;
• restrict or object to processing based on our legitimate interests;
• withdraw consent at any time, without affecting what we did before you withdrew it;
• opt out of marketing — every marketing email has an unsubscribe link.

Write to [email protected]. We reply within 30 days and we do not charge for this. We may ask you to confirm your identity before acting on a request.

If you are in the EEA or the UK, you may also complain to your national data-protection authority. We would appreciate the chance to resolve it first.

If you are a California resident, you have the rights above, plus the right not to be discriminated against for exercising them. We do not sell or share personal information as those terms are defined by the CCPA/CPRA, and we do not knowingly process the personal information of anyone under 18.

10. Automated decisions

The AI guide generates suggestions, but no decision with a legal or similarly significant effect on you is made automatically. Its output is informational and you are free to ignore it.

11. Security

We use encryption in transit, access controls, and restricted internal access to protect your data. No online service is perfectly secure, but if a breach ever affects your rights we will notify you and the relevant authority as the law requires.

12. Children

InSleeps is for adults (18+). We do not knowingly collect data from anyone under 18. If you believe a child has given us data, write to us and we will delete it.

13. Changes to this policy

We may update this policy. The current version is always at this address, with the date at the top. If a change materially affects your rights, we will notify you by email before it takes effect.

14. Contact

[email protected]. Full details are on our Contact page.