Drift: AI Sleep Tracker

This Privacy Policy explains how Solance Lab ("we", "us", "our") collects, uses, shares, and protects your information when you use the Drift: AI Sleep Tracker app ("App"). By using the App you agree to this policy.

1. Who We Are

Developer: Solance Lab
Contact: solance.lab@gmail.com
We are the data controller for your personal data processed by this App.

2. Health Disclaimer

Drift is not a medical device. It does not diagnose, treat, cure, or prevent any medical condition. Sleep scores and AI coaching are for personal wellness purposes only and do not constitute medical advice. If you have concerns about your sleep health, consult a qualified healthcare professional.

3. Data We Collect

Category	Data Points	Source
Account data	Name, email address, profile photo, authentication provider (Google or Apple)	Firebase Auth
Sleep data	Session start/stop times, sleep quality scores, efficiency, session type (main sleep / nap), habits	Local device + Firestore
Audio data	Microphone recordings used for snore detection (optional feature, requires your explicit consent)	Device microphone
AI coach messages	Chat messages you send to and receive from the AI coach	OpenRouter / Gemini API
Device & technical data	Device model, OS version, app version, crash logs, IP address	Firebase Crashlytics
Usage data	Feature interactions, screen views, analytics events	Firebase Analytics
Purchase data	Subscription status, purchase history, entitlements	RevenueCat

4. How We Use Your Data

Sleep data — to calculate sleep quality scores, generate morning reports, and show historical trends.
Account data — to authenticate you, sync data across devices, and personalise your experience.
Audio / microphone — exclusively for on-device snore detection during active sleep tracking sessions when you opt in. Audio is processed on your device and is not uploaded to our servers.
AI coach messages — to provide personalised sleep coaching. Messages are sent to OpenRouter (Gemini 2.0 Flash) to generate responses.
Analytics data — to understand how the App is used and improve features.
Crash data — to identify and fix software bugs.
Purchase data — to manage your premium subscription and unlock paid features.

5. Microphone Permission (RECORD_AUDIO)

The App requests microphone access only for the optional snore detection feature. Specifically:

Microphone is accessed only during active sleep tracking sessions when snore detection is enabled by you.
Audio analysis is performed on your device — recordings are not uploaded to any server.
Audio data is not used for advertising, profiling, or any purpose other than snore analysis.
You can deny the microphone permission and still use all other App features.
To revoke permission: go to your device Settings > Apps > Drift > Permissions > Microphone.

6. Legal Basis for Processing (EU/EEA Users)

Processing Activity	Lawful Basis
Account creation and management	Contract (Art. 6(1)(b))
Core sleep tracking functionality	Contract (Art. 6(1)(b))
Microphone / snore detection	Explicit consent (Art. 6(1)(a) + Art. 9(2)(a))
AI coach personalisation	Contract + Legitimate interest (Art. 6(1)(f))
Analytics and product improvement	Legitimate interest (Art. 6(1)(f))
Crash reporting	Legitimate interest (Art. 6(1)(f))
Legal obligations	Legal obligation (Art. 6(1)(c))

Sleep data and audio recordings may constitute health-related data under GDPR Article 9. We rely on your explicit consent when processing this data.

7. Third-Party Services

Service	Data Shared	Purpose
Google Firebase	Account info, usage events, crash logs, device identifiers	Authentication, data storage, analytics, crash reporting, push notifications
OpenRouter (Gemini)	AI coach chat messages	Generating AI coach responses
RevenueCat	Purchase history, subscription status, device identifiers	Managing in-app purchases and premium entitlements
Apple / Google	Authentication tokens	Sign-in with Apple / Google

We do not sell your personal data to third parties.

8. Data Retention

Sleep session data is retained while your account is active.
Account data is retained until you delete your account.
AI coach chat history is retained until you delete your account or clear your chat.
Crash logs (Firebase Crashlytics): 90-day default retention.
Analytics events: as configured in Firebase Console (default 14 months).
Upon account deletion, all personal data is erased within 30 days. Aggregated, anonymised analytics data that cannot be linked back to you may be retained.

9. Account & Data Deletion

You can delete your account at any time from within the App:

Profile → Settings → Delete Account

Alternatively, email solance.lab@gmail.com and we will process your deletion request within 30 days. See our Data Deletion page for full details.

10. Data Security

All data is encrypted in transit using TLS/HTTPS.
Data stored in Firestore is encrypted at rest by Google.
Authentication is handled by Firebase Auth using OAuth 2.0.
API keys are not stored in the app binary — they are managed server-side via Cloud Functions.
No individual sleep data is accessible to anyone outside Solance Lab.

11. Children's Privacy

Drift is not directed at children under 13 (or under 16 in certain EU member states). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us at solance.lab@gmail.com and we will delete it promptly.

12. International Data Transfers

Your data may be processed in the United States and other countries where our service providers (Google Firebase, RevenueCat, OpenRouter) operate. Google LLC participates in the EU–U.S. Data Privacy Framework. Transfers to other processors are covered by Standard Contractual Clauses or equivalent safeguards.

13. Your Rights (EU/EEA Users)

Under GDPR you have the right to:

Access — request a copy of your personal data.
Rectification — correct inaccurate data.
Erasure — request deletion of your data ("right to be forgotten").
Restriction — ask us to pause processing of your data.
Portability — receive your data in a machine-readable format.
Object — object to processing based on legitimate interest.
Withdraw consent — at any time, with the same ease as giving it (especially for microphone/health data).
Lodge a complaint with your local supervisory authority (find your authority).

To exercise any right, email solance.lab@gmail.com. We will respond within 30 days.

14. Analytics & Device Identifiers

Firebase Analytics uses device identifiers (Android Advertising ID / iOS IDFV) to aggregate usage statistics. You can opt out via your device settings:

Android: Settings > Google > Ads > Delete advertising ID
iOS: Settings > Privacy & Security > Tracking

15. AI Coach & Automated Processing

The AI coach uses your sleep data to generate personalised insights. This is not automated decision-making with legal or significant effects — it is an advisory feature for personal wellness. AI responses are generated by Google Gemini (via OpenRouter) and should not be treated as medical advice.

16. Changes to This Policy

We may update this policy from time to time. Material changes will be notified via an in-app notice. The "Last updated" date at the top of this page will always reflect the most recent revision. Continued use of the App after notification constitutes acceptance of the updated policy.

17. Contact Us

For any privacy questions or to exercise your rights:

Solance Lab
Email: solance.lab@gmail.com
Response time: within 30 days