Privacy Policy

Effective 9 September 2026 · Applies to the Sleepycamp app and sleepycamp.com

1. Who we are

Sleepycamp is made and published by Curtis Hunter, trading as Westflame, a sole trader established in the United Kingdom. Westflame is the data controller for the personal data described in this policy.

2. What we collect

We collect as little as the app needs to work. Here is everything, grouped by where it comes from.

Information you give us

• Account. When you sign in with Apple or Google we receive a unique account identifier from them and, depending on your choice at sign-in, an email address. Apple lets you hide your email, and that works with Sleepycamp. You choose a nickname. We do not ask for your real name, date of birth, phone number or a photo.
• Bedtime and wake time. The schedule you set, plus any one-night adjustments and your grace period setting.
• Morning check-in. If the app cannot tell how a night went, it may ask you. Your answer is stored with that night.
• Support messages. Anything you send to contact@westflame.co.uk, including your email address.

Information the app generates

• Night results. For each night: whether it was kept, missed or could not be judged, and the reason category (for example, the phone was used past the grace period). We do not record which apps you used or what you did.
• Your camp. Which objects you have earned, where they sit on the grid, your coin balance, purchases made with coins, streaks and milestones.
• Device signals used for detection. Whether the screen was locked and whether Sleepycamp was in the foreground. These signals are processed on your device to produce the night result. The raw signals are not sent to us.

Information collected automatically

• Subscription status. Whether you have an active trial or subscription, which plan, and the renewal date. This comes from Apple or Google through RevenueCat (see section 4). We do not see your card number or billing address.
• Product analytics. Events such as onboarding completed, night armed, night result, reveal watched, shop purchase, paywall viewed, trial started, subscribed. With each event: a random analytics identifier, app version, device model, operating system version, language and country. You can turn this off in Settings at any time (section 3).
• Crash and error reports. Technical details when the app crashes, so we can fix it.
• Notification token. If you allow notifications, a device token so the app can schedule your bedtime and morning reminders. Reminders are scheduled on the device; the token is not used for marketing.

What we do not collect

• No health data. Sleepycamp does not read HealthKit, Google Fit or any sleep sensor. It is not a sleep tracker.
• No location, contacts, photos, microphone or camera.
• No list of the apps on your phone or the apps you use.
• No advertising identifier. We do not use the Apple IDFA or Google Advertising ID and the app will never show you an App Tracking Transparency prompt, because it does not track you.

3. Why we use it, and the legal basis

Analytics opt-out. Settings has an analytics toggle. Switching it off stops new events being sent. Data already collected stays in aggregate statistics but is not tied back to you.

We do not use your data for advertising, we do not sell it, and we do not share it with data brokers.

4. Third parties who process data for us

These providers process data only to provide their service to us, under contracts that restrict what they can do with it.

We may also disclose data if the law requires it, or to protect our rights or the safety of users.

5. International transfers

Your account and camp data are stored in the European Economic Area, and analytics are processed in the EU. Some providers above (RevenueCat, Mailchimp, Vercel, Apple and Google) process data in the United States. Where data leaves the UK we rely on safeguards recognised under UK GDPR: the UK Extension to the EU–US Data Privacy Framework for certified providers, or the International Data Transfer Agreement / UK Addendum to the EU Standard Contractual Clauses. You can ask us for details of the safeguard used for a particular provider.

6. How long we keep it

• Account, camp and night results: for as long as your account exists. Deleting your account removes them (section 7).
• Local data on your device: until you delete the app or your account.
• Subscription records: for as long as needed to manage your subscription and to meet accounting and tax rules, usually six years after the last transaction.
• Analytics events: up to 12 months in identifiable form, then aggregated or deleted.
• Support emails: up to 24 months after the conversation ends.
• Backups: our database provider keeps rolling backups for up to 30 days; deleted data drops out of those within that window.

7. Deleting your account and data

Open Settings in the app and choose Delete account. It is not hidden and it does not require emailing us. Deletion removes your account identifier, nickname, email (if we had one), camp and night history from our systems. Where a record must be kept for legal reasons (for example a subscription transaction) it is anonymised so it no longer identifies you.

Deleting your account does not cancel a subscription. Subscriptions are managed by Apple or Google; see Support for how to cancel first.

If you cannot access the app, email contact@westflame.co.uk from the address linked to your account and we will delete it for you.

8. Your rights

Under UK GDPR (and, if you are in the EEA, the EU GDPR) you can ask us to:

• give you a copy of the personal data we hold about you (access);
• correct data that is wrong (rectification);
• delete your data (erasure);
• limit how we use it (restriction);
• send your data to you or another service in a usable format (portability);
• stop using your data where we rely on legitimate interests (objection), including analytics; and
• withdraw consent where we rely on it, for example by turning off notifications.

Email contact@westflame.co.uk. We answer within one month. We may ask you to confirm you control the account before acting.

If you are unhappy with how we handle your data you can complain to the UK regulator, the Information Commissioner’s Office: ico.org.uk/make-a-complaint, or by phone on 0303 123 1113. We would appreciate the chance to resolve it first. If you live in the EEA you can also contact your local data protection authority.

9. Children

Sleepycamp is for people aged 16 and over. We do not knowingly collect personal data from anyone under 16. If you believe a child under 16 has created an account, email us and we will delete it.

10. The website (sleepycamp.com)

The website is a static page. It sets no cookies and runs no analytics or advertising scripts. If you join the waitlist we send your email address to Mailchimp, which stores it and sends you the launch email on our behalf. Every email includes an unsubscribe link, and unsubscribing deletes you from the list. Our hosting provider, Vercel, keeps standard server logs (IP address, browser, pages requested) for a short period for security and reliability.

11. Security

Data in transit is encrypted with TLS. Data at rest with our providers is encrypted. Sign-in is handled by Apple and Google, so we never see or store a password. Access to production systems is limited to the founder. No system is perfectly secure; if a breach affects your data we will tell you and the ICO as the law requires.

12. Changes to this policy

If we change this policy in a way that matters to you, we will show a notice in the app or email you before the change takes effect. The date at the top always shows the current version.

13. Contact

Curtis Hunter, trading as Westflame · Lytchett House, 13 Freeland Park, Wareham Road, Poole, Dorset, BH16 6FA, United Kingdom · contact@westflame.co.uk