Privacy Policy
Good Sleep Tracker
This policy explains how this application handles information and how to contact us about privacy.
Information we process
Good Sleep Tracker stores the name you optionally enter, your sleep goal, reminder preferences and your sleep journal on your iPhone. Journal entries include an identifier, bedtime, wake time, your quality rating, your optional note and an update timestamp. Duration is calculated from your times. The app automatically obtains a random installation secret, stores it in the iPhone Keychain, and uses it to synchronize journal entries with our backend. The backend stores a hash of that secret, an internal installation identifier, its creation time and your journal entries in PostgreSQL. Your name, goal and notification preferences are not uploaded. We do not use accounts, advertising identifiers, analytics SDKs, location, HealthKit, a microphone or a camera. Our service and its hosting infrastructure receive network requests, including IP addresses and technical request information. The application keeps IP-based rate-limit counters temporarily in process memory and writes operational logs containing request identifiers, route names, response status, timing and technical error codes, without journal content or installation secrets.
How we use information
We use journal entries to save and synchronize your sleep history and provide your own CSV export. Sleep duration, statistics and prioritized general wellness tips are calculated on your iPhone from your entries and goal. Your local name personalizes the interface. Your reminder settings schedule local notifications on your device. The installation credential authorizes access to your own server records. Technical request information is used to operate, protect and troubleshoot the service. This app provides a personal wellness journal and does not diagnose or treat a medical condition.
Service providers and sharing
The backend and PostgreSQL database are hosted on Railway, which processes data and technical network information as our infrastructure provider. Railway infrastructure may maintain request, security and operational logs under its own service practices. We do not sell your journal or share it with advertisers, and the app includes no analytics or external recommendation provider. When you choose Export CSV, iOS creates a local export and you decide which app or destination receives it through the system share sheet. That destination handles the exported copy according to its own practices. We may disclose information when legally required. We do not operate an email delivery or feedback system in the app; the policy contact address is for privacy inquiries only.
Data retention
Your on-device journal and preferences remain until you delete them or remove the app, subject to iOS storage and backup behavior. Server journal entries remain until you delete an entry or use Delete all journal data. Individual deletion leaves only an entry identifier, update timestamp and deletion marker so an older offline change cannot restore it; these markers remain until all installation data is deleted. The hashed installation credential and installation metadata remain until that deletion. The Keychain secret is device-bound, is not synchronized through iCloud Keychain and may survive uninstalling the app. We do not set or promise a fixed retention duration for Railway infrastructure logs or provider-managed backups. If infrastructure backups exist, deleted information may remain there until those copies expire under the provider's configuration. There is no app-operated backup archive. Device backups and copies you export are controlled separately by you and the services you choose.
Deleting your information
Delete a night from its detail screen to remove it from your journal; an offline deletion is queued until the next successful synchronization. Settings includes Delete all journal data. If an installation credential exists, this requires an internet connection and deletes the server installation, its credential hash and all associated entries and deletion markers before clearing the local journal, profile and credential. If the server cannot be reached, the app keeps your journal and asks you to retry. Removing the app alone does not send a server deletion request. Because there is no account or recovery mechanism, we cannot restore or locate your journal for you after the installation secret is lost. Delete your data from the app before removing it when possible. A deletion affects live app storage, not independently exported files, device backups or any provider backup copies awaiting expiry.
Permissions and your choices
Notifications are the only optional permission requested by the app. They are requested when you save enabled wake-up, bedtime or journal reminders. These are local notifications; notification content is scheduled on the device and no push notification service is used by our backend. You may turn reminders off in the app or withdraw permission in iPhone Settings at any time. Without notification permission the journal, statistics, tips and synchronization still work. These reminders are not a guaranteed alarm and may be affected by Focus, silent mode and iOS settings. The app does not request access to contacts, photos, location, health records, camera or microphone.
Your privacy rights
You can inspect, edit, export and delete your sleep entries in the app without signing in. Depending on where you live, you may have rights to access, correct, erase or restrict processing of your personal data, object to processing or request portability, and complain to your local data protection authority. For privacy questions or rights requests, contact romillysatterley09@icloud.com. Please do not email your installation secret or sensitive sleep notes. We may need enough information to understand a request, but we have no account directory or email-to-journal lookup; the in-app controls are the direct way to access and remove installation-scoped data.
Security
The app communicates with the public backend over HTTPS. Each installation uses its own cryptographically random secret rather than shared credentials. The iPhone stores it in the device-only Keychain with access after the first unlock. The server stores a SHA-256 hash and checks authorization for every private request. Database queries scope records to that installation and use parameterized statements. Local journal files use iOS file protection and atomic writes. Requests are validated and limited in size and rate. No security measure is absolute. Protect your device and exported files; possession of an installation secret permits access to its server journal, and there is no password reset or cross-device recovery.
Children’s privacy
Good Sleep Tracker is designed for adults and is not directed to children. We do not knowingly solicit children's personal information. If you believe a child has provided personal information, contact romillysatterley09@icloud.com so we can discuss available steps. The app does not collect a date of birth or perform age verification.
Changes to this policy
We may update this policy when app functionality, infrastructure or processing practices change. The current policy is available through the Privacy Policy link in Settings and on this public page, with its effective date. Review it periodically. Material changes will be reflected in the updated policy and, when appropriate, the app's release information.