Who we are.

Sleeptel is a biometric mattress audit operated by Sleeptel Pty Ltd (ACN 701 740 178 · ABN 34 701 740 178), based in Victoria, Australia. Your sleep and wearable data is health information, which is sensitive information under the Privacy Act 1988 (Cth), so we treat it accordingly. Privacy questions, requests and complaints: privacy@sleeptel.com.

What we collect.

• Wearable biometric data, read once for the audit if you connect Oura, Whoop, Garmin, Google Health or Apple Health: up to thirty nights of HRV, resting heart rate, skin temperature and sleep stages (fourteen nights from Apple Health), and your daily activity (strain) over the same period where your device records it. The Oura, Whoop, Garmin and Google Health connections are read-only; we parse the read server-side into a single profile and immediately drop the access token. Apple Health has no token: a Shortcut on your iPhone sends the nights once. If you enter numbers manually, the same profile is built from what you type.
• Your answers, volunteered: the quiz (sleep position, build, temperature preference, pain, partner, budget, buying preference), your postcode, three current-bed questions (type, perceived firmness, age band), and two optional details about you (age range and sex) used to compare your readings to typical ranges. Your postcode shows you which stores near you stock your match and, if you choose to be contacted, tells us which of those stores can serve you. We never take your location from your device.
• Contact details: your first name, your phone, and your email if you give one.
• Consent records: which opt-ins you granted or declined, when, and the version of the consent wording you saw.

Why we collect it, and what we share.

Running your audit means matching you to mattresses. Whether a matched brand sees you as an individual is your choice, and it is off unless you turn it on.

• Deliver your audit and match you. We use your answers to run the audit and send your results and your matches to you. If you tick neither box at the end of the audit, brands see your answers only inside group statistics of 5 or more people: never as an individual record, and never with your contact details.
• Ask how it worked out. We'll email you up to three short follow-ups at 30, 60 and 90 days to ask how your match worked out, and may use de-identified answers in aggregate statistics. Answering is voluntary, the form says so, and closing it records nothing.
• Show you to the sellers your audit matched, and let them contact you (optional). Tick the first box and the sellers your audit matched, brands and nearby stores, receive your first name, your contact details, your postcode, your quiz answers (not your pain answers) and your match score, and may contact you directly by SMS, email or phone - one message each within 14 days. The brands are those whose mattresses matched you. The stores are those that both stock your match and serve your postcode. The same tick lets our follow-up emails show the mattress you matched with and a link to buy it, and we may earn a commission if you buy.
• Let those brands contact you again (optional). Tick the second box and those same matched brands may contact you for up to 18 months, when they launch or refresh products. Sleeptel sends most of these messages on their behalf; a brand you have opted in to may also message you from its own systems. Reply STOP at any time to stop all messages.

Brands you match with can see a match score computed from your quiz answers and demographics only. Nothing from your wearable, and nothing computed from it, is shared with or sold to anyone.

Your wearable readings (heart rate variability, resting heart rate, skin temperature, sleep stages, and daily activity and strain) and anything computed from them are never shown to a seller and never sold. Your pain answers never reach a brand as part of your individual record.

If you connect Google Health, Sleeptel's use and transfer of information received from the Google Health API will adhere to the Google Health API Developer and User Data Policy, including the Limited Use requirements.

Where your data is processed.

We use a small set of service providers to run Sleeptel:

• Supabase - database, hosted in Singapore.
• Vercel - website and API hosting.
• Resend - sends your audit email.
• Sentry - error monitoring (never receives your inputs).

Overseas disclosure. Your data is stored in our Supabase database in Singapore, and error-monitoring data is processed by Sentry in the European Union (Germany). Sleeptel remains accountable for how these overseas recipients handle your information.

How long we keep it.

Your wearable is read once and the access token dropped immediately after that read. Your wearable readings are kept while your result link is live, so that your audit can be built and sent to you, and an automated sweep erases them within hours of that link expiring, whether or not you opened it. Your Personal Sleep Audit is kept in a locked copy that only the link in your message can open, so we cannot read it while we hold it; it is deleted after 14 days, or after 18 months if you ticked the second box, or sooner if you ask. Your volunteered answers and contact details are retained while you remain a contact; brands that receive your details under an opt-in are contractually required to delete or rotate Sleeptel-sourced contact details after their contract ends. You can ask us to delete your record at any time.

Security.

We take reasonable steps appropriate to sensitive data: database access is locked to server-side keys with row-level security, secrets are never exposed to the browser, and personal data is only ever written alongside a recorded consent. No advertising trackers.

Your rights, and how to withdraw.

You can ask us to access or correct the personal information we hold about you.

• To change what we send you, yourself: go to audits.sleeptel.com/preferences and enter the email address or mobile you used. We send a link there, and you choose to stop emails, texts or everything.
• To stop the messages: reply STOP to any message. That stops all of them, from us and from the brands we send on behalf of.
• To stop us sharing your details: email privacy@sleeptel.com. We stop giving your details to any new brand. Brands that already hold your details are told to suppress you, and are required to act on that within five business days.

If you think we've mishandled your data, contact us first; if you're not satisfied, you can complain to the Office of the Australian Information Commissioner (OAIC).

Children.

The audit is for adults. We don't knowingly collect data from anyone under 18.

What the audit is, and isn't.

The audit is a mattress fit recommendation. It reads what you tell us and, if you connect a wearable, a limited set of sleep measurements, then returns a target specification and the beds that match it. It is not health advice, and nothing in it is a finding about your health.

Confidence numbers are a realistic estimate of how well our inputs constrain the recommendation - they are not warranties. A high-confidence top fit is the best guess from the data available, not a guarantee. Every recommended brand has a trial period; use it. We may update rankings as the catalogue changes; the audit you receive by email is a snapshot of the day it was generated.

How we make money.

Sleeptel earns a referral commission from some of the brands listed when you buy through our link. We rank by fit, not by commission. Brands cannot pay to rank higher. Brands without an affiliate program are included on equal footing; we just don't get paid if you buy.

Each recommendation card shows the brand's commission status on hover. Your audit also shows why each mattress matched, for every position.

Get in touch.

Data requests, deletion, corrections, or just a sanity-check on the audit: privacy@sleeptel.com. We aim to reply within two business days, Melbourne time.