✦ Wisp

Privacy Policy

Last updated: October 3, 2026

Wisp ("we", "our", or "us") is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights.

1. Data We Collect

Account data: Your name and email address when you register.
Sleep data: Sleep metrics synced from your wearable device via Terra (sleep duration, stages, HRV, heart rate, readiness score).
Habit data: Optional daily check-in entries you provide (caffeine, alcohol, exercise, stress level, notes).
Device data: Physiological data passively collected from your wearable (stress levels, activity, body battery) when your device supports it.
Usage data: Basic app usage logs for debugging and improving the service.

2. How We Use Your Data

To generate your personalized sleep insights, protocol, and weekly reports using AI analysis.
To power the AI sleep chat with context about your sleep patterns.
To identify correlations between your habits and sleep quality.
To send you weekly email reports (if enabled in settings).
To improve the Wisp service.

3. AI Processing

Your sleep and habit data is sent to Anthropic's Claude API to generate insights and recommendations. Anthropic processes this data solely to provide the response and does not use it to train their models. We send only the minimum data necessary for each analysis.

4. Wearable Data (Terra)

We connect to your wearable device through Terra, a third-party data aggregation service. Terra's privacy policy governs how they handle data from your device provider. We only store the processed metrics we need — we do not store raw sensor data.

5. Data Sharing

We do not sell your personal data. We share data only with:

Terra — to retrieve your wearable data.
Anthropic — to generate AI insights (anonymised where possible).
Stripe — to process subscription payments (we never see your full card details).
AWS SES — to send transactional emails.

6. Data Retention

We retain your data for as long as your account is active. You can delete your account at any time from the Profile tab, which permanently removes all your data within 30 days.

7. Security

All data is transmitted over HTTPS. Passwords are hashed using bcrypt. API tokens are stored securely. We do not store payment card information.

8. Your Rights

You have the right to access, correct, export, or delete your personal data at any time. To exercise these rights, contact us at privacy@wispsleep.com.

9. Children

Wisp is not intended for users under 18. We do not knowingly collect data from children.

10. Changes

We may update this policy from time to time. We'll notify you of significant changes via email or in-app notification.

Questions? Email us at privacy@wispsleep.com