Privacy Policy
Effective: March 15, 2026
Your privacy matters to us. This policy explains what data SleepMantra collects, how we use it, and your rights.
1. Data We Collect
Account Information
- Email address (for authentication and communication)
- Display name (optional, shown on community mantras)
- Password (hashed, never stored in plain text)
Usage Data
- Mantras you create (text content, titles, themes)
- Voice and timer preferences
- Subscription tier and payment status
- Generation counts (to enforce usage limits)
Technical Data
- Browser type and version
- Device type
- IP address (for security and abuse prevention)
- Authentication cookies (see Cookie Policy)
2. How We Use Your Data
- To provide and improve the SleepMantra service
- To authenticate you and keep your account secure
- To process payments via Stripe
- To generate mantras (text sent to Anthropic Claude AI)
- To generate audio (mantra text sent to ElevenLabs)
- To enforce usage limits and prevent abuse
- To send service-related emails (account, billing, security)
3. Third-Party Services
We use the following third-party services that process your data:
| Service | Purpose | Data Shared |
|---|---|---|
| Supabase | Authentication, database, file storage | Account data, mantras, audio files |
| Anthropic (Claude) | AI mantra generation | Theme/prompt text (no personal identifiers) |
| ElevenLabs | Text-to-speech audio generation | Mantra text (no personal identifiers) |
| Stripe | Payment processing | Email, payment method, billing address |
| Render | Hosting | Standard server logs (IP, user agent) |
4. Data Retention
- Account data is retained as long as your account is active.
- Mantras and cached audio are retained until you delete them or close your account.
- After account deletion, we remove your data within 30 days, except where required by law.
5. Your Rights
You can:
- Access your data from your account settings.
- Delete individual mantras or your entire account.
- Export your mantras by request.
- Opt out of non-essential emails.
6. Children's Privacy
SleepMantra is not intended for children under 13. We do not knowingly collect data from children under 13. If you believe a child has created an account, contact us to have it removed.
7. Security
We use industry-standard security measures including encrypted connections (HTTPS), hashed passwords, and secure authentication tokens. No system is 100% secure, but we take reasonable precautions to protect your data.
8. Changes
We may update this policy. Material changes will be communicated via email or in-app notice. Continued use constitutes acceptance.
9. Contact
Privacy questions? Email privacy@sleepmantra.net.