Sleep Police Privacy Policy

Last updated: 2026-10-06

This Privacy Policy explains what information Touchgrass Health, LLC ("Touchgrass Health," "we," "us," or "our") collects when you use Sleep Police, how we use and share it, how long we keep it, and the choices you have. It covers the Sleep Police mobile apps, web app, website, and support services.

Sleep Police is for adults 18 and older. It is not directed to children or teens.

Contact

For privacy questions, data requests, or account deletion, contact us at support@touchgrass.health or through https://thesleeppolice.com/support.

Summary

• Sleep Police blocks apps you choose during bedtime blocks you set. To do that, and to hold you to the commitments you make, it collects information about your schedule, your devices, and whether blocking stayed on.
• On Android, Sleep Police reads which apps were in the foreground around your scheduled blocks, and which apps are installed so you can choose what to block. On iPhone, Apple's Screen Time keeps your app choices private; we store only an encoded selection we cannot read as app names.
• We do not sell personal information, and we do not use it for advertising.
• We use service providers to run Sleep Police, including Stripe for payments, Plivo for text messages, and two AI providers for specific features described below.

Information We Collect

Account Information

• Your phone number, which we use to create your account and sign you in.
• Account details such as your language, country, and time zone.
• Messages you send us and records of support requests.

Devices And App Installs

When you sign in on a phone, we collect information about the device and the Sleep Police installation:

• device type, operating system and version, device model, brand, and manufacturer;
• app version and build number;
• time zone, country, and language settings;
• mobile carrier name and network country codes, where available;
• identifiers for the Sleep Police installation and for push notifications and iPhone Live Activities.

We also use a device identifier to recognize the same phone when Sleep Police is reinstalled. On Android this is the app-specific device ID provided by the operating system (Android ID); on iPhone it is a random identifier stored in your device's keychain. We store only a keyed hash of this identifier, scoped to your account. We use it to keep your device history consistent, and to prevent and detect circumvention of blocks you have committed to. We do not use it for advertising.

Blocking Setup

• Your schedules and blocks, including their names, times, and days.
• The apps you choose to block. On Android, this includes app package names and app names. On iPhone, this is an encoded Screen Time selection created by Apple, which we cannot read as app names, along with counts of selected apps, categories, and websites.
• On Android, Sleep Police reads the list of apps installed on your phone so you can choose which to block and so we can suggest apps to block. We receive the names and package names of eligible apps for that purpose.
• Settings you choose, such as block exceptions, penalty amounts, and places where blocking does or does not apply.

Enforcement Activity

To show whether a block ran and to enforce the commitments you make, the app reports:

• when blocks were locked, started, and ended on your device, and whether blocking was active;
• the status of the permissions blocking depends on, such as Screen Time, Usage Access, Accessibility, notifications, and location;
• periodic health signals, device clock and time zone changes, and app installation continuity.

On Android:

• Usage Access. Sleep Police reads app usage records for the time around each scheduled block. It uploads which apps were in the foreground and when (app name, package name, and start and end times), so we can tell whether blocked apps were used during the block. This can include apps you did not choose to block.
• Accessibility. Sleep Police uses Android Accessibility only to notice which app is opening, so it can return you to Sleep Police when a blocked app is opened during a block. It does not read screen content or what you type. When a blocked app is opened during a block, we record the app's name, package name, and the time.

Location

• Saved places. If you save places where blocking should or should not apply, we store the name, address, coordinates, and radius you choose.
• Location status. If you enable location-based blocking, the app uses your device's location, including in the background, to check whether you are inside a saved place. It reports whether you are inside or outside, which saved place is closest, the approximate distance to it, and how accurate the reading was. It does not send us your raw coordinates for this check.
• Approximate location from your IP address. Our web host provides an approximate location for your IP address. We use it to estimate sunrise and sunset times for the app's timeline and theme, and to preselect your country when you enter a phone number. It is not used to decide whether blocking applies.

Home Wi-Fi Protection

If you set up Home Wi-Fi protection, your home network uses a DNS service operated by ControlD. We send ControlD your network's public IP address to connect it to your profile. ControlD processes the DNS requests made on your home network, including the domain names devices look up, and we read that activity to operate and verify Home Wi-Fi protection. We do not receive the content of the web pages you visit.

Payments

If you set up payments or penalties, Stripe processes your card details. We do not store full card numbers. We store:

• the Stripe identifiers for your account and payment methods;
• card brand, last four digits, and expiration date;
• penalty amounts, payment attempts, refunds, and payment history;
• records of the billing terms you accepted, including the time, your IP address, browser or device, and language.

If you ask for a review of a penalty or refund, we store your messages and the explanations you gave for paid breaks.

Text Messages

We use Plivo to send text messages. We send:

• sign-in links and links that open the app;
• Home Wi-Fi setup information, when you request it;
• warnings when your device stops reporting during a block you committed to.

You can reply STOP to opt out of text messages where your carrier supports it. Opting out of sign-in messages may prevent you from signing in.

Bug Reports

If you send a bug report from the app or website, we collect your description, the screen you were on, app and device details, and any screenshot or image you choose to attach. You can review or remove the image before sending. Bug reports are stored in Linear, our issue-tracking tool, without your phone number.

Diagnostics, Crash Reports, And Product Analytics

• Crash reports and app performance. We use Sentry to collect crash and error reports from the apps, website, and servers. From the apps, it also collects performance timings, such as how long the app takes to start and how long screens and requests to our servers take to load. We configure it not to collect personal information such as phone numbers, and to exclude screenshots and screen recordings.
• Diagnostic reports. When something goes wrong, the app may send us a short record of recent app events, such as screens opened and requests made, with the app version and platform. We keep these reports for 30 days.
• Product analytics. We may use PostHog to understand how Sleep Police is used, such as which screens are opened and which features are used, and to roll out changes gradually. We do not use it for advertising.

Website Cookies And Storage

The Sleep Police website uses cookies to keep you signed in and to complete sign-in securely. If we use product analytics on the website, PostHog may also store an identifier in your browser to recognize repeat visits. We do not use advertising cookies. The website also stores small values in your browser to complete sign-in, payments, and bug reports.

Server Logs

Our servers and hosting providers record technical information about requests, such as IP address, browser or app details, the page or feature requested, timestamps, and errors. We use these records to operate, secure, and debug Sleep Police.

How We Use Information

We use information to:

• create and secure your account and sign you in;
• run your schedules and block the apps you choose;
• check whether blocks ran as committed, and apply the penalties and block exceptions you agreed to;
• process payments, refunds, and disputes;
• send notifications and text messages about your account, sign-in, and blocks;
• recognize the same phone after the app is reinstalled;
• prevent, detect, and investigate fraud, abuse, and circumvention of blocks;
• diagnose crashes and errors, and provide support;
• improve Sleep Police;
• comply with legal, tax, and accounting obligations.

AI Features

Some features use AI models run by service providers:

• Suggestions. To suggest apps to block and to name blocks and places, we send TypeSafe Jev your block names, the names of your saved places and nearby place types, and the names and package names of apps installed on your Android phone. We do not send your phone number, coordinates, or addresses.
• Penalty reviews. When you ask for a penalty or refund review, we send Fireworks your messages, the explanations you gave for paid breaks, and the related payment amounts and times, to help evaluate the request.

These providers process the information to return a result to us. We do not allow them to use it for advertising.

How We Share Information

We do not sell personal information. We do not share personal information for advertising.

Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes.

We share information with service providers that operate parts of Sleep Police for us:

• Google Cloud, which hosts our servers and database;
• Vercel, which hosts our website;
• Stripe, for payments;
• Plivo, for text messages;
• Expo, for push notifications and app updates, and Apple and Google, which deliver notifications to your device;
• Google Maps Platform, for maps, place search, and location services;
• ControlD, for Home Wi-Fi protection;
• TypeSafe Jev and Fireworks, for the AI features described above;
• Sentry, for crash and error reporting and app performance;
• PostHog, for product analytics;
• Linear, for bug reports and support.

We may also share information when the law requires it, to respond to legal process, or to protect the rights, safety, and security of our users, Touchgrass Health, or others. If Touchgrass Health is involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction.

How Long We Keep Information

We keep information while your account is active and as long as needed to provide Sleep Police, resolve disputes, prevent fraud and abuse, and meet legal, tax, and accounting obligations. Diagnostic reports are deleted after 30 days.

When you delete your account, we act immediately:

• we sign you out on every device and stop sending notifications;
• we remove your phone number, name, profile photo, and language, country, and time zone settings;
• we remove device details such as model, brand, manufacturer, and carrier;
• we remove the IP address and browser details from your billing-terms records;
• we remove the link between your Sleep Police account and your Stripe account.

We keep records of past blocks, penalties, payments, and accepted terms. We also keep security and audit logs, because we need them for billing, disputes, fraud prevention, and legal obligations. Some other account content, such as saved places, schedules, and app choices, remains stored in archived form after deletion. Stripe keeps its own payment records under its privacy policy.

Your Choices And Rights

• Delete your account at https://thesleeppolice.com/account-deletion, in the app, or by emailing support@touchgrass.health.
• Access, correct, or get a copy of your information, or object to or restrict how we use it, by emailing support@touchgrass.health. Depending on where you live, you may have these rights under law. We may need to verify your identity before acting on a request.
• Control permissions such as location, notifications, Usage Access, Accessibility, and Screen Time in your device settings. Turning off a permission that blocking depends on can stop blocking from working, and may count as a break in a block you committed to.
• Opt out of text messages by replying STOP.

Children And Teens

Sleep Police is for adults 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has given us personal information, contact support@touchgrass.health and we will delete it.

Where We Process Information

We process and store information in the United States. Our service providers may process information in other countries, whose data protection laws may differ from those where you live.

Security

We protect information with safeguards such as encryption in transit, access controls, and storing installation and device identifiers only as keyed hashes. No system is completely secure, so we cannot guarantee absolute security. Please keep your phone, phone number, and payment methods secure.

Changes To This Policy

We may update this policy. The date at the top shows when it last changed. If we make material changes, we will let you know in the app, on the website, or by other reasonable means.