Privacy Policy
Last updated: October 28, 2026
Mustafa Berkay Mutlu (“we,” “us,” or “our”) operates the Rested mobile application (the “App”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App.
By using the App, you agree to the collection and use of information in accordance with this policy.
1. Information We Collect
1.1 Health Data
We access health data from your device’s health platform:
- Apple HealthKit (iOS): Sleep records including duration, sleep stages (deep, light, REM, awake), and related metrics
- Google Health Connect (Android): Sleep sessions and sleep stage data
Important: We only read health data. We never write to or modify your health data.
1.2 Information You Provide
- Sleep Goals: Target sleep duration, bedtime, and wake time preferences
- Schedule Information: Work schedule type (regular, shift patterns)
- Morning Check-ins: Daily energy ratings, tags, and optional notes
- Action Completions: Tracking of sleep hygiene habits (caffeine cutoff, light exposure, etc.)
- Notification Preferences: Your preferred reminder times and settings
1.3 Calendar Data
If you grant calendar access, we read calendar events to help identify your work schedule. We only read calendar data and never create, modify, or delete calendar events.
1.4 Automatically Collected Information
- Crash Reports: If you opt-in, we collect crash logs and error reports to improve app stability
- Device Information: Device model, operating system version, and app version (for crash reports only)
1.5 Usage Data and Diagnostics
If you opt in to the single “Usage Data & Diagnostics” consent, we collect first-party analytics and diagnostics to understand how the App is used and to fix crashes:
- Product interaction (Mixpanel): Anonymous screen views and feature-usage events. (Legal basis: consent; you opt in during onboarding or in Settings)
- Crash and performance diagnostics (Sentry): Anonymous crash logs and performance traces. (Legal basis: consent; you opt in during onboarding or in Settings)
This data is first-party only. We do not track you, we do not use any device ad ID, and we do not share this data with advertisers or any third party for measurement across companies. There is no third-party ad or attribution SDK in the App.
Aggregate install attribution (no tracking): We use Apple Search Ads attribution on iOS via Apple’s AdServices token and the Google Play install referrer on Android, together with Apple’s privacy-preserving SKAdNetwork aggregate reporting. These provide campaign-level, aggregated counts only: no personal data, no device-level ad ID, and no cross-app tracking. (Legal basis: legitimate interest; standard, aggregate attribution that does not require consent and does not track you)
2. How We Use Your Information
We use the collected information to:
- Provide personalized sleep recommendations based on your schedule
- Track your sleep patterns and calculate sleep debt
- Send timely reminders for sleep hygiene actions
- Generate AI-powered sleep insights (processed entirely on your device)
- Improve app stability through crash analysis (if opted-in)
- Understand how the App is used to improve it (first-party analytics, if opted-in)
- Process subscription purchases
- Measure the effectiveness of advertising campaigns using aggregate, non-tracking attribution only
3. AI and On-Device Processing
Our App includes AI-powered sleep coaching features. All AI processing happens entirely on your device:
- The AI model is downloaded and stored locally on your device
- Your sleep data is analyzed on-device only
- No sleep data is sent to external servers for AI processing
- Insights are generated and stored locally
4. Third-Party Sub-Processors
| Service | Purpose | Data Region | Privacy Policy |
|---|---|---|---|
| Mixpanel | Anonymous first-party analytics (opt-in) | European Union | Privacy Policy |
| Sentry | Crash reporting (opt-in) | European Union | Privacy Policy |
| RevenueCat | Subscription management | United States | Privacy Policy |
| Apple (AdServices) | Apple Search Ads attribution (iOS only, aggregated, no personal data, no tracking) | United States | Privacy Policy |
| Apple / Google | App distribution and payments | Per their policies | Apple / Google |
Each service processes only the data described above and acts as a first-party processor on our behalf. None of them receives your data for their own ad targeting or tracking across companies. Cloud data (excluding subscription data) is stored in the European Union.
5. Data Storage and Security
5.1 Local Storage
Most of your data is stored locally on your device in an encrypted database:
- Sleep records and statistics
- User settings and preferences
- Morning check-ins and action completions
- Calendar import data
- AI-generated insights
5.2 Cloud Storage
The only data stored externally:
- Crash reports (Sentry) - if opted-in
- Subscription status (RevenueCat) - required for premium features
5.3 Device Backups
Your app data may be included in automatic device backups:
- iOS: iCloud Backup (managed by Apple)
- Android: Google Auto Backup (managed by Google)
These backups are encrypted and managed by Apple/Google according to their privacy policies. We do not have access to your backup data.
5.4 No User Accounts
The App does not require or create user accounts. There is no server that stores your personal data.
6. Data Retention
- Local data: Stored on your device until you delete it or uninstall the App
- Crash reports: Retained by Sentry for 90 days
- Subscription data: Retained by RevenueCat as required for purchase validation
- First-party analytics: Retained by Mixpanel per its data retention policy; withdrawing the Usage Data & Diagnostics consent stops new collection immediately
7. Your Rights (GDPR)
Under the General Data Protection Regulation (GDPR), you have the right to:
7.1 Access Your Data
All your data is stored locally on your device. You can view it within the App.
7.2 Export Your Data
You can export all your data from the App:
- Go to Settings > Privacy > Export My Data
- All your data is exported as a JSON file that you can save or share
- Export includes: sleep records, settings, achievements, check-ins, and all preferences
7.3 Delete Your Data
You can delete your data by:
- Using the in-app deletion feature: Settings > Privacy > Delete My Data
- Uninstalling the App (removes all local data)
- Contacting us to request deletion of crash reports stored on Sentry
When you delete your data through the app:
- All local data is permanently erased
- Your Support ID is cleared from analytics services
- Scheduled notifications are cancelled
7.4 Data Portability
Use the Export My Data feature in Settings > Privacy to download all your personal data in a machine-readable JSON format.
7.5 Opt-Out
You can opt-out of each purpose independently:
- Usage data and diagnostics (Settings > Privacy > Usage Data & Diagnostics)
- Health data sync (Settings > Health Sync)
- Calendar sync (Settings > Calendar)
- Notifications (Settings > Notifications)
Withdrawing the Usage Data & Diagnostics consent stops new first-party analytics and diagnostics collection immediately.
8. Children’s Privacy
The App is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.
9. International Data Transfers
If you enable crash reporting, your data may be transferred to servers located outside your country. Sentry maintains data processing agreements that comply with GDPR requirements.
We do not share your device or app identifiers with any ad or attribution provider, and we do not use any device ad ID.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by:
- Posting the new Privacy Policy in the App
- Updating the “Last updated” date
Your continued use of the App after changes constitutes acceptance of the updated policy.
11. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us:
Email: privacy@laughter.app
Operator: Mustafa Berkay Mutlu
Jerusalemer Straße 43, 10117 Berlin, Germany
12. Legal Basis for Processing (GDPR)
We process your data based on:
- Consent, obtained per purpose:
- Health data access and calendar access (each granted when you enable the relevant feature).
- Usage data and diagnostics (Mixpanel product interaction, Sentry crash/performance), granted via the single “Usage Data & Diagnostics” consent. This is first-party only and is never used for advertising or shared with third parties for tracking.
- Contract Performance: Providing the App’s core functionality
- Legitimate Interest: Improving app stability and user experience, aggregate campaign attribution (Apple Search Ads via AdServices, Google Play install referrer, SKAdNetwork; aggregated, no personal data, no tracking)
13. California Consumer Privacy Act (CCPA)
We do not sell or share personal information as defined by the CCPA. We do not share device or app identifiers with any ad or attribution provider, and we do not use any device ad ID for cross-app tracking. California residents may contact us at the email below for any data requests.
Email: privacy@laughter.app
14. Supervisory Authority
If you are in the European Union and believe we have not adequately addressed your data protection concerns, you have the right to lodge a complaint with your local data protection authority.
For Germany: Der Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI)