Privacy Policy

Last updated: June 8, 2026

Mustafa Berkay Mutlu (“we,” “us,” or “our”) operates the Rested mobile application (the “App”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App.

By using the App, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Health Data

We access health data from your device’s health platform:

Apple HealthKit (iOS): Sleep records including duration, sleep stages (deep, light, REM, awake), and related metrics
Google Health Connect (Android): Sleep sessions and sleep stage data

Important: We only read health data. We never write to or modify your health data.

1.2 Information You Provide

Sleep Goals: Target sleep duration, bedtime, and wake time preferences
Schedule Information: Work schedule type (regular, shift patterns)
Morning Check-ins: Daily energy ratings, tags, and optional notes
Action Completions: Tracking of sleep hygiene habits (caffeine cutoff, light exposure, etc.)
Notification Preferences: Your preferred reminder times and settings

1.3 Calendar Data

If you grant calendar access, we read calendar events to help identify your work schedule. We only read calendar data and never create, modify, or delete calendar events.

1.4 Automatically Collected Information

Crash Reports: If you opt-in, we collect crash logs and error reports to improve app stability
Device Information: Device model, operating system version, and app version (for crash reports only)

1.5 Usage Data and Diagnostics

If you opt in to the single “Usage Data & Diagnostics” consent, we collect first-party analytics and diagnostics to understand how the App is used and to fix crashes:

Product interaction (Mixpanel): Anonymous screen views and feature-usage events. (Legal basis: consent – you opt in during onboarding or in Settings)
Crash and performance diagnostics (Sentry): Anonymous crash logs and performance traces. (Legal basis: consent – you opt in during onboarding or in Settings)

This data is first-party only. We do not track you, we do not use any device ad ID, and we do not share this data with advertisers or any third party for measurement across companies. There is no third-party ad or attribution SDK in the App.

Aggregate install attribution (no tracking): We use Apple Search Ads attribution on iOS via Apple’s AdServices token and the Google Play install referrer on Android, together with Apple’s privacy-preserving SKAdNetwork aggregate reporting. These provide campaign-level, aggregated counts only — no personal data, no device-level ad ID, and no cross-app tracking. (Legal basis: legitimate interest – standard, aggregate attribution that does not require consent and does not track you)

2. How We Use Your Information

We use the collected information to:

Provide personalized sleep recommendations based on your schedule
Track your sleep patterns and calculate sleep debt
Send timely reminders for sleep hygiene actions
Generate AI-powered sleep insights (processed entirely on your device)
Improve app stability through crash analysis (if opted-in)
Understand how the App is used to improve it (first-party analytics, if opted-in)
Process subscription purchases
Measure the effectiveness of advertising campaigns using aggregate, non-tracking attribution only

3. AI and On-Device Processing

Our App includes AI-powered sleep coaching features. All AI processing happens entirely on your device:

The AI model is downloaded and stored locally on your device
Your sleep data is analyzed on-device only
No sleep data is sent to external servers for AI processing
Insights are generated and stored locally

4. Third-Party Sub-Processors

Service	Purpose	Data Region	Privacy Policy
Mixpanel	Anonymous first-party analytics (opt-in)	European Union	Privacy Policy
Sentry	Crash reporting (opt-in)	European Union	Privacy Policy
RevenueCat	Subscription management	United States	Privacy Policy
Apple (AdServices)	Apple Search Ads attribution (iOS only, aggregated, no personal data, no tracking)	United States	Privacy Policy
Apple / Google	App distribution and payments	Per their policies	Apple / Google

Each service processes only the data described above and acts as a first-party processor on our behalf — none of them receives your data for their own ad targeting or tracking across companies. Cloud data (excluding subscription data) is stored in the European Union.

5. Data Storage and Security

5.1 Local Storage

Most of your data is stored locally on your device in an encrypted database:

Sleep records and statistics
User settings and preferences
Morning check-ins and action completions
Calendar import data
AI-generated insights

5.2 Cloud Storage

The only data stored externally:

Crash reports (Sentry) - if opted-in
Subscription status (RevenueCat) - required for premium features

5.3 Device Backups

Your app data may be included in automatic device backups:

iOS: iCloud Backup (managed by Apple)
Android: Google Auto Backup (managed by Google)

These backups are encrypted and managed by Apple/Google according to their privacy policies. We do not have access to your backup data.

5.4 No User Accounts

The App does not require or create user accounts. There is no server that stores your personal data.

6. Data Retention

Local data: Stored on your device until you delete it or uninstall the App
Crash reports: Retained by Sentry for 90 days
Subscription data: Retained by RevenueCat as required for purchase validation
First-party analytics: Retained by Mixpanel per its data retention policy; withdrawing the Usage Data & Diagnostics consent stops new collection immediately

Under the General Data Protection Regulation (GDPR), you have the right to:

7.1 Access Your Data

All your data is stored locally on your device. You can view it within the App.

7.2 Export Your Data

You can export all your data from the App:

Go to Settings > Privacy > Export My Data
All your data is exported as a JSON file that you can save or share
Export includes: sleep records, settings, achievements, check-ins, and all preferences

7.3 Delete Your Data

You can delete your data by:

Using the in-app deletion feature: Settings > Privacy > Delete My Data
Uninstalling the App (removes all local data)
Contacting us to request deletion of crash reports stored on Sentry

When you delete your data through the app:

All local data is permanently erased
Your Support ID is cleared from analytics services
Scheduled notifications are cancelled

7.4 Data Portability

Use the Export My Data feature in Settings > Privacy to download all your personal data in a machine-readable JSON format.

7.5 Opt-Out

You can opt-out of each purpose independently:

Usage data and diagnostics (Settings > Privacy > Usage Data & Diagnostics)
Health data sync (Settings > Health Sync)
Calendar sync (Settings > Calendar)
Notifications (Settings > Notifications)

Withdrawing the Usage Data & Diagnostics consent stops new first-party analytics and diagnostics collection immediately.

8. Children’s Privacy

The App is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

9. International Data Transfers

If you enable crash reporting, your data may be transferred to servers located outside your country. Sentry maintains data processing agreements that comply with GDPR requirements.

We do not share your device or app identifiers with any ad or attribution provider, and we do not use any device ad ID.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

Posting the new Privacy Policy in the App
Updating the “Last updated” date

Your continued use of the App after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us:

Email: epictimesapps@gmail.com

Developer: Mustafa Berkay Mutlu Location: Berlin, Germany

We process your data based on:

Consent, obtained per purpose:
- Health data access and calendar access (each granted when you enable the relevant feature).
- Usage data and diagnostics (Mixpanel product interaction, Sentry crash/performance) – granted via the single “Usage Data & Diagnostics” consent. This is first-party only and is never used for advertising or shared with third parties for tracking.
Contract Performance: Providing the App’s core functionality
Legitimate Interest: Improving app stability and user experience, aggregate campaign attribution (Apple Search Ads via AdServices, Google Play install referrer, SKAdNetwork — aggregated, no personal data, no tracking)

13. California Consumer Privacy Act (CCPA)

We do not sell or share personal information as defined by the CCPA. We do not share device or app identifiers with any ad or attribution provider, and we do not use any device ad ID for cross-app tracking. California residents may contact us at the email below for any data requests.