Sleep Sage Beta privacy notice

Open public test

Sleep Sage Beta is an open public test operated by the Sleep Sage team for people aged 18 or older who live in Australia. Sleep Sage Beta is available as an Android app and as a web app at sleepsage.app; both use the same account and the same beta services. Anyone with the public app link can create an account using an email address, a password of at least 8 characters, and a six-digit confirmation code sent by email. The test period ends on 31 December 2026. Up to 50 accounts can be enrolled in the AI beta at a time. Places are given automatically, in the order accounts accept this notice, while places remain. Accounts without an AI place can still sign in, read the notice, export data, and delete their account, but cannot upload documents or generate cues and speech. Sleep Sage is not a medical device and makes no claim about sleep, memory, learning, therapy, or efficacy.

You may only upload documents you created yourself or have permission to use, such as course materials your university or lecturer allows you to use with AI study tools. Educational content about health and medicine, such as lecture slides, is fine. Do not upload confidential material, health details about yourself or another identifiable person (including identifiable patient cases or images), or another person's personal information. Do not attempt to bypass quotas or system limits. The operator may disable an account that breaks these rules.

If you have questions or need help, email the Sleep Sage team at hieu7337@gmail.com. Feedback is voluntary. The operator handles only what you choose to send. Never send documents, audio, passwords, or confirmation codes.

What is stored and processed

Concepts, cues, canonical WAV clips, sessions, appearance preferences and sanctuary preferences, sticker layouts and inventory, pending gifts, aggregate playback checkpoints, consent records, exports, and deletion requests are stored by the beta services in Sydney, Australia. Your account email address is also stored by the beta services in Sydney, Australia, for sign-in, sign-up confirmation, invitations, and recovery.

A document you upload is kept in Sydney only while it is processed. The uploaded file is deleted after processing finishes, usually within two hours of upload, and a file that could not be processed is deleted 7 days after upload. The text extracted from it is kept for making cues until you tap Done with this deck or until 7 days after processing, whichever comes first. After that, only page labels remain with your concepts and cues, and making more cues from that deck needs a new upload.

To find concepts and draft cues, the extracted text is sent to third-party AI service providers. Only a cue that you explicitly approve is sent to an AI speech provider to make its audio. AI providers may process this text outside Australia.

Sign-up confirmation, invitation, and recovery emails are sent through the operator's email provider (an SMTP processor, Gmail by Google).

Speech is AI-generated, may change during the beta, and may include an inaudible watermark added by the speech provider. The beta does not use OCR, analytics, advertising identifiers, wearable data, chat, tester prompts, or generated bedtime scripts.

Web app

The web app at sleepsage.app is served by the same Sleep Sage server in Sydney that the Android app uses, and your documents, cues and audio are stored in the same place. Cloudflare provides the sleepsage.app domain name service only and does not carry app traffic.

In a browser, your sign-in is kept in that tab's session storage and ends when you close the tab. If you tick Keep me signed in, it is kept in the browser's local storage on that computer until you sign out. Your theme and personalisation choices are kept the same way and are removed when you sign out. Do not tick Keep me signed in on a shared computer. The web app sets no cookies and loads no analytics, advertising, or third-party scripts.

Nights play only in the Android app. The web app does not keep audio for offline use: speech previews stream from storage in Sydney through a short-lived link, and exports are saved by your browser to your downloads. Crash reporting is not available in the web app.

Personalisation rewards

Sleep Sage can issue one personalisation gift for a local bedtime-start date after an armed session accumulates three hours of active sequence playback, including planned quiet gaps. It stores the date, timezone, bounded 12-hour active window, aggregate playback milliseconds, qualification time, gift choices, and selected sticker. Up to 32 unsubmitted qualified records are retained on this device without expiry; when full, playback continues and new gift qualification pauses until submissions are resolved.

Sleep Sage does not store a per-second playback history or infer when you are asleep. Silent lead-in, preview, buffering, paused, interrupted, and seeked time do not qualify. There are no streaks and no penalty for missing a day. Gifts have no monetary value.

Provider privacy limits

Sleep Sage uses only AI provider settings that keep no copy of a request after it is answered (zero data retention) and that do not let the provider use your text for training. Requests also turn off provider-side storage, logging, and caching where those controls are offered.

Zero data retention is not an absolute no-processing guarantee. Providers may briefly hold a request in memory while answering it, and their own security and legal policies still apply. Deletion cannot retroactively remove non-content billing or security records a provider is legally required to retain.

Do not upload confidential or sensitive information, or third-party personal information that you are not authorised to disclose. The beta does not attempt to detect sensitive content.

Optional crash reports

Crash reporting through Sentry is available in the Android app only, and is off by default and opt-in. If you choose to turn it on, Sleep Sage sends the error type and stack trace plus the app version and release. Error messages and request, user, and device details are removed from app error reports before they are sent; reports of native Android crashes can also include the Android version, device model, and other basic device details. Sentry may process and store reports outside Australia.

Reports do not intentionally include replay, tracing, profiling, request bodies, signed URLs, document names or content, generated phrases, credentials, email addresses, or IP addresses. Turning crash reporting off stops future reports.

Quotas and spending limits

Each account, including the operator's, is limited to five active documents, 25 MB per upload, 75 MB of aggregate source storage, 120 generated clips, 10 sessions, and 120 distinct items per session across documents. PDFs are limited to 150 pages. Each document can have 12 selected concepts and one approved cue per concept.

External generation has a US$50 monthly in-app reservation ceiling that covers the operator and all testers together. Each enabled account has an assigned monthly allowance: US$1.00 by default and never more than US$2.00. Total hosted storage across all accounts is capped at 2 GiB; if this cap is reached, uploads pause for everyone. Account funding is managed separately and may vary over time. Available account funding may stop generation before any in-app limit is reached. Review, playback, export, and deletion remain available when AI is paused.

Exports, deletion, and recovery

You can request one export at a time. The ZIP includes AI-generated WAV files, sessions and items, session revision records, appearance and sanctuary preferences, layouts, sticker inventory, reward claims and aggregate checkpoints, concepts, cues, source provenance (with slide text while it is still kept), approvals, provider, job, artifact cleanup and usage metadata, checksums, and a versioned manifest. Uploaded files are not included; Sleep Sage deletes them after processing. The usage ledger contains no prompts, excerpts, cues, or responses. A ready server copy becomes unavailable after one hour and stays queued until storage deletion is acknowledged; the app deletes its temporary copy after the share sheet closes.

Deleting your account in the app requires your current password. After acceptance, the app stops playback and clears temporary audio plus the current account's local appearance and draft caches, including personalisation caches. Hosted source and audio objects, personalisation data, other database rows, pending exports, and the Auth user are deleted within 24 hours. If a technical fault stops a deletion from finishing, the operator is alerted and finishes it.

You can leave the beta at any time. To leave, first request an export and save the ZIP file if you want to keep a copy, because deleting your account also deletes any pending export. Then delete your account in Settings and uninstall the app. If you cannot sign in, you can email hieu7337@gmail.com to ask the Sleep Sage team to delete your account for you.

Keep your original documents. Sleep Sage deletes its copy after processing, and you need the file again to make more cues once the slide text is deleted. This beta uses free-tier infrastructure, has no uptime or recovery guarantee, and may lose data. Do not upload the only copy of anything important.

Contact

Email hieu7337@gmail.com.