隱私政策（美國）

Privacy Policy Summary

Slumber Copilot respects and protects the privacy of all users. This privacy policy explains how we collect, use, store, and protect your personal information when using our website, especially information related to sleep and personal data.

Important Notice: Slumber Copilot is NOT covered by the Health Insurance Portability and Accountability Act (HIPAA). The information you provide through this service is NOT considered Protected Health Information (PHI) under HIPAA. This service is NOT a HIPAA-regulated entity.

1. Information Collection

We collect the following types of information:

• Account Information: Name, email address, password hash
• Sleep Records: Sleep time, sleep quality, wake time, and other self-reported sleep data
• Health Data: Insomnia Severity Index (ISI) and Pittsburgh Sleep Quality Index (PSQI) scores
• Personal Information: Age, gender, and self-reported health information
• Technical Information: IP address, browser type, access time, page visit records
• Communication Data: Any messages or inquiries you send us
• Payment Information: VIP subscriptions are processed through Apple App Store (iOS) or Google Play (Android). We do not directly store your payment information; we only retain subscription receipts and status provided by the platform for membership verification.

2. Use of Information

We use your information for the following purposes:

• Providing and improving Slumber Copilot services
• Generating personalized AI sleep coach recommendations
• Conducting data analysis to improve user experience
• Complying with applicable laws and regulations
• Detecting and preventing fraud or security issues
• Communicating important service updates or policy changes
• Direct marketing (only if you have opted in)

3. Information Security and Storage

• Storage Location: Your information is stored in secure data centers
• Encryption: Sensitive information (such as passwords) is encrypted using industry-standard algorithms
• Access Control: Only authorized personnel can access personal information
• Regular Backups: Regular backups ensure data availability and recovery
• Security Monitoring: 24/7 security monitoring to prevent unauthorized access
• Staff Training: All staff handling personal information receive privacy and data security training

4. Your Privacy Rights

You have the following rights regarding your information:

• Right to Access: You can request access to the information we hold about you
• Right to Correct: You can request correction of inaccurate information
• Right to Delete: You can request deletion of your information
• Right to Opt-Out: You can opt-out of marketing communications
• State-Specific Rights: Residents of California, Virginia, Colorado, Connecticut, and Utah have additional rights under state privacy laws

Exercising Your Rights: To exercise any of these rights, please contact us at [email protected] with your request and verification information.

5. State Privacy Laws Compliance

We comply with applicable state privacy laws, including:

• California Consumer Privacy Act (CCPA): California residents have rights to know, delete, and opt-out of sale of personal information
• Virginia Consumer Data Protection Act (VCDPA): Virginia residents have similar rights to access, correct, delete, and opt-out
• Colorado Privacy Act (CPA): Colorado residents have rights to access, correct, delete, and opt-out
• Connecticut Data Privacy Act (CTDPA): Connecticut residents have similar consumer rights
• Utah Consumer Privacy Act (UCPA): Utah residents have rights to access, delete, and opt-out

6. Information Sharing

• We do not sell your information to third parties
• We do not share information with third parties without your explicit consent
• We may share information with limited service providers (such as cloud storage providers) who are bound by confidentiality agreements
• We may be required to disclose information if legally required by law enforcement or court order

7. Data Retention

• Active Account: While your account is active, we retain all your information
• Account Deletion: When you request account deletion, we delete your information within 30 days
• Legal Retention: We may retain certain information longer if required by law
• Anonymized Data: Aggregated statistical data (fully anonymized) may be retained indefinitely

8. Third-Party Links and Services

Our website may contain links to third-party websites and services. This Privacy Policy does not apply to third-party websites. We encourage you to review the privacy policies of those websites before providing your information.

Third-Party AI Service Providers: The AI sleep coaching and dream analysis features of this App use Moonshot AI and Alibaba Qwen as analysis engines. All personally identifiable information (name, email, user ID) is removed before transmission. Data is not used for advertising targeting or user profiling.

9. Data Breach Notification

If we discover that your information has been unlawfully accessed or breached, we will notify you within 30 days of discovery and provide information about the breach, as required by applicable state laws.

10. NOT HIPAA Covered

IMPORTANT: This service is NOT covered by the Health Insurance Portability and Accountability Act (HIPAA). Information you submit through Slumber Copilot is NOT Protected Health Information (PHI) under HIPAA. We are NOT a HIPAA-regulated entity, business associate, or covered entity. Your health information is not afforded HIPAA's privacy protections.

11. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to improve user experience and analyze website usage. You can control cookies through your browser settings. Refusing cookies may affect certain features.

12. Children's Privacy Protection

This service is not directed at individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will delete it immediately.

13. California Privacy Rights

California Privacy Rights (Cal. Civ. Code § 1798.83): California residents have the right to know what personal information is collected, used, shared, or sold, and have the right to delete personal information collected from you, subject to certain exceptions.

14. Contact Information and Rights Requests

If you are a resident of California, Virginia, Colorado, Connecticut, or Utah, you may submit a rights request by contacting us at [email protected]. We will respond to verified requests within 45 days.

15. Policy Updates

We may update this Privacy Policy as needed to comply with applicable laws or for other operational reasons. Updates will be posted on this page with an updated "Last Modified Date". Your continued use of our service constitutes acceptance of the updated Privacy Policy.