Sleepmaxx — Privacy Policy - Cambrian Labs B.V.

Last updated: 12 June 2026

This policy explains what data the Sleepmaxx app handles. It is operated by Cambrian Labs B.V. (“we”, “us”), The Netherlands, KvK 666.91.680. Short version: your answers and scores stay on your device; we run no servers and have no user accounts.

1. Data that stays on your device

Your quiz answers, Sleep Score, protocol, check-ins and streak are stored locally on your device only. We have no backend, no accounts, and no access to this data. Deleting the App deletes it.

2. Data processed by third parties

The App uses two service providers, solely to make purchases and the paywall work:

RevenueCat, Inc. (purchase infrastructure) — processes an anonymous app-generated identifier, your App Store receipt, subscription status, device type/locale, and app version, to validate and manage your subscription. RevenueCat does not receive your name, email, or quiz data. See revenuecat.com/privacy.

Superwall (Superwall, Inc.) (paywall display) — processes an anonymous identifier, device information (type, locale, OS version, app version), paywall interaction events (e.g. paywall viewed, purchase started), and approximate location derived from IP address, to display, configure, and measure the paywall. See superwall.com/privacy.

Apple processes your payment entirely; we never see your payment details.

The App contains no advertising and no third-party analytics SDKs.

3. Legal basis (GDPR)

Processing by RevenueCat and Superwall is necessary for the performance of the contract with you (delivering the subscription you purchase) and our legitimate interest in operating a functioning paywall (Art. 6(1)(b) and (f) GDPR). Identifiers used are app-scoped and anonymous; we do not link them to your identity.

4. Data retention and deletion

We hold no user data ourselves. On-device data is removed by deleting the App. For data held by RevenueCat or Superwall, contact us at support@cambrian-labs.com with your request, and we will pass it to the providers, or contact them directly via their privacy pages.

5. Your rights

Under the GDPR you have rights of access, rectification, erasure, restriction, portability and objection, and the right to lodge a complaint with a supervisory authority (in the Netherlands: Autoriteit Persoonsgegevens). Because we hold no personal data ourselves, most requests will concern the providers listed above — we will assist where we can.