Privacy Policy

Last Updated: December 29, 2025

Your privacy matters to us. This Sleepal Privacy Policy (“Privacy Policy”) explains how Sleepal Inc. (“Sleepal,” “we,” “us,” or “our”) collects, uses, shares, and protects your personal information when you visit or make a purchase from our websites, mobile apps, or other digital services (collectively, the “Services”).

By using our Services, you agree to the practices described in this Privacy Policy. You have the right to withdraw your consent to the processing of your personal data as described in this Privacy Policy at any time. If you do not agree with these practices, please do not use our Services.

We may update this Policy from time to time to reflect changes in law or our practices. When we make material updates, we’ll revise the “Last Updated” date above and post a notice on our website.

1. Information We Collect

We collect information that identifies, relates to, describes, or could reasonably be linked to you (“Personal Information”).

The types of information we collect depend on how you interact with us and may include:

Category

examples

Source

Identifiers

Name, postal address, email, phone number, unique

device ID, IP address, account login credentials

Provided directly by you

or automatically collected

Commercial Information

Purchase history, product preferences, order details,

payment method (via Shopify or third-party processor)

From your transactions

with us

Internet / Network Activity

Device type, browser, pages visited, time spent, referral

links, cookie data

Automatically collected

through analytics and

advertising tools

Geolocation Data

Approximate location (city, state, or ZIP) inferred from IP

address

Automatically collected

User-Generated Data

Reviews, feedback, messages, survey responses

Provided directly by you

Inferences

Preferences, product interests, potential sleep wellness

needs

Derived from analytics or

usage data

Sensitive Personal

Information (SPI)

Sleep duration, sleep stages, heart rate, etc.

Automatically collected

through your use of the

Service

We may also collect non-identifying, aggregated, or anonymized data that does not identify you.

2. How We Use Your Information

We use Personal Information to:

Process your orders, payments, and deliveries

Manage your account and preferences

Provide customer service and respond to inquiries

Send important transactional and service updates

Personalize your experience and recommend products

Conduct analytics and improve our Services

Detect, prevent, or address fraud and security issues

Comply with legal obligations

Send marketing communications (with your consent where required)

Honor your privacy and opt-out preferences

3. How We Share Information

We may share your Personal Information with:

Service Providers

trusted partners that help us operate our business (e.g., Shopify, payment processors, logistics, email,

marketing, analytics).

Advertising and Analytics Partners:

platforms like Google, Meta, Microsoft, or AdRoll that help us measure performance and deliver

relevant ads.

Business Transfers:

as part of a merger, acquisition, restructuring, or sale of assets.

Legal and Compliance:

when required by law, subpoena, or government request.

We do not exchange your Personal Information for monetary payment in the traditional sense. However, under the laws of California and certain other states, our sharing of online identifiers and network activity with advertising and analytics partners for targeted advertising may be considered a “sale” or “sharing”.

4. Cookies and Tracking Technologies

We use cookies and similar technologies to operate and improve our website. These technologies help us remember preferences, process orders, and measure performance.

5. Data Retention and Security

We keep your Personal Information only as long as necessary to fulfill the purposes described in this Policy, unless a longer period is required by law. The criteria used to determine our retention periods include:

(i) the length of time we have an ongoing relationship with you and provide the Sleepal products and services to you;

(ii) whether there is a legal obligation to which we are subject (for example, tax and accounting requirements); and

(iii) whether retention is advisable in light of our legal position (such as in regard to applicable statutes of limitations, litigation, or regulatory investigations).

We take reasonable administrative, technical, and physical measures to protect your information. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

6. Your Privacy Rights

Depending on your U.S. state of residence, you may have the following rights:

Right

Description

Device Logs

Performance of a contract

Access / Know

Performance of a contract / Legitimate interest

Correction

Performance of a contract / Legitimate interest

Opt-Out of Sale/Sharing

Consent / Legitimate interest

Limit Use of Sensitive Information

Consent (opt-in)

Non-Discrimination

Legitimate interest

You may also submit a request through our “Do Not Sell or Share My Personal Information” page.

We will verify your identity before processing requests and respond within the timeframe required by applicable law. Authorized agents may submit requests on your behalf with valid authorization.

7. Your Privacy Choices

Marketing Communications:

You can unsubscribe from promotional emails anytime using the link in the message.

Cookies & Ads:

Manage your cookie preferences in the website footer or via YourAdChoices.

Global Privacy Control (GPC):

We recognize GPC browser signals as valid opt-out requests where required by law.

We will continue to publicly disclose any future requests in this report.

8. Do Not Track (DNT)

We do not currently respond to “Do Not Track” browser signals. You can instead exercise your privacy preferences as described above.

9. Children’s Privacy

Our Services are not directed toward children under 13 or under the equivalent age as specified by law in your jurisdiction.

We do not knowingly collect Personal Information from children.

10. External Links

Our Services may contain links to third-party sites that are not operated by Sleepal.

We are not responsible for the privacy practices of such sites.

We encourage you to review their privacy policies before interacting with them.

11. U.S. State Disclosures

Depending on your location, additional rights or disclosures may apply:

California:

You have additional rights under the CCPA/CPRA, including to know, correct, delete, and opt out of

sale/sharing.

Colorado, Connecticut, Virginia, Utah:

Similar rights apply; we honor opt-outs of targeted advertising.

Nevada:

Sleepal does not have actual knowledge of selling or sharing data of individuals under 16 years old or under the equivalent age as specified by law in your jurisdiction. If we learn that data was collected from a child under 16 years old or under the equivalent age as specified by law in your jurisdiction, we will promptly delete it.

12. International Transfers

Sleepal’s servers and partners may be located in the United States and other countries. If you access our Services from outside the U.S., your information may be transferred to jurisdictions with different data protection laws.

We take measures to protect your data in these cases consistent with this Policy.

13. Updates to This Policy

We may amend this Privacy Policy periodically to reflect updates in law, technology, or business practices.

Material changes will be posted here, with notice on our website or by email where required.

Contact Us

Sleepal Privacy Team

www.sleepal.ai

22000 Opportunity Way, Dock 1–5

Riverside, CA 92518

United States

Monday – Friday, 9:00 AM – 6:00 PM CST