Sleeptracker-AI Privacy Notice

Last updated on May 18, 2023

This Privacy Notice (“Notice”) applies to the Sleeptracker®-AI App, Sleeptracker®-AI Cloud, Sleeptracker®-AI Premium Services, Sleeptracker®-AI Sleep Coach, the Sleeptracker Google Assistant Action, and the Sleeptracker Amazon Alexa Skill (collectively, “Sleeptracker-AI”). Fullpower Technologies, Inc. (“Fullpower,” “we,” or “us”) is the developer of Sleeptracker-AI and is responsible for this Notice and the collection of data from Sleeptracker-AI.

This Notice explains our practices for the collection and processing of user information collected from or about the users of Sleeptracker-AI (i.e., “you”). This Notice is unique to Sleeptracker-AI and differs from other privacy policies of Fullpower, affiliates of Fullpower, and data collected separately by business partners of Fullpower, including, but not limited to, Tempur World, LLC. Please carefully review this Notice.

1. Overview of Personal Information We Collect

We collect information that can be used to identify you or that we can link directly or indirectly to you (“Personal Information”) in connection with your use of Sleeptracker-AI. The chart below provides an overview of:

This chart is for summary purposes only. For additional details, please refer to Sections 2 through 4 below.

Categories of Personal Information we collect

Where we get your Personal Information

See section 2 for more information

Why we collect your Personal Information

See section 3 for more information

Who we share your Personal Information with

See section 4 for more information

Identifiers. Such as a name, email address, or other similar identifiers

  • Directly from you

  • Automatically from your computer or mobile device/apps

  • Our business partners

  • To provide, configure, customize, and improve your use of Sleeptracker-AI services

  • To receive and respond to customer support inquiries for Sleeptracker-AI

  • To communicate with you

  • To market our products and services to you

  • Amazon Web Services

  • Other third parties, with your consent

Activity Data. Such as Sleeptracker-AI under-the-mattress sensor (i.e., your heart rate, breathing rate, and movements while sleeping); your bedroom environment: air temperature, humidity, and purity (relative level of volatile organic compounds).

  • Automatically from Sleeptracker-AI devices

  • To provide, configure, customize, and improve your use of Sleeptracker-AI services

  • Amazon Web Services

  • Other third parties, with your consent

Protected Classification Characteristics. Such as age (e.g. 40 years or older), or sex (including gender, gender identity, gender expression).

  • Directly from you

  • To provide, configure, customize, and improve your use of Sleeptracker-AI services

  • Amazon Web Services

  • Other third parties, with your consent

Internet or other similar network activity. Such as information on a consumer’s interaction with a website or application.

  • Automatically from your computer or mobile device/apps

  • Automatically from Sleeptracker-AI devices

  • To provide, configure, customize, and improve your use of Sleeptracker-AI services

  • Amazon Web Services

  • Flurry analytics

  • Other third parties, with your consent

Inferences drawn from other Personal Information. Such as a profile reflecting a person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

  • Automatically from Sleeptracker-AI devices

  • To provide, configure, customize, and improve your use of Sleeptracker-AI services

  • Amazon Web Services

  • Other third parties, with your consent

Sensitive Information

In some jurisdictions, some of the Personal Information described above may be considered “sensitive” or a “special category” of information (“Sensitive Information”) because certain information may: relate to your health, including heart rate and sleep patterns; identify your sex (including gender, gender identity, gender expression); or include approximate geolocation.

For clarity, Sleeptracker-AI does not collect or process cookies.

2. How We Collect and Store Your Personal Information

We collect information as follows.

Directly From You

Automatically From Your Computer or Mobile Device/Apps

Automatically from Sleeptracker-AI Devices

Third Parties

Please note that you may have the right, under your local laws, to suspend our processing of your Personal Information from third parties. Please see Section 6 (“Your Rights to Your Personal Information”), for more information regarding these and other rights you may have over your Personal Information.

With Separate Consent

3. How and Why We Use Your Personal Information

We use Personal Information to provide Sleeptracker-AI services to you. We also use the Personal Information we collect to contact you, provide you with customer service, conduct research, improve our products and services, and customize your experience with our products and services. We may aggregate, de-identify, and/or anonymize Personal Information such that it is no longer considered Personal Information under your local laws. For the purposes of this Notice, “Anonymized Information” means Personal Information that has been aggregated, de-identified, and/or anonymized such that it is no longer considered Personal Information under your local laws.

We will only use your Personal Information for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your Personal Information for an unrelated purpose, where required by law, we will notify you, explain the legal basis which allows us to do so, and, if required by law, obtain your consent. Please note that we may process your Personal Information without your knowledge or consent, where this is required or permitted by law.

4. How We Share Your Personal Information

Personal Information

Anonymized Information

We share Anonymized Information with Tempur World LLC, our bedding manufacturer partner, and its agents, contractors and affiliated entities, including Tempur Sealy International, Inc. ("Tempur"). Tempur and Fullpower may use such Anonymized Information to develop and improve new and current products and services, analyze trends, conduct research, and analyze and publish data related to use of the Sleeptracker-AI and Tempur products.

From time to time, we publish Anonymized Information, including facts and statistics derived from Personal Information, on our website and other social or traditional media outlets.

From time to time, we will share Anonymized Information with our scientific research partners, and may publish from time to time results of the research in scientific journals.

5. How We Will Notify You If Our Notice Changes

We keep this Notice under regular review to make sure it is up to date and accurate.If we change this Notice, we will post the updated Notice and its last updated date on this page. If Fullpower makes material changes that reduce your privacy rights, Fullpower will notify you in advance by sending you an email and/or by posting a notice in the Sleeptracker-AI services.

6. Your Rights to Your Personal Information

Access, portability, amendment, deletion, restriction of processing, accounting of disclosures

You may request to:

You may submit a request to us related to your Personal Information by emailing us at privacy@fullpower.com. Please note that we may maintain copies of Personal Information that you have updated, modified, or deleted, in our business records and in the normal course of our business operations, as permitted or required by applicable law. Your access to or correction of your Personal Information is subject to applicable legal restrictions and the availability of such information. Further, we may take reasonable steps to verify your identity before granting such access or making corrections.

We may not always be able to fully address your request, for example if it would impact the duty of confidentiality that we owe to others, if we are legally entitled to deal with the request in a different way, or if relevant exemptions apply to some or all of the Personal Information subject to the request.

Right to non-discrimination

In some jurisdictions, you may have the right not to be subject to discriminatory treatment for exercising your rights under applicable privacy laws. We will not discriminate against you for exercising any of the rights described in this section.

Additional information for certain jurisdictions

Fullpower is committed to respecting the privacy rights of individuals under all privacy laws applicable to us. At the end of this Notice, we provide specific information for individuals in certain jurisdictions, as required under certain privacy laws:

General Data Protection Regulation (“GDPR”) – EEA/UK: Section 12 below provides information about data subject rights under the EU and UK GDPR and UK Data Protection Act.

California Consumer Privacy Act (“CCPA”) – California Residents: Section 13 below sets forth additional information for California residents, about their rights under the CCPA.

7. Retention of Your Personal Information

Fullpower retains Personal Information in identifiable form only for as long as necessary to fulfill the purposes for which the Personal Information was provided to Fullpower as described above in Sections 1 and 3. We may retain Personal Information for a longer period to comply with legal obligations, resolve disputes, enforce agreements, and for similar essential purposes. To determine the appropriate retention period for Personal Information, we consider the amount, nature, and sensitivity of the Personal Information, the potential risk of harm from unauthorized use or disclosure of your Personal Information, the purposes for which we process your Personal Information and whether we can achieve those purposes through other means, and the applicable legal requirements.We have established internal policies and procedures regarding retention periods applicable to your Personal Information.

If we share your Personal Information with third parties as described in Section 4, unless prohibited under local law, we enter into agreements that allow recipients to retain your Personal Information for as long as necessary to fulfill the purposes for which the Personal Information was provided to them.

8. Transfers and Storage of Your Personal Information

Fullpower and its servers are located in the United States. If you are located outside of the United States—such as in the European Economic Area (“EEA”), the United Kingdom (“UK”), Switzerland, Japan, Australia, New Zealand, Singapore, or the Republic of Korea—your Personal Information will be transferred to and stored in the United States and other jurisdictions in which we or our vendors operate. The data protection laws in these jurisdictions may not be equivalent to those in your jurisdiction of residence. We transfer your Personal Information from your location to the United States for data storage related to Sleeptracker-AI, which is necessary to provide you the services under our End User License Agreement.

Additionally, we will take steps to ensure that your Personal Information is subject to appropriate safeguards, including, where required, by implementing appropriate adequacy measures, such as the EU standard contractual clauses (as approved by the European Commission) for the transfer of Personal Information to processors established in third countries. The current forms for the standard contractual clauses can be found at https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32021D0914&from=EN.

Regardless of where your Personal Information is stored, it is subject to the retention periods (see Section 7) and security measures (see Section 10) explained in this Notice.

For additional information regarding the mechanism under which your Personal Information is transferred across national borders, you may contact us as set forth below in Section 11 (Contact and Comments).

9. Children's Privacy

Sleeptracker-AI is not intended for and may not be used by children under the age of 16. We do not knowingly collect Personal Information from children under the age of 16. If we learn that we have collected Personal Information from or about a child under the age of 16, we will delete that Personal Information from our systems.

10. Security of Information

Fullpower takes precautions intended to help protect information that we process, but no system or electronic data transmission is completely secure. Any transmission of your Personal Information is at your own risk, and we expect that you will use appropriate security measures to protect your Personal Information.

You are responsible for maintaining the security of your account credentials for the Sleeptracker-AI services. Fullpower will treat access to the Sleeptracker-AI services through your account credentials as authorized by you. Unauthorized access to password-protected or secure areas is prohibited and may lead to criminal prosecution. As set forth in the End User License Agreement, we may suspend your use of all or part of the Sleeptracker-AI services without notice if we suspect or detect any breach of security. If you believe that information you provided to us is no longer secure, please notify us immediately using the contact information provided below.

If we become aware of a breach that affects the security of your Personal Information, we will provide you with notice where required by applicable law. To the extent permitted by applicable law, Fullpower will provide any such notice that Fullpower must provide to you under applicable law at your account’s email address. By using the Sleeptracker-AI services, you agree to accept notice electronically.

11. Contact and Comments

If you have any questions or concerns related to this Notice or our Personal Information practices, please email us at privacy@fullpower.com or by phone at +1.831.460.7070. You may also contact us via postal mail at:

David Shanes

Data Protection Officer
Fullpower Technologies, Inc.
1200 Pacific Avenue, Suite 300
Santa Cruz, California 95060
United States of America

12. For Users in the European Union (“EU”) European Economic Area (“EEA”) and the United Kingdom (“UK”)

To the extent that the EU and UK GDPR or the UK Data Protection Act applies to our processing of your Personal Information, we are the data controller in respect of the Personal Information that we collect and use for the purposes indicated in Sections 1, 2, and 3 of this Notice.

Our Obligations

Under EU and UK GDPR, as a data controller, we are obligated to implement appropriate technical and organisational measures:

We are also obligated to:

Legal bases of processing

Certain laws, including the GDPR and the UK Data Protection Act, require that we inform you of the legal bases for our processing of your Personal Information. Pursuant to the GDPR (and other similar relevant laws, such as the UK Data Protection Act), we may process Personal Information for the following legal bases:

Your rights

You may have the following rights, in relation to Personal Information that we collect and use for the purposes indicated in Sections 1, 2, and 3 of this Notice, under the EU and UK GDPR and UK Data Protection Act:

You may submit a request to us regarding your Personal Information held by Fullpower by email at privacy@fullpower.com. You may also submit a request to us by phone at +1.831.460.7070. Please note that we may rely on applicable exemptions under EU, Member State, or UK law in order to deny part or all of your request. If we do so, we will inform you when responding to your request. If you are not satisfied with our response, you may lodge a complaint with your supervisory authority.

Data Protection Officer (“DPO”)

You may contact our DPO at:
+1.831.460.7070
privacy@fullpower.com

Our EU Representative:

Under Article 27 of the GDPR, we have appointed an EU Representative to act as our data protection agent. Our nominated EU Representative is:

Company: Instant EU GDPR Representative Ltd
Name: Adam Brogden
Email: contact@gdprlocal.com
Tel: +353 15 549 700
Reporting link: https://fullpowertechnologiesinc.gdprlocal.com/eu
Address: Instant EU GDPR Representative Ltd, Office 2 12A Lower Main Street, Lucan Co Dublin K78 X5P8 Ireland

Our UK Representative:

Under Article 27 of the UK Data Privacy Act, we have appointed a UK Representative to act as our data protection agent. Our nominated UK Representative is:

Company: GDPR Local Ltd
Name: Adam Brogden
Email: contact@gdprlocal.com
Tel: +441 772 217 800
Reporting link: https://fullpowertechnologiesinc.gdprlocal.com/uk
Address: GDPR Local, Ltd,1st Floor Front Suite 27-29 North Street, Brighton, England BN1 1EB

13. California Residents

In this section, we provide information for California residents in connection with the CCPA. Fullpower does not currently qualify as a “business” as defined under the CCPA and is not subject to the CCPA’s requirements, enforcement mechanisms, or any private right of action arising under the CCPA. Fullpower has, however, voluntarily provided the following disclosures in line with the CCPA’s relevant provisions.

Categories of Personal Information We May Collect and Disclose.
Our collection, use, and disclosure of Personal Information about a California resident will vary depending upon the circumstances and nature of our interactions or relationship with such resident. In particular, the Sleeptracker-AI services collect, or may have collected in the last twelve (12) months, the categories of Personal Information as described in Section 1 above.

Use of Personal Information. We may use or disclose the Personal Information we collect for one or more of the business purposes indicated in Section 3 above.

We will not collect additional categories of Personal Information or use the Personal Information we collected for materially different, unrelated, or incompatible purposes without providing you notice.

Categories of Personal Information Sold. The CCPA defines a “sale” as disclosing or making available Personal Information to a third party in exchange for monetary or other valuable consideration. We do not sell Personal Information or share Personal Information for the purposes of cross-context behavioral advertising.

Sources of Personal Information. We have collected the above categories of Personal Information from the following sources:

Disclosures of Personal Information: We may disclose your Personal Information to a third party for a business purpose. When we disclose Personal Information for a business purpose, we enter a contract that describes the purpose and requires the recipient to both keep that Personal Information confidential and not use it for any purpose except performing the contract. We share your Personal Information with the categories of third parties listed in Section 4 above.

In the preceding twelve (12) months, we have disclosed the following categories of Personal Information for a business purpose:

We do not sell Personal Information or share Personal Information for the purposes of cross-context behavioral advertising. In the event that we do sell any Personal Information or share Personal Information for the purposes of cross-context behavioral advertising, we will update this Notice to list the categories of consumers’ Personal Information sold or shared for the purposes of cross-context behavioral advertising.

CCPA Rights: California law grants California residents certain rights as set forth below.

California residents may make a Request to Know up to twice every 12 months.

Right to Non-discrimination: California residents have the right not to be subject to discriminatory treatment for exercising their rights under the CCPA. We will not discriminate against you for exercising any of your CCPA rights.

Submitting Requests. To exercise the access, data portability and deletion rights described above, you may email us at privacy@fullpower.com or via our contact form.

When processing a request by email or phone, we will take steps to verify your request by matching the information provided by you with the information we have in our records. To verify a request, we may ask for your name, email address, and any other information you have submitted to us. If we are unable to adequately verify a request, we will notify the requestor. In some cases, we may request additional information in order to verify your request or where necessary to process your request.

Only you, or a person that you authorize to act on your behalf, may make a verifiable consumer request related to your Personal Information. You may also make a verifiable consumer request on behalf of your minor child.

You may only make such a request for access or data portability twice within a 12-month period. The verifiable consumer request must provide sufficient information that allows us to reasonably verify you are the person about whom we collected Personal Information or an authorized representative, and describe your request with sufficient detail that allows us to properly understand, evaluate and respond to it.

We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm the Personal Information relates to you. Making a verifiable consumer request does not require you to create an account with us. We will only use Personal Information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.

We endeavor to respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. We will deliver our written response electronically. Any disclosures we provide will only cover the 12-month period preceding the receipt of the verifiable consumer request. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your Personal Information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.