Effective August 25, 2026, this policy applies only to personal information defined as Consumer Health Data under Washington’s My Health My Data Act, Nevada’s Health Data Privacy Act, or other applicable state consumer health privacy laws. It supplements Eight Sleep’s Privacy Policy and other applicable product privacy policies. Those linked policies are not supplied here.
Supporting quotations
Effective Date: August 25, 2026
This Consumer Health Data Privacy Policy (“Policy”) applies solely to personal information defined as “Consumer Health Data” subject to the Washington My Health My Data Act (“MHMDA”), the Nevada Health Data Privacy Act (“NHDPA”), or other applicable state consumer health privacy laws. This Policy supplements the Eight Sleep, Inc. (“Eight Sleep”) Privacy Policy and any other privacy policies applicable to our products.
Not stated here
The linked Privacy Policy and other applicable product policies are not supplied here; their additional practices and terms cannot be described from this source.
Data Access & Collection · Context
Consumer Health Data means identifiable health-status information
The policy defines Consumer Health Data as personal information linked or reasonably linkable to you that identifies your past, present, or future physical or mental health status, as defined by the Washington and Nevada laws. It excludes, among other things, deidentified information and data that cannot reasonably be used to infer information about or be linked to an identifiable person or their device.
Supporting quotations
When we say “Consumer Health Data” in this Policy, we mean personal information that is linked or reasonably linkable to you and that identifies your past, present, or future physical or mental health status, as defined by the MHMDA and the NHDPA. Consumer Health Data does not include, among other things, data that cannot reasonably be used to infer information about, or otherwise be linked to, an identified or identifiable individual, or a device linked to such an individual, or other deidentified information. To the extent we process deidentified information, we will maintain and use the information in deidentified form and will not attempt to reidentify the information unless permitted by applicable law.
Cross-references
related (model-proposed): Health-data practices depend on your use of the products — defines: The definition limits the health-data practices to identifiable or reasonably linkable health-status information covered by the policy, with the stated deidentified-data exclusions.
Use & Processing · Company commitment
Deidentified information stays deidentified, subject to a legal exception
When Eight Sleep processes deidentified information, it says it will maintain and use it in deidentified form and will not try to reidentify it unless applicable law permits that. This is a conditional commitment, not an absolute ban on reidentification.
Supporting quotations
When we say “Consumer Health Data” in this Policy, we mean personal information that is linked or reasonably linkable to you and that identifies your past, present, or future physical or mental health status, as defined by the MHMDA and the NHDPA. Consumer Health Data does not include, among other things, data that cannot reasonably be used to infer information about, or otherwise be linked to, an identified or identifiable individual, or a device linked to such an individual, or other deidentified information. To the extent we process deidentified information, we will maintain and use the information in deidentified form and will not attempt to reidentify the information unless permitted by applicable law.
Data Access & Collection · Context
Health-data practices depend on your use of the products
Eight Sleep collects and processes information to provide its products or features. This summary applies only where that information is Consumer Health Data covered by the state laws named in the policy: identifiable or reasonably linkable health-status information, excluding the deidentified information described in the definition. The practices depend on your interactions and what you choose to share; providing health data is voluntary in many instances, not necessarily all. Other product privacy policies are not supplied here.
Supporting quotations
To provide our products or features, we collect and process information about you, including information that may be considered Consumer Health Data. The best way to learn about the types of information we collect and how we use them is to review the Eight Sleep Privacy Policy and other privacy policies applicable to our products.
For those covered by this Policy, the table below provides a summary of our practices in relation to Consumer Health Data, to the extent personal information we collect about you is considered Consumer Health Data. In each case, our practices depend on how you interact with Eight Sleep and our products, and the information that you choose to share with us (as in many instances, providing your Consumer Health Data to us is voluntary).
This Consumer Health Data Privacy Policy (“Policy”) applies solely to personal information defined as “Consumer Health Data” subject to the Washington My Health My Data Act (“MHMDA”), the Nevada Health Data Privacy Act (“NHDPA”), or other applicable state consumer health privacy laws. This Policy supplements the Eight Sleep, Inc. (“Eight Sleep”) Privacy Policy and any other privacy policies applicable to our products.
When we say “Consumer Health Data” in this Policy, we mean personal information that is linked or reasonably linkable to you and that identifies your past, present, or future physical or mental health status, as defined by the MHMDA and the NHDPA. Consumer Health Data does not include, among other things, data that cannot reasonably be used to infer information about, or otherwise be linked to, an identified or identifiable individual, or a device linked to such an individual, or other deidentified information. To the extent we process deidentified information, we will maintain and use the information in deidentified form and will not attempt to reidentify the information unless permitted by applicable law.
Not stated here
The referenced Privacy Policy, Privacy Notice or product privacy policies are not supplied here; no additional terms or practices from those documents are inferred.
Data Access & Collection · Company practice
Data may include biological details and health conditions
For people covered by this policy, Eight Sleep may collect or receive biological sex, height and weight, plus information identifying health conditions—including sleep conditions, health status, symptoms, diseases, diagnoses, surgeries, procedures, treatment and medications. These categories may count as Consumer Health Data; not every category is collected for every person, and practices depend on your interactions and what you share.
Supporting quotations
We may collect or receive the following categories of personal information which may be considered Consumer Health Data. Not all categories will be collected or received for every individual.
Biological information, including biological sex, height, and weight;
Information that identifies health conditions, including sleep conditions, status, treatment, symptoms, diseases, diagnoses, surgeries, procedures, and medications;
For those covered by this Policy, the table below provides a summary of our practices in relation to Consumer Health Data, to the extent personal information we collect about you is considered Consumer Health Data. In each case, our practices depend on how you interact with Eight Sleep and our products, and the information that you choose to share with us (as in many instances, providing your Consumer Health Data to us is voluntary).
Data Access & Collection · Company practice
Data may include interventions and bodily measurements
Eight Sleep may collect or receive information identifying social, psychological, behavioral and medical interventions, and measurements of bodily functions, vital signs or similar characteristics identifying health status, including heart rate. These are possible Consumer Health Data categories for covered people, not a statement that every category is collected from everyone.
Supporting quotations
We may collect or receive the following categories of personal information which may be considered Consumer Health Data. Not all categories will be collected or received for every individual.
Information that identifies social, psychological, behavioral, and medical interventions;
Measurements of bodily functions, vital signs, or similar characteristics identifying health status, including heart rate;
Data Access & Collection · Company practice
Clinical data may include lab and blood-test results
Possible Consumer Health Data includes diagnoses, diagnostic testing, treatment or medication information, including lab and blood-panel results accessed through third-party health-record platforms. Through connectivity platforms such as HealthEx, you may authorize Eight Sleep to access clinical records from your healthcare providers. Not every category is collected or received for every individual; further Privacy Policy details are not supplied here.
Supporting quotations
We may collect or receive the following categories of personal information which may be considered Consumer Health Data. Not all categories will be collected or received for every individual.
Information identifying diagnoses or diagnostic testing, treatment, or medication, including laboratory and blood panel test results accessed through third-party health record platforms;
Partners, service providers, contractors, and other third parties, including third-party integrations such as Apple Health, Google Health Connect, and third-party health record connectivity platforms such as HealthEx, through which you may authorize Eight Sleep to access clinical health records from your healthcare providers, as described further in the Eight Sleep Privacy Policy.
Not stated here
The referenced Privacy Policy, Privacy Notice or product privacy policies are not supplied here; no additional terms or practices from those documents are inferred.
Data Access & Collection · Company practice
Possible data categories include sexual health and precise location
Eight Sleep lists reproductive or sexual health information and precise location as information it may collect or receive that may be Consumer Health Data. This applies to people and data covered by the policy; not all categories are collected for everyone, and practices depend on your interactions and information you share.
Supporting quotations
We may collect or receive the following categories of personal information which may be considered Consumer Health Data. Not all categories will be collected or received for every individual.
Reproductive or sexual health information;
Precise location information; and
For those covered by this Policy, the table below provides a summary of our practices in relation to Consumer Health Data, to the extent personal information we collect about you is considered Consumer Health Data. In each case, our practices depend on how you interact with Eight Sleep and our products, and the information that you choose to share with us (as in many instances, providing your Consumer Health Data to us is voluntary).
Inference & Profiling · Company practice
The data categories also include inferred or derived health information
Eight Sleep may collect or receive other health information, including information that may be used to infer, or is derived data related to, the listed biological, health, intervention, vital-sign, clinical, reproductive or sexual-health and location information. Not every category is collected from each individual. The policy does not identify particular inferences in this item.
Supporting quotations
We may collect or receive the following categories of personal information which may be considered Consumer Health Data. Not all categories will be collected or received for every individual.
Other health information, including information that may be used to infer or that is derived data related to the above.
Data Access & Collection · Company practice
Health data can come from you, your activity and your devices
Sources of covered Consumer Health Data include you, your activity with Eight Sleep products, information you provide directly—such as through the optional onboarding questionnaire—and your devices. Practices depend on your interactions and choices; the questionnaire is described as optional.
Supporting quotations
You (including from information from your activity with our products or that you provide directly to us (i.e., through the optional onboarding questionnaire));
Your device(s); and
For those covered by this Policy, the table below provides a summary of our practices in relation to Consumer Health Data, to the extent personal information we collect about you is considered Consumer Health Data. In each case, our practices depend on how you interact with Eight Sleep and our products, and the information that you choose to share with us (as in many instances, providing your Consumer Health Data to us is voluntary).
Data Access & Collection · Company practice
Integrations and other third parties can supply health data
Sources also include partners, service providers, contractors and other third parties. Examples are Apple Health, Google Health Connect and health-record platforms such as HealthEx, through which you may authorize Eight Sleep to access clinical records from your healthcare providers. The referenced Privacy Policy contains further details that are not supplied here.
Supporting quotations
Partners, service providers, contractors, and other third parties, including third-party integrations such as Apple Health, Google Health Connect, and third-party health record connectivity platforms such as HealthEx, through which you may authorize Eight Sleep to access clinical health records from your healthcare providers, as described further in the Eight Sleep Privacy Policy.
Not stated here
The referenced Privacy Policy, Privacy Notice or product privacy policies are not supplied here; no additional terms or practices from those documents are inferred.
Use & Processing · Company practice
Health data supports product personalization, safety and communication
Eight Sleep collects, uses and discloses covered Consumer Health Data for purposes described in its Privacy Notice and as reasonably necessary to provide requested products and services. Listed purposes include providing and personalizing products, powering autopilot, improving product safety and security, and communicating with you or answering inquiries. Practices depend on your interactions and information you share; the referenced Privacy Notice is not supplied here.
Supporting quotations
We collect, use, and disclose Consumer Health Data for the purposes described in our Privacy Notice and as reasonably necessary to provide you with the products and services you have requested. This may include:
Providing and personalizing our products and services, including powering autopilot features;
Enhancing the safety and security of our products;
Communicating with you and responding to your inquiries;
For those covered by this Policy, the table below provides a summary of our practices in relation to Consumer Health Data, to the extent personal information we collect about you is considered Consumer Health Data. In each case, our practices depend on how you interact with Eight Sleep and our products, and the information that you choose to share with us (as in many instances, providing your Consumer Health Data to us is voluntary).
Not stated here
The referenced Privacy Policy, Privacy Notice or product privacy policies are not supplied here; no additional terms or practices from those documents are inferred.
Use & Processing · Company practice
Health metrics may be used in personalized marketing communications
The listed collection, use and disclosure purposes include marketing and advertising features that may interest you, including personalized messages containing sleep and health metrics, such as daily or monthly sleep reports. This sits within the policy’s stated purposes in its Privacy Notice and provision of requested products and services; practices depend on your interactions and information you share. The referenced notice is not supplied here.
Supporting quotations
We collect, use, and disclose Consumer Health Data for the purposes described in our Privacy Notice and as reasonably necessary to provide you with the products and services you have requested. This may include:
Marketing and advertising certain features that may be of interest to you, including sending you personalized communications containing your sleep and health metrics (such as daily or monthly sleep reports);
For those covered by this Policy, the table below provides a summary of our practices in relation to Consumer Health Data, to the extent personal information we collect about you is considered Consumer Health Data. In each case, our practices depend on how you interact with Eight Sleep and our products, and the information that you choose to share with us (as in many instances, providing your Consumer Health Data to us is voluntary).
Not stated here
The referenced Privacy Policy, Privacy Notice or product privacy policies are not supplied here; no additional terms or practices from those documents are inferred.
Legal Rights & Agreement Rules · Company practice
Health data may be processed to meet legal obligations
Complying with applicable legal obligations is a listed purpose for collecting, using and disclosing covered Consumer Health Data. This is part of the policy’s purposes framework, which also refers to an unsupplied Privacy Notice and providing requested products and services.
Supporting quotations
We collect, use, and disclose Consumer Health Data for the purposes described in our Privacy Notice and as reasonably necessary to provide you with the products and services you have requested. This may include:
Complying with applicable legal obligations; and
Not stated here
The referenced Privacy Policy, Privacy Notice or product privacy policies are not supplied here; no additional terms or practices from those documents are inferred.
Use & Processing · Company practice
Research includes trend analysis; health-model work requires separate consent
The listed purposes include research and development, analyzing and measuring trends and aggregate analysis to inform future products. Using pseudonymized health and sleep data to improve Eight Sleep’s health models and develop new features, including health-condition analysis, is expressly conditioned on your separate consent. The sentence does not attach that separate-consent condition to every other listed research activity. The referenced Privacy Notice is not supplied here.
Supporting quotations
We collect, use, and disclose Consumer Health Data for the purposes described in our Privacy Notice and as reasonably necessary to provide you with the products and services you have requested. This may include:
Research and development, including analyzing and measuring trends, conducting aggregate analysis to inform future product development, and, with your separate consent, using pseudonymized health and sleep data to improve Eight Sleep's health models and develop new features, including health condition analysis.
Not stated here
The referenced Privacy Policy, Privacy Notice or product privacy policies are not supplied here; no additional terms or practices from those documents are inferred.
Other health-data purposes require consent, authorization or legal permission
Beyond the listed purposes, Eight Sleep may collect, use and disclose covered Consumer Health Data for other purposes with your consent or authorization, or as otherwise permitted by law. The policy therefore does not limit all processing to the specific purposes listed in the table.
Supporting quotations
We may also collect, use, and disclose Consumer Health Data for other purposes with your consent or authorization or as otherwise permitted by law.
Cross-references
contrast (model-proposed): Health data supports product personalization, safety and communication — contrast: The service-purpose framework describes processing for requested products and services, while the additional-purpose provision allows other purposes with consent or authorization or as otherwise permitted by law. This is a broader stated permission alongside the service-purpose framing, not a finding of legal contradiction.
Sharing & Disclosure · Company practice
Health data may be disclosed to apps and integrations
The possible recipients of covered Consumer Health Data include apps, websites and third-party integrations on or using Eight Sleep products, such as Apple Health, Google Health Connect and HealthEx. Practices depend on your interactions and the information you choose to share; listing a recipient does not say every person’s data is sent to it.
Supporting quotations
Categories of Consumer Health Data that we may collect: Categories of sources of Consumer Health Data: Purposes for which we may collect, use and disclose Consumer Health Data: Categories of parties with whom Consumer Health Data may be disclosed include:
Apps, websites, and third-party integrations on or using our products, such as Apple Health, Google Health Connect, and HealthEx;
For those covered by this Policy, the table below provides a summary of our practices in relation to Consumer Health Data, to the extent personal information we collect about you is considered Consumer Health Data. In each case, our practices depend on how you interact with Eight Sleep and our products, and the information that you choose to share with us (as in many instances, providing your Consumer Health Data to us is voluntary).
Sharing & Disclosure · Company practice
A change of ownership or control may involve health-data disclosure
Covered Consumer Health Data may be disclosed to new owners if ownership or control of all or part of Eight Sleep’s products or their assets changes. This is a transaction-dependent recipient category, not a statement that such a change has occurred.
Supporting quotations
Categories of Consumer Health Data that we may collect: Categories of sources of Consumer Health Data: Purposes for which we may collect, use and disclose Consumer Health Data: Categories of parties with whom Consumer Health Data may be disclosed include:
New owners in the event of a change of ownership or control of all or part of our products or their assets changes;
Sharing & Disclosure · Company practice
Providers may process health data to send reports and other messages
Possible recipients include partners, service providers, contractors and other third parties described in the Company Privacy Policy and product privacy policies. These include email providers processing Consumer Health Data on Eight Sleep’s behalf to deliver personalized sleep reports and other health-related communications. Those other policies are not supplied here, so their further recipient details are unknown.
Supporting quotations
Categories of Consumer Health Data that we may collect: Categories of sources of Consumer Health Data: Purposes for which we may collect, use and disclose Consumer Health Data: Categories of parties with whom Consumer Health Data may be disclosed include:
Partners, service providers, contractors, and other third parties, as described in the Company Privacy Policy and privacy; policies of our product, including email service providers who process your Consumer Health Data on our behalf to deliver personalized sleep reports and other health-related communications to you;
Not stated here
The referenced Privacy Policy, Privacy Notice or product privacy policies are not supplied here; no additional terms or practices from those documents are inferred.
Cross-references
related (model-proposed): Health metrics may be used in personalized marketing communications — references: The communications purpose includes personalized sleep and health reports; the recipient list identifies email providers processing health data on Eight Sleep’s behalf to deliver such reports and other health-related messages.
Sharing & Disclosure · Company practice
Law enforcement or others may receive health data for legal or harm-prevention reasons
Covered Consumer Health Data may be disclosed to law enforcement or other third parties in connection with legal requests, to comply with applicable law, or to prevent harm. The policy does not describe this category as restricted to court orders.
Supporting quotations
Categories of Consumer Health Data that we may collect: Categories of sources of Consumer Health Data: Purposes for which we may collect, use and disclose Consumer Health Data: Categories of parties with whom Consumer Health Data may be disclosed include:
Law enforcement or other third parties in connection with legal requests, to comply with applicable law or to prevent harm; and
Sharing & Disclosure · Company practice
Partner invitations authorize sharing with linked account users
Covered Consumer Health Data may be shared with linked account users, such as a partner or household member invited to share your Pod. The policy says this occurs at your direction and with your consent when you send or accept a partner invitation. It refers to further Privacy Policy details that are not supplied here.
Supporting quotations
Categories of Consumer Health Data that we may collect: Categories of sources of Consumer Health Data: Purposes for which we may collect, use and disclose Consumer Health Data: Categories of parties with whom Consumer Health Data may be disclosed include:
Linked account users (such as a partner or household member) who you have invited to share your Pod, as described in the Eight Sleep Privacy Policy. This sharing occurs at your direction and with your consent when you send or accept a partner invitation.
Not stated here
The referenced Privacy Policy, Privacy Notice or product privacy policies are not supplied here; no additional terms or practices from those documents are inferred.
Sharing & Disclosure · Permission or license
Other third parties may receive health data with consent or authorization
The table also allows disclosure of covered Consumer Health Data to other third parties with your consent or authorization. This is a distinct recipient category; it does not impose consent as a condition on every other disclosure listed in the table.
Supporting quotations
Categories of Consumer Health Data that we may collect: Categories of sources of Consumer Health Data: Purposes for which we may collect, use and disclose Consumer Health Data: Categories of parties with whom Consumer Health Data may be disclosed include:
Other third parties, with your consent or authorization.
Legal Rights & Agreement Rules · User right or choice
You may request access and information about collection or disclosure
Depending on where you live and subject to exceptions, you may ask Eight Sleep to confirm whether it collects or discloses your Consumer Health Data and to whom, request access to that data, and confirm whether it has disclosed or sold it. These rights concern data covered by the named state consumer-health privacy laws. The ability to ask about a sale does not establish that Eight Sleep sells the data. The other privacy policies mentioned are not supplied here. Requests must be authenticated before processing; allow up to 45 days for a response.
Supporting quotations
Depending on where you live and subject to certain exceptions, you may have certain rights related to your Consumer Health Data. This includes the right to (1) request that we confirm whether we are collecting or disclosing your Consumer Health Data (and to whom); (2) request access to your Consumer Health Data; (3) confirm whether we have disclosed or sold your Consumer Health Data; (4) request the deletion of your Consumer Health Data; and (5) request withdrawal of your consent or authorization relating to such data, including the collection and sharing of your Consumer Health Data.
This Consumer Health Data Privacy Policy (“Policy”) applies solely to personal information defined as “Consumer Health Data” subject to the Washington My Health My Data Act (“MHMDA”), the Nevada Health Data Privacy Act (“NHDPA”), or other applicable state consumer health privacy laws. This Policy supplements the Eight Sleep, Inc. (“Eight Sleep”) Privacy Policy and any other privacy policies applicable to our products.
To ensure the security of your account and your data, we will need to authenticate your request prior to processing it. Please allow up to 45 days for a response. If we deny your request, you may appeal that denial by following the instructions below. If your appeal is unsuccessful, you can file a complaint with the relevant government body in your state, including:
Not stated here
The linked Privacy Policy and other product privacy policies are not supplied; their additional rights or conditions are not inferred.
Account & Service Control · User right or choice
You may request deletion or withdrawal of consent
Depending on where you live and subject to exceptions, you may request deletion of your Consumer Health Data and withdrawal of consent or authorization relating to it, including its collection and sharing. Eight Sleep authenticates requests before processing them and asks you to allow up to 45 days for a response. This is a qualified right to request these actions, not a promise of immediate deletion or withdrawal in every case.
Supporting quotations
Depending on where you live and subject to certain exceptions, you may have certain rights related to your Consumer Health Data. This includes the right to (1) request that we confirm whether we are collecting or disclosing your Consumer Health Data (and to whom); (2) request access to your Consumer Health Data; (3) confirm whether we have disclosed or sold your Consumer Health Data; (4) request the deletion of your Consumer Health Data; and (5) request withdrawal of your consent or authorization relating to such data, including the collection and sharing of your Consumer Health Data.
To ensure the security of your account and your data, we will need to authenticate your request prior to processing it. Please allow up to 45 days for a response. If we deny your request, you may appeal that denial by following the instructions below. If your appeal is unsuccessful, you can file a complaint with the relevant government body in your state, including:
Cross-references
qualifies (model-proposed): Partner invitations authorize sharing with linked account users — qualifies: Invitation-based sharing occurs with consent; eligible users may request withdrawal of consent or authorization relating to collection and sharing, subject to location, exceptions and request authentication. The text does not promise immediate reversal of prior sharing.
Account & Service Control · Procedure
Email privacy@eightsleep.com for rights requests or policy questions
Use privacy@eightsleep.com to contact Eight Sleep, Inc. with policy questions, exercise applicable rights or, where applicable, appeal a consumer-rights action. Eight Sleep says it must authenticate your request before processing it to protect your account and data, and asks you to allow up to 45 days for a response.
Supporting quotations
To ensure the security of your account and your data, we will need to authenticate your request prior to processing it. Please allow up to 45 days for a response. If we deny your request, you may appeal that denial by following the instructions below. If your appeal is unsuccessful, you can file a complaint with the relevant government body in your state, including:
To submit a request to exercise your rights, and as applicable, to appeal a consumer rights action, please contact us using the information provided below.
If you have additional questions about this Policy, please contact us at:
privacy@eightsleep.com
Legal Rights & Agreement Rules · User right or choice
A denied request can be appealed, then raised with a state authority
If Eight Sleep denies your request, you may appeal using the contact information below the rights section: privacy@eightsleep.com. If your appeal is unsuccessful, you can complain to the relevant government body in your state. The policy links to complaint pages for the Washington and Nevada Attorneys General; the linked pages themselves are not supplied here.
Supporting quotations
To ensure the security of your account and your data, we will need to authenticate your request prior to processing it. Please allow up to 45 days for a response. If we deny your request, you may appeal that denial by following the instructions below. If your appeal is unsuccessful, you can file a complaint with the relevant government body in your state, including:
To submit a request to exercise your rights, and as applicable, to appeal a consumer rights action, please contact us using the information provided below.
privacy@eightsleep.com
Not stated here
The linked state complaint pages are not supplied; their complaint procedures are not analyzed.
Legal Rights & Agreement Rules · Company commitment
Eight Sleep promises reasonable efforts to notify you of material changes
Eight Sleep says it will make commercially reasonable efforts to notify you before material changes to this policy. It also asks you to check the policy periodically for updates. This is an efforts-based commitment; it does not give a fixed notice period or guarantee advance notice in every case.
Supporting quotations
We will make commercially reasonable efforts to notify you before we make material changes to this Policy. Please check this Policy periodically for updates.