← Back to Sushupati

Privacy Policy

Effective date: October 9, 2026

Sushupati LLP ("Sushupati", "we", "us", or "our") provides an AI-guided sleep coaching service (the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have — including when you connect a wearable device such as an Oura Ring, Fitbit, Garmin, Apple Watch, or similar, or connect Apple Health or Health Connect directly from the Sushupati app.

1. Information We Collect

2. How We Use Your Information

3. Wearable Data & Third-Party Providers

When you connect a wearable account, you are redirected to that provider's own authorization page (for example, Oura's OAuth consent screen) and you approve exactly what data is shared with us. We only request the scopes needed to power the features above. You can disconnect a wearable account at any time from your Sushupati settings, or by revoking access directly with the provider (e.g. cloud.ouraring.com). Disconnecting stops future data syncing; it does not automatically delete data already imported, which you may request removed under Section 6.

3a. Apple Health & Health Connect (Sushupati App)

If you connect Apple Health (iPhone) or Health Connect (Android) from inside the Sushupati app, we read only the data types you individually switch on — we never write to Apple Health or Health Connect. The types are: sleep sessions and stages, heart rate, resting heart rate, heart rate variability, respiratory rate, blood oxygen, steps, active energy, body temperature, VO2 max, and weight. Which types are available depends on your phone and watch.

We use this data to show your own sleep and recovery trends, prefill your sleep diary, draw your Body Clock graphs, and — through the "Use my health data in AI coaching" setting (on by default for all users, including existing users) — to give your AI coach a rolling 7-day summary of the types you enabled. You can switch this off at any time in Settings. When this setting is on, that 7-day summary is processed by our third-party AI service provider, Anthropic, under confidentiality terms, solely to generate your coaching reply; Anthropic does not receive your name or contact details. When this setting is off, the AI coach receives none of your imported health data.

Your device's sync connection is identified by a token that we store only as a one-way (SHA-256) hash, not in reversible form. Health data synced this way is stored on our backend (hosted via our Base44 platform infrastructure); only your account, and administrators where strictly needed to run and secure the Service, can read it.

You can revoke Sushupati's access to Apple Health/Health Connect at any time directly in your phone's Health app or Health Connect settings — this immediately stops all future reads. You can also manage this data directly in the app, from the Health Data & Privacy panel in Settings: switch off any individual data type, disconnect the sync (optionally deleting already-imported data at the same time), export a copy of your imported health data, or delete already-imported health data outright — each action applies only to your own account. If you'd rather not use the in-app panel, you can exercise any of these rights, or request deletion of your account, by emailing sushuptisleep@gmail.com; we will act on your request within 30 days (account deletion follows the 90-day removal timeline in Section 5).

4. How We Share Information

5. Data Retention & Security

We retain your data for as long as your account is active or as needed to provide the Service. Imported health data is retained until you disconnect and delete it, or until you delete your account, at which point it is removed within 90 days across our systems and backups (see our Delete Your Account page). We use reasonable technical and organizational safeguards to protect your data, including encryption in transit. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

6. Your Rights & Choices

To exercise any of these rights, contact us at sushuptisleep@gmail.com.

7. Children's Privacy

The Service is not directed to children under 16, and we do not knowingly collect data from them.

7a. Applicable Law

Sushupati LLP operates from the Cayman Islands. Depending on where you live and use the Service, the data protection laws of the Cayman Islands, India, and your own country may apply to how we handle your personal and health data. If you are in a jurisdiction with specific data-subject rights (for example, access, correction, deletion, or portability), you may exercise those rights by contacting us at the email in Section 9, and we will honor requests to the extent required by the applicable law.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated effective date.

9. Contact Us

Questions about this Privacy Policy? Email sushuptisleep@gmail.com.

© 2026 Sushupati. The Sushupati Method™ is a trademark of Sushupati LLP.