Privacy Policy

Effective date: October 5, 2026 · Contact: tanjil@metlymedia.com

This Privacy Policy explains how Valo Sleep (“Valo”, “we”, “us”) collects, uses, and shares information when you use the Valo Sleep iOS app (the “App”) and the Valo Sleep website (the “Website”).

Summary (plain English)

• No accounts. The App does not require sign-in.
• Most data stays on your iPhone. Your “Your Thoughts” entries (typed text and voice recordings) are stored locally on your device.
• Transcription is optional. If you subscribe and tap Transcribe, the App uploads the selected audio recording to our server to generate a transcript. We then use third-party AI services to transcribe and format it. The audio is deleted from our server right after.
• Subscriptions. Purchases are handled by Apple’s App Store and our billing provider (RevenueCat) to manage subscription status.
• No analytics SDK. We do not run third-party analytics SDKs in the iOS app at this time.

Information we collect

1) Information you create in the App (stored on device)

The App includes features like sleep onboarding selections, schedules, breathing sessions, and “Your Thoughts” journaling.

Depending on what you use, the App may store on your device:

• Sleep schedule data (e.g., bedtime and wake time)
• App blocker configuration (e.g., which apps/categories you chose to block and your blocker schedule)
• Breathing / relaxation usage signals needed to power features like the streak
• “Your Thoughts” content
  • Typed entries you write
  • Voice recordings you record (saved as audio files on your device)
  • Transcripts (if generated), including edited versions you save

2) Information processed when you use transcription (only when you tap “Transcribe”)

If you choose to use transcription features:

• The App uploads the audio file you selected to our transcription endpoint.
• Our server sends that audio to an AI transcription provider (currently OpenAI) to generate a raw transcript.
• Our server may then send the raw transcript to the AI provider again to generate an organized/cleaned version of the transcript.
• The App receives the transcript output and stores it locally on your device.

Important: We do not continuously listen or upload audio. Upload happens only after you explicitly tap a transcription action.

Each transcription request also includes two random identifiers, so our server can check your subscription and apply daily limits:

• your anonymous subscription ID from RevenueCat (not your name, email or Apple ID), and
• a random per-install device ID created by the App.

Our server keeps daily usage counters tied to these identifiers (how many transcriptions were used that day). Counters are deleted automatically after about 7 days.

3) Subscription and purchase information

If you purchase a subscription:

• Apple processes your payment and provides us subscription status signals.
• We use RevenueCat to help manage entitlements (e.g., whether “premium” is active).
• Our server keeps a copy of your subscription status (linked to your anonymous subscription ID) so it can confirm access before transcribing. Subscription event notifications from RevenueCat are kept for about 30 days.

We do not receive your full payment card details. Those are handled by Apple.

4) Notifications

If you enable notifications, the App schedules and delivers notifications on your device using Apple’s notification services. We do not receive the contents of your local notifications.

5) Screen Time / Family Controls (App blocker)

If you enable the blocker, the App uses Apple’s Screen Time / Family Controls APIs to apply blocking during your configured schedule. Your selections are stored locally and, where required, shared with App extensions using an Apple App Group.

6) Our website

• Contact form: If you send us a message through the contact form on the Website, we receive your name, email address and message. The form is handled by our website host, Netlify. We use this information only to reply to you.
• No tracking: The Website does not use analytics, advertising or tracking cookies.
• Hosting: Like any website host, Netlify may process technical information such as your IP address to deliver the Website and keep it secure.

How we use information

We use information to:

• Provide core App functionality (sleep schedule, blocker schedule, breathing sessions, streak logic, journaling).
• Provide optional features you request (like transcription).
• Operate subscriptions and access control (free vs premium features).
• Improve reliability and troubleshoot issues (for example, basic error logs you may share with us if you contact support).
• Reply to messages you send us.

How we share information

We share information only in limited cases:

1) Service providers (transcription, subscriptions and website)

If you use transcription:

• Convex (our backend / hosting provider) receives the audio upload to process your request.
• OpenAI (or another AI provider, if we switch in the future) receives the audio and/or transcript text to generate the transcript and formatted output.

For subscriptions:

• Apple App Store processes payments.
• RevenueCat processes subscription/entitlement status for the App.

For the Website:

• Netlify hosts the Website and receives contact form messages.

2) Legal and safety

We may share information if required by law or to protect rights, safety, and security (for example, responding to lawful requests).

Data retention

• On-device data: Stays on your device until you delete it in the App or delete the App from your device. It is protected by iOS encryption and, if you use iCloud Backup or computer backups, included in those backups like other app data.
• Transcription uploads: Your audio is deleted from our server as soon as the request finishes (with an automatic clean-up after 15 minutes if a request is interrupted). We do not store transcripts on our server, and we don't log audio or transcript text.
• AI provider: OpenAI does not use API data to train its models. It may keep request data for up to 30 days to monitor for abuse, then deletes it.
• Usage counters: about 7 days. Subscription event notifications: about 30 days.

Your choices and controls

• Delete your thoughts: You can delete entries inside the App.
• Notifications: You can enable/disable notifications in iOS Settings.
• Transcription: You control whether you use transcription by choosing to subscribe and tapping the transcription action.

International users

If you use the App from outside the country where we operate, your information may be processed in other countries (for example, where our service providers operate).

Children’s privacy

The App is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

Security

We use reasonable safeguards designed to protect information. No method of storage or transmission is 100% secure.

Changes to this policy

We may update this Privacy Policy from time to time. If we make changes, we will update the “Effective date” above.

Contact us

If you have questions, contact us at: tanjil@metlymedia.com