Privacy Policy

1. Data we collect

Quiz answers: your responses about your parenting style, your wellbeing, and your child's sleep patterns, age band, and first name (provided by you as the parent or legal guardian).

Account data: your email address and sign-in activity.

Purchase data: subscription plan, payment status, and billing country. Card details are processed directly by our payment processor (Stripe) and never stored by us.

Usage data: pages viewed, quiz progress events, device and browser information, IP address, and identifiers collected via cookies and similar technologies (including Google Analytics and Meta Pixel where enabled).

2. Children's data

The Service is for adults (18+). We do not knowingly collect data directly from children. Information about your child (such as first name, age band, and sleep patterns) is provided by you, the parent or legal guardian, solely to personalize your content. We process it on the basis of your consent and only for that purpose.

3. How and why we use data

To provide the Service: generate your personalized plan, create and secure your account, deliver content and emails you request (legal basis: performance of a contract).

To process payments and prevent fraud (legal bases: contract, legal obligation, legitimate interests).

To improve the Service and measure marketing performance, including analytics and advertising attribution (legal bases: consent where required, otherwise legitimate interests).

To send service emails (sign-in links, receipts, plan delivery). Marketing emails are sent only with your consent and always include an unsubscribe link.

4. Who we share data with

Service providers acting on our instructions: hosting and infrastructure (Vercel, Supabase), payment processing (Stripe), email delivery (Resend), analytics and advertising measurement (Google, Meta). Each provider processes data under a data-processing agreement.

We do not sell your personal data. We may disclose data if required by law or to protect our rights.

5. International transfers

Some providers process data outside the UK/EEA (for example, in the United States). Where they do, transfers are protected by appropriate safeguards such as the UK Addendum to the EU Standard Contractual Clauses or an adequacy decision.

6. Retention

We keep account and purchase records for as long as your account is active and as required for legal, tax, and accounting purposes (typically 6 years for transaction records). Quiz answers linked to inactive, non-paying sessions are deleted or anonymised after a reasonable period. You may request deletion at any time (see Your rights).

7. Cookies

We use strictly necessary cookies for sign-in and quiz progress, and (with consent where required) analytics and advertising cookies (Google Analytics, Meta Pixel). You can control cookies through your browser settings; blocking necessary cookies may break sign-in.

8. Your rights

You have the right to access, correct, delete, or receive a copy of your personal data, to object to or restrict processing, and to withdraw consent at any time. To exercise any right, email support@sleepmap.io — we respond within one month.

You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk) or your local supervisory authority.

9. Security

Data is encrypted in transit (TLS) and at rest, access is restricted by row-level security and least-privilege service roles, and payment data is handled solely by PCI-DSS-compliant processors.

10. Contact

Unicore Digital Ltd, company number 17292426, 27 Old Gloucester Street, London, WC1N 3AX, United Kingdom. Email: support@sleepmap.io. We may update this policy; material changes will be notified via the Service or email.