Sleep Police Privacy Policy

Last updated: 2026-10-22

This Privacy Policy explains what information Touchgrass Health, LLC ("Touchgrass Health," "we," "us," or "our") collects when you use Sleep Police, how we use and share it, how long we keep it, and the choices you have. It covers the Sleep Police mobile apps, web app, website, and support services.

Sleep Police is for adults 18 and older. It is not directed to children or teens.

Contact

For privacy questions, data requests, or account deletion, contact us at support@touchgrass.health or through https://thesleeppolice.com/support.

Summary

• Sleep Police blocks apps you choose during bedtime blocks you set. To do that, and to hold you to the commitments you make, it collects information about your schedule, your devices, and whether blocking stayed on.
• On Android, Sleep Police reads which apps were in the foreground around your scheduled blocks, and which apps are installed so you can choose what to block. On iPhone, Apple's Screen Time keeps your app choices private; we store only an encoded selection we cannot read as app names.
• We do not sell personal information, and we do not use it for advertising.
• We use service providers to run Sleep Police, including Stripe for payments, Plivo for text messages, and two AI providers for specific features described below.

Information We Collect

Account Information

• Your phone number, which we use to create your account and sign you in.
• Account details such as your language, country, and time zone.
• Messages you send us and records of support requests.

Devices And App Installs

When you sign in on a phone, we collect information about the device and the Sleep Police installation:

• device type, operating system and version, device model, brand, and manufacturer;
• app version and build number;
• time zone, country, and language settings;
• mobile carrier name and network country codes, where available;
• identifiers for the Sleep Police installation and for push notifications and iPhone Live Activities.

We also use a device identifier to recognize the same phone when Sleep Police is reinstalled. On Android this is the app-specific device ID provided by the operating system (Android ID); on iPhone it is a random identifier stored in your device's keychain. We store only a keyed hash of this identifier, scoped to your account. We use it to keep your device history consistent, and to prevent and detect circumvention of blocks you have committed to. We do not use it for advertising.

Blocking Setup

• Your schedules and blocks, including their names, times, and days.
• The apps you choose to block. On Android, this includes app package names and app names. On iPhone, this is an encoded Screen Time selection created by Apple, which we cannot read as app names, along with counts of selected apps, categories, and websites.
• On Android, Sleep Police reads the list of apps installed on your phone so you can choose which to block and so we can suggest apps to block. We receive the names and package names of eligible apps for that purpose.
• Settings you choose, such as block exceptions, penalty amounts, and places where blocking does or does not apply.

Enforcement Activity

To show whether a block ran and to enforce the commitments you make, the app reports:

• when blocks were locked, started, and ended on your device, and whether blocking was active;
• the status of the permissions blocking depends on, such as Screen Time, Usage Access, Accessibility, notifications, and location;
• periodic health signals, device clock and time zone changes, and app installation continuity.

On Android:

• Usage Access. Sleep Police reads app usage records for the time around each scheduled block. It uploads which apps were in the foreground and when (app name, package name, and start and end times), so we can tell whether blocked apps were used during the block. This can include apps you did not choose to block.
• Accessibility. Sleep Police uses Android Accessibility only to notice which app is opening, so it can return you to Sleep Police when a blocked app is opened during a block. It does not read screen content or what you type. When a blocked app is opened during a block, we record the app's name, package name, and the time.

Location

• Saved places. If you save places where blocking should or should not apply, we store the name, address, coordinates, and radius you choose.
• Location status. If you enable location-based blocking, the app uses your device's location, including in the background, to check whether you are inside a saved place. It reports whether you are inside or outside, which saved place is closest, the approximate distance to it, and how accurate the reading was. It does not send us your raw coordinates for this check.
• Approximate location from your IP address. Our web host provides an approximate location for your IP address. We use it to estimate sunrise and sunset times for the app's timeline and theme, and to preselect your country when you enter a phone number. It is not used to decide whether blocking applies.

Home Wi-Fi Protection

If you set up Home Wi-Fi protection, your home network uses a DNS service operated by ControlD. We send ControlD your network's public IP address to connect it to your profile. ControlD processes the DNS requests made on your home network, including the domain names devices look up, and we read that activity to operate and verify Home Wi-Fi protection. We do not receive the content of the web pages you visit.

Payments

If you set up payments or penalties, Stripe processes your card details. We do not store full card numbers. We store:

• the Stripe identifiers for your account and payment methods;
• card brand, last four digits, and expiration date;
• penalty amounts, payment attempts, refunds, and payment history;
• records of the billing terms you accepted, including the time, your IP address, browser or device, and language.

If you ask for a review of a penalty or refund, we store your messages and the explanations you gave for paid breaks.

Text Messages

We use Plivo to send text messages. We send:

• sign-in links and links that open the app;
• Home Wi-Fi setup information, when you request it;
• warnings when your device stops reporting during a block you committed to;
• a notice when you request account deletion, and another when the deletion is complete.

You can reply STOP to opt out of text messages where your carrier supports it. Opting out of sign-in messages may prevent you from signing in.

Bug Reports

If you send a bug report from the app or website, we collect your description, the screen you were on, app and device details, and any screenshot or image you choose to attach. You can review or remove the image before sending. Bug reports are stored in Linear, our issue-tracking tool, without your phone number.

Diagnostics, Crash Reports, And Product Analytics

• Crash reports and app performance. We use Sentry to collect crash and error reports from the apps, website, and servers. From the apps, it also collects performance timings, such as how long the app takes to start and how long screens and requests to our servers take to load. We configure it not to collect personal information such as phone numbers.
• Screen recordings. While you use the apps, Sentry records what Sleep Police shows on screen and where you tap, so we can find where the app is confusing or broken. It records only Sleep Police's own screens, not other apps, and nothing while the app is in the background. Recordings include everything Sleep Police shows, such as your phone number, text you type, the names and icons of your installed apps, your places and their addresses, the last four digits of your card or bank account, and messages you send us.
• Crash reports, performance timings, and recordings are linked to your Sleep Police account ID, a random identifier, not to your phone number.
• Diagnostic reports. When something goes wrong, the app may send us a short record of recent app events, such as screens opened and requests made, with the app version and platform. We keep these reports for 30 days.
• Product analytics. We may use PostHog to understand how Sleep Police is used, such as which screens are opened and which features are used, and to roll out changes gradually. We do not use it for advertising.

Website Cookies And Storage

The Sleep Police website uses cookies to keep you signed in and to complete sign-in securely. If we use product analytics on the website, PostHog may also store an identifier in your browser to recognize repeat visits. We do not use advertising cookies. The website also stores small values in your browser to complete sign-in, payments, and bug reports.

Server Logs

Our servers and hosting providers record technical information about requests, such as IP address, browser or app details, the page or feature requested, timestamps, and errors. We use these records to operate, secure, and debug Sleep Police.

How We Use Information

We use information to:

• create and secure your account and sign you in;
• run your schedules and block the apps you choose;
• check whether blocks ran as committed, and apply the penalties and block exceptions you agreed to;
• process payments, refunds, and disputes;
• send notifications and text messages about your account, sign-in, and blocks;
• recognize the same phone after the app is reinstalled;
• prevent, detect, and investigate fraud, abuse, and circumvention of blocks;
• diagnose crashes and errors, and provide support;
• improve Sleep Police;
• comply with legal, tax, and accounting obligations.

AI Features

Some features use AI models run by service providers:

• Suggestions. To suggest apps to block and to name blocks and places, we send TypeSafe Jev your block names, the names of your saved places and nearby place types, and the names and package names of apps installed on your Android phone. We do not send your phone number, coordinates, or addresses.
• Penalty reviews. When you ask for a penalty or refund review, we send Fireworks your messages, the explanations you gave for paid breaks, and the related payment amounts and times, to help evaluate the request.

These providers process the information to return a result to us. We do not allow them to use it for advertising.

How We Share Information

We do not sell personal information. We do not share personal information for advertising.

Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes.

We share information with service providers that operate parts of Sleep Police for us:

• Google Cloud, which hosts our servers and database;
• Vercel, which hosts our website;
• Stripe, for payments;
• Plivo, for text messages;
• Expo, for push notifications and app updates, and Apple and Google, which deliver notifications to your device;
• Google Maps Platform, for maps, place search, and location services;
• ControlD, for Home Wi-Fi protection;
• TypeSafe Jev and Fireworks, for the AI features described above;
• Sentry, for crash and error reporting, app performance, and screen recordings;
• PostHog, for product analytics;
• Linear, for bug reports and support.

We may also share information when the law requires it, to respond to legal process, or to protect the rights, safety, and security of our users, Touchgrass Health, or others. If Touchgrass Health is involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction.

How Long We Keep Information

We keep information while your account is active and as long as needed to provide Sleep Police, resolve disputes, prevent fraud and abuse, and meet legal, tax, and accounting obligations. Diagnostic reports are deleted after 30 days.

When you delete your account:

• You have 30 days to change your mind. Your account is deleted 30 days after you request it. Signing in with the same phone number before then lets you restore it. Until then, we sign you out on every device, start no new blocks, and stop push notifications.
• Charges you already owe still apply. Blocks that already happened are still decided and charged as our Terms describe. If you delete your account while a block is locked, that night is charged as a circumvention, and restoring your account doesn't undo the charge.
• After the 30 days, we delete your account. If a payment is still in progress, we finish it first. We delete your sign-in links, sessions, and the history snapshots we keep for support. We erase your phone number, name, profile photo, settings, device details, push tokens, saved places, the names of your schedules and app rules, your app choices, and the reasons and messages you wrote. We remove the IP address and browser details from your billing-terms records. We delete your customer record and saved cards at Stripe.
• What we keep. We keep a record of your blocks, penalties, payments, refunds, and accepted terms for 7 years after the deletion, with the personal details above erased, for billing, tax, accounting, and disputes. We keep security and audit logs for 2 years after the deletion. Our database backups are kept for 7 days, so deleted information can remain in a backup for about a week. Stripe keeps its own payment records under its privacy policy. Bug reports you sent stay in Linear unless you ask us to delete them.

We text you when you request deletion and again when it is complete. If you sign up again with the same phone number after your account is deleted, you start a new account with no history.

Your Choices And Rights

• Delete your account at https://thesleeppolice.com/account-deletion, in the app, or by emailing support@touchgrass.health. Your account is deleted 30 days after your request, and signing in before then restores it.
• Access, correct, or get a copy of your information, or object to or restrict how we use it, by emailing support@touchgrass.health. Depending on where you live, you may have these rights under law. We may need to verify your identity before acting on a request.
• Control permissions such as location, notifications, Usage Access, Accessibility, and Screen Time in your device settings. Turning off a permission that blocking depends on can stop blocking from working, and may count as a break in a block you committed to.
• Opt out of text messages by replying STOP.

Children And Teens

Sleep Police is for adults 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has given us personal information, contact support@touchgrass.health and we will delete it.

Where We Process Information

We process and store information in the United States. Our service providers may process information in other countries, whose data protection laws may differ from those where you live.

Security

We protect information with safeguards such as encryption in transit, access controls, and storing installation and device identifiers only as keyed hashes. No system is completely secure, so we cannot guarantee absolute security. Please keep your phone, phone number, and payment methods secure.

Changes To This Policy

We may update this policy. The date at the top shows when it last changed. If we make material changes, we will let you know in the app, on the website, or by other reasonable means.