Privacy Policy
Effective date: February 10, 2026
This Privacy Policy describes how downtime (“we”, “our”, or “the app”) collects, uses, and protects your information.
Information We Collect
Account Information
- Apple ID credentials — We use Sign in with Apple for authentication. We receive your name (or a pseudonym you choose) and, if you opt in, your email address. We do not receive or store your Apple ID password.
- Profile photo — If you choose to upload one.
- Display name — The name shown to your friends in the app.
Health Data
- Sleep analysis data — We read sleep data from Apple HealthKit, including sleep start/end times and sleep stages (if available). This data is used solely to calculate your sleep score.
- WHOOP sleep data (optional) — If you connect your WHOOP account, we retrieve sleep stage breakdowns (light, deep, REM, awake time) from the WHOOP API to enhance your sleep score with more detailed stage information.
User-Generated Content
- Sleep posts — Your sleep score, duration, and optional notes that you choose to share.
- Comments and reactions — Content you post on friends’ sleep posts.
Automatically Collected
- Device information — We do not collect device identifiers, IP addresses, or analytics data beyond what Firebase provides by default for service operation.
How We Use Your Information
- Sleep score calculation — HealthKit and optional WHOOP data are used to calculate your sleep score. This happens on your device and is stored in our database only when you choose to create a post.
- Social features — Your posts, comments, and reactions are shared with your accepted friends within the app.
- Account management — Your name and profile photo are displayed to other users.
How We Store Your Information
- Cloud infrastructure — Your data is stored in Google Firebase (Firestore, Cloud Storage, Authentication), hosted on Google Cloud Platform servers in the United States.
- WHOOP tokens — If you connect WHOOP, your OAuth tokens are stored securely server-side in Firebase and are never exposed to other users.
- HealthKit data — Raw HealthKit data is read on your device. Only the calculated sleep score and summary data (duration, bedtime, wake time, sleep stage percentages) are stored in our database when you create a post.
Who Can See Your Information
- Your profile (name, photo) is visible to any downtime user for the purpose of sending friend requests.
- Your sleep posts, reactions, and comments are visible only to your accepted friends within the app.
- Your health data is never visible to other users beyond the sleep score and summary you choose to post.
- We do not sell, rent, or share your personal data with third parties for advertising or marketing purposes.
Third-Party Services
We use the following third-party services:
| Service | Purpose | Privacy Policy |
|---|---|---|
| Firebase Authentication | Account sign-in | Google Privacy Policy |
| Cloud Firestore | Data storage | Google Privacy Policy |
| Firebase Cloud Storage | Profile image storage | Google Privacy Policy |
| Firebase Cloud Functions | Secure server-side operations | Google Privacy Policy |
| WHOOP API (optional) | Sleep stage data | WHOOP Privacy Policy |
| Apple HealthKit | Sleep data | Apple Privacy Policy |
Apple HealthKit Data
In compliance with Apple’s HealthKit guidelines:
- HealthKit data is used solely for the purpose of providing sleep tracking features to you.
- HealthKit data is not used for advertising or marketing.
- HealthKit data is not sold or shared with third parties.
- HealthKit data is not stored in iCloud.
- We only request access to sleep analysis data — no other health data types.
Data Retention
- Your data is retained as long as your account is active.
- You may request deletion of your account and all associated data at any time by contacting us at the email below.
- Upon account deletion, we remove your profile, posts, comments, reactions, friend connections, notifications, and any stored WHOOP tokens.
Your Rights
You have the right to:
- Access your personal data stored in the app
- Correct inaccurate information via your profile settings
- Delete your account and all associated data
- Disconnect third-party services (WHOOP) at any time via app settings
If you are located in the European Economic Area (EEA), you may also have additional rights under the GDPR, including the right to data portability and the right to lodge a complaint with a supervisory authority.
If you are a California resident, you have rights under the CCPA, including the right to know what personal information is collected and the right to request deletion.
Children’s Privacy
downtime is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected data from a child under 13, we will delete it promptly.
Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Your continued use of the app after changes constitutes acceptance of the updated policy.
Contact Us
If you have questions about this Privacy Policy or want to request data deletion, contact us at:
Email: getkinnect@gmail.com