Privacy Policy

1. Interpretation and Definitions

1.1 Interpretation

Capitalised terms have the meanings assigned to them in this Policy. The same definitions apply regardless of whether terms appear in singular or plural.

1.2 Definitions

• Account means the anonymous identifier created on your device that lets us associate your activity and subscription with you, without requiring a username, password, or email address.
• Application means the mobile application titled “Yawn.”
• Company, We, Us, or Our refers to Yawn, operated as an Australian sole trader business (ABN 66 249 914 730).
• Device means any device used to access the Service, including iPhone, iPad, or other supported hardware.
• Personal Data means any information that identifies or can reasonably be linked to an individual.
• Sleep-Related Data means information you provide relating to your sleep patterns, habits, anxieties, and self-reported wellness, including onboarding quiz responses, voice recordings (if you opt in), Sleep Age inputs, and listening preferences.
• Sleep Age means the wellness estimate calculated from your inputs during onboarding and ongoing use of the Service. The Sleep Age is a wellness indicator, not a medical or clinical assessment.
• Service has the meaning given in the introduction to this Policy.
• Usage Data means data collected automatically through use of the Service, including device information, activity logs, performance data, and analytics.
• User Content means text inputs, voice recordings, story favourites, and other content you submit through the Service.
• Website means joinyawn.com.
• You means the individual using the Service.

2. Information we collect

We collect three categories of information.

2.1 Information you provide directly

When you use Yawn, you may provide:

• Onboarding quiz responses — your age range, sleep habits, things keeping you awake, and other inputs you choose to provide during the initial setup
• Voice recordings — if you opt in to the optional 30-second voice analysis during onboarding (this is optional and you can skip it)
• Listening preferences — stories you favourite, vibes you select, sleep timer durations you set
• Communications with us — when you email us for support, reply to surveys, or contact us through any other channel

2.2 Information collected automatically

When you use the Service, we automatically collect Usage Data:

• Device information — device type, operating system version, app version, locale, time zone
• Usage data — which stories you play, when you play them, how long you listen, when the app is opened
• Performance data — crash reports, error logs, and app performance metrics
• Anonymous identifiers — a randomly-generated identifier we use to associate your activity with your subscription, without linking it to your real-world identity

We do not collect your name, email address, or phone number unless you provide them by contacting us directly.

2.3 Information from third parties

We receive information from:

• Apple — your subscription status, transaction history, and an anonymised customer identifier when you purchase a Yawn subscription through the App Store. We do not receive your Apple ID, email address, or payment details from Apple.
• RevenueCat — subscription management data including renewal status, trial status, and entitlement information.

3. How we use your information

We use your information to:

• Provide and operate the Service (selecting stories that match your inputs, playing audio, tracking your listening history)
• Calculate and display your Sleep Age and related metrics
• Manage your subscription, including trials, renewals, and cancellations
• Improve the Service by understanding what content works, what doesn’t, and how to make Yawn better
• Train and improve our recommendation systems and content models using aggregated or anonymised data only
• Communicate with you about the Service when necessary (technical issues, important updates, responses to your inquiries)
• Detect, prevent, and address technical issues, fraud, or abuse
• Comply with legal obligations

We do not sell your Personal Data. We do not share your Personal Data with advertisers, data brokers, or other third parties for marketing purposes. We do not display advertisements in the Service.

4. Voice recordings — additional protections

If you choose to record a voice sample during onboarding, the following applies:

• Recording is entirely optional. You can skip this step at any time.
• The audio file is processed to extract general fatigue and tone indicators.
• The original audio recording is deleted from our systems within 30 days of processing.
• We do not use voice recordings for voice biometric identification.
• We do not share voice recordings with any third party.
• Voice recordings are never used to train AI voice models or generate synthetic speech.

If you want your voice recording deleted before the 30-day period, email hello@joinyawn.com.

5. Aggregated and anonymised data

We may aggregate or anonymise data we collect so that it can no longer reasonably be linked to you. We may use, share, or publish this aggregated or anonymised data for purposes including:

• Improving and optimising the Service
• Understanding how the Service is used in general
• Internal research and analytics
• Reporting trends to investors, partners, or in marketing materials

Aggregated or anonymised data is not Personal Data and is not subject to the protections in this Policy.

6. How we share your information

We share information only in the limited circumstances below.

6.1 Service providers

We share information with third-party services that help us operate Yawn:

• Apple (App Store, StoreKit) — processes your subscription payments. Subject to Apple’s privacy policy.
• RevenueCat — manages subscription state. Subject to RevenueCat’s privacy policy at revenuecat.com/privacy.
• Supabase — hosts our backend database. Data is stored in Supabase’s secure infrastructure. Subject to Supabase’s privacy policy at supabase.com/privacy.
• Cloudflare (R2 Storage) — stores and serves audio files. Subject to Cloudflare’s privacy policy at cloudflare.com/privacypolicy.
• ElevenLabs — used to generate story audio. Your data is not sent to ElevenLabs during normal Service use; audio is generated by us in advance and stored on our infrastructure.
• PostHog — provides anonymous product analytics. Configured to exclude personally identifying information. Subject to PostHog’s privacy policy at posthog.com/privacy.
• Sentry (or similar error monitoring) — captures crash and error reports to help us fix bugs.

Each of these providers has been selected because they meet our standards for data protection, including encryption in transit and at rest.

6.2 Legal requirements

We may disclose information if required by law, including:

• In response to valid legal process (subpoenas, court orders) issued by Australian courts or, where applicable, courts in your jurisdiction
• To protect the rights, safety, or property of Yawn, our users, or others
• To investigate or prevent fraud, security issues, or abuse of the Service

6.3 Business transfers

If Yawn is acquired, merged, or transferred, your information may be transferred as part of that transaction. We will notify you before this happens through an in-app notice or update to this Policy.

6.4 With your consent

We may share your information for other purposes if you direct us to do so or otherwise give us your consent.

7. Where your data is stored

Yawn is operated from Australia, but the Service uses globally distributed infrastructure to provide fast performance. Your data may be stored and processed in:

• Australia
• The United States (Supabase, Cloudflare, RevenueCat, PostHog)
• The European Union (where Cloudflare’s network routes through European data centres)

When data is transferred outside your country of residence, we ensure appropriate safeguards are in place, including reliance on Standard Contractual Clauses where applicable.

8. How long we keep your information

We keep your information for as long as you have an active Yawn subscription or trial, plus a reasonable period afterward for the following purposes:

• Active users: Information is retained while you actively use the Service.
• After cancellation: Subscription and usage history is retained for 24 months after cancellation, primarily for tax and accounting purposes.
• Voice recordings: Deleted within 30 days of processing (see Section 4).
• Crash and error logs: Retained for 90 days.
• Anonymous analytics: Retained indefinitely in aggregated form that cannot be linked back to you.
• Backups: Standard infrastructure backups may persist for a limited period after deletion before being fully purged.

You can request deletion of your data at any time (see Section 10).

9. Children’s privacy

The Service is not intended for children under 16. We do not knowingly collect information from anyone under 16. If you believe a child under 16 has provided us with information, contact hello@joinyawn.com and we will delete the information promptly.

If we become aware that we have collected information from a child under 16 without verified parental consent, we will take steps to remove that information.

10. Your rights

You have rights regarding your Personal Data. Specific rights depend on your location, but include:

10.1 Rights available to all users

• Access — request a copy of the information we hold about you
• Correction — request that we correct inaccurate information
• Deletion — request that we delete your information (subject to legal retention requirements)
• Withdrawal of consent — withdraw consent for processing where consent is the legal basis
• Complaint — lodge a complaint with us or your local privacy regulator

10.2 Australian users (Privacy Act 1988)

You have rights under the Australian Privacy Act 1988, including the right to access and correct your Personal Data. You can lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

10.3 European Economic Area, UK, and Switzerland users (GDPR)

You have rights under the General Data Protection Regulation, including the rights of access, rectification, erasure, restriction of processing, data portability, and objection. You can lodge a complaint with your national data protection authority.

Our legal bases for processing your information are:

• Contract — processing necessary to provide the Service you subscribed to
• Legitimate interests — improving the Service, preventing fraud, ensuring security
• Consent — for optional features like voice recording
• Legal obligation — where required by law

10.4 California users (CCPA/CPRA)

You have rights under the California Consumer Privacy Act, including the right to know what personal information we collect, the right to delete personal information, the right to opt out of sale or sharing (we do not sell or share personal information), and the right to non-discrimination.

10.5 How to exercise your rights

To exercise any of these rights, email hello@joinyawn.com with the subject line “Privacy Request.” We will respond within 30 days. We may need to verify your identity before processing certain requests.

11. Security

We use industry-standard security measures to protect your information, including:

• TLS encryption for all data in transit
• Encryption at rest for stored data
• Access controls limiting which Yawn personnel can access user data
• Regular security reviews of our infrastructure

No security measure is perfect. If you believe your Account has been compromised, contact us immediately at hello@joinyawn.com.

12. Account creation and anonymous use

Yawn does not require you to create an account with a username, email address, or password. When you first open the app, we generate an anonymous identifier that lets us associate your activity and subscription with your Device.

This means:

• If you delete the app and reinstall it on the same Device, your data may be recovered through your Apple subscription.
• If you switch to a new Device, your subscription will transfer through Apple, but your in-app history may not transfer automatically.
• We cannot recover your data if you lose access to the original Device and Apple ID.

We may introduce optional account features in future versions of the Service. If we do, we will update this Policy.

13. Third-party links and services

The Service may contain links to third-party websites or services. We do not control and are not responsible for the content, privacy practices, or terms of these third parties. We encourage you to review the privacy policies of any third-party services you access through Yawn.

14. Cookies and tracking technologies

The Yawn mobile Application does not use cookies. The Website (joinyawn.com) uses essential cookies only — no tracking cookies, no advertising cookies, no analytics cookies that identify you personally.

15. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will notify you through an in-app notice and update the “Last updated” date at the top of this Policy. Continued use of the Service after changes constitutes acceptance of the updated Policy.

16. Contact us

For privacy questions, requests, or complaints:

Email: hello@joinyawn.com

For general support, the same address: hello@joinyawn.com