Privacy Policy
93 of 114 blocks carry cards. 73 cards.
Eight Sleep, Inc.
Privacy Notice
Last Updated: August 25, 2026
- The notice covers the website, app, devices and other interactions Legal Rights & Agreement Rules
This Privacy Notice describes how Eight Sleep, Inc. ("Eight Sleep", "we", "us", "our") collects, uses and discloses information about you when you use our website (https://www.eightsleep.com/) (the "Website"), mobile application (the "App"), the Pod, another Eight Sleep device, or any other services, tools and features offered by us, or when you otherwise interact with us (collectively, the "Services"). For the purposes of this Privacy Notice, "you" and "your" means you as the user of the Services.
- The notice covers the website, app, devices and other interactions Legal Rights & Agreement Rules
For purposes of data protection laws, we are the data controller. Our representative in the European Economic Area, UK and Switzerland is the Prighter Group, whose contact details are set out in Section 11 below. If you are an EEA, UK or Swiss resident, you may also make a request here.
- Eight Sleep is the data controller Legal Rights & Agreement Rules
Please read this Privacy Notice carefully. By using any of the Services, you agree to the collection, use, and disclosure of your information as described in this Privacy Notice. If you do not understand or agree to this Privacy Notice, please do not use or access the Services.
- Using the Services signifies agreement to the notice Legal Rights & Agreement Rules
1. CHANGES TO THIS PRIVACY NOTICE
We may modify this Privacy Notice from time to time, in which case we will update the "Last Updated" date at the top of this Privacy Notice. If we make material changes to how we use or disclose information we collect, we will use reasonable efforts to notify you (such as by emailing you at the last email address you provided us, by posting notice of such changes on the Services or by other means consistent with applicable law) and will take additional steps as required by applicable law. If you do not agree to any updates to this Privacy Notice, please do not continue using or accessing the Services.
- Material use or disclosure changes trigger reasonable notification efforts Legal Rights & Agreement Rules
2. COLLECTION AND USE OF INFORMATION
When you use or access the Services, we collect certain categories of information about you from a variety of sources. In addition to the specific uses discussed below, we may use this information to provide and improve the Services, to conduct research and development and to maintain our business relationship, in our legitimate interests, including to enhance the safety and security of our Services, providing customer support, complying with applicable legal obligations, enforcing any applicable terms of service, and protecting our rights and the rights of our employees, users or other individuals.
Information You Provide to Us
Some features of the Services, such as creating an account, setting up your device(s), and enabling functionality of your device(s), may require you to directly provide certain information, including information about yourself. You may elect not to provide this information, but as this information is required to enable us to provide you with the Services, choosing not to provide this information may prevent you from using, or accessing features of, the Services.
- Declining required information can prevent use of features Data Access & Collection
Information that you directly submit through our Services includes:
- Declining required information can prevent use of features Data Access & Collection
- Basic contact details, such as name, address, phone number, and email. We use this information to create and maintain your account and provide the Services, as required to perform our contract with you, and because it is in our legitimate interest to communicate with you (including, with your consent where required, to tell you about certain promotions, products or services that may be of interest to you). Where you provide the same email address at checkout and during app account creation, we may associate your purchase record with your app account for purposes of service delivery, account setup, and personalization of the Services.
- Contact information supports accounts and communications Data Access & Collection
- A matching email can connect your purchase to your app account Linking & Identification
- Account information, such as username and password. We use this information to provide the Services, as required to perform our contract with you, and because it is in our legitimate interest to maintain and secure your account with us. If you choose to register an account, you are responsible for keeping your account credentials safe. We recommend you do not share your access details with anyone else. If you believe your account has been compromised, please contact us immediately.
- You must safeguard your account credentials Security & Safeguards
- Payment and transaction information, such as credit card information and billing address, which we collect using a third-party payment processor, and information about your purchases. We use this information to process your payment and provide the Services, as required to perform our contract with you.
- A third-party processor collects payment details Charges & Financial Obligations
- Health and wellness information, such as information you choose to provide about your health and wellness when setting up your account in the App, and clinical health data you authorize us to access from your healthcare providers through third-party health record platforms such as HealthEx (as described below under "Information Collected From Other Sources"). We use this information with your consent, to the extent consent is required by applicable privacy law. If you reside in the US, please refer to the Eight Sleep Consumer Health Data Privacy Policy for more information.
- Health information can include app entries and authorized clinical records Data Access & Collection
- Any information you choose to input into our AI-powered tools ("Input"), which we use to generate and output new information or content ("Output") as a part of the Services, including to personalize insights, assist in our provision of customer support and otherwise provide the Services. We do not use your personal data to train large language models or third-party generative AI systems.
- AI tools use your inputs to generate outputs Use & Processing
- Automated Decision-Making and Profiling. We use automated processing, including through our Autopilot and AI-powered features, to analyze your sleep and biometric data and make automated adjustments to your Pod's temperature, firmness, and other settings. These automated decisions are made to personalize and improve the Services for you and do not produce legal or similarly significant effects. You may adjust or disable automated features at any time through the App settings. Where required by applicable law, you have the right to request information about the logic involved in automated decision-making, to contest the results of profiling, and to request human review of a decision.
- Autopilot can adjust device settings using sleep and biometric data Inference & Profiling
- Applicant details, such as information included in your resume or CV and job history. We use applicant details to process your application for employment and because it is in our legitimate interest to evaluate your candidacy.
- Job application details are used to assess candidates Use & Processing
- Any other information you choose to include in communications with us, for example, when sending a message through the Services, because it is in our legitimate interest to be responsive to you.
- Messages to Eight Sleep may include other information you choose to supply Data Access & Collection
Information Collected Automatically
If you use the Pod or other Eight Sleep device(s), the device(s) will automatically collect a variety of metrics to provide the Services, such as to personalize your sleep statistics and sleep recommendations and to provide health statistics in the App, as required to perform our contract with you and with your consent, to the extent consent is required by applicable privacy law. If you are a US resident, please refer to the Eight Sleep Consumer Health Data Privacy Policy for more information about our processing of certain data collected through the device(s). When your device syncs with your App, data recorded on your device is transferred from your device(s) to our servers.
- Devices collect metrics and send recorded data to company servers Data Access & Collection
We and third parties may also use cookies, pixels, or other tracking technologies ("Tracking Technologies") on the Website and your App to automatically collect certain information about your interactions with the Services. This information is collected and used either with your consent (where consent is required by applicable law) to personalize the Services for you, and to target, deliver and measure interest-based advertising, or because it is in our legitimate interests to tailor your experience with the Services, provide you with offers or promotions, run analytics, better understand user interactions with the Services. Such information includes:
- Tracking supports personalization, advertising and analytics Use & Processing
- Automatic collection includes device and online identifiers Data Access & Collection
- Location may be approximate or, if you choose, precise Data Access & Collection
- Tracked activity can include purchases, scrolling and marketing interactions Data Access & Collection
- Third parties’ own direct marketing requires affirmative opt-in Sharing & Disclosure
- Device information and online identifiers, such as device type, operating system, unique device identifier, internet protocol (IP) address, cookie ID and other online identifiers.
- Automatic collection includes device and online identifiers Data Access & Collection
- Location information, such as approximate location based on IP address and, if you choose to provide it, precise geolocation.
- Location may be approximate or, if you choose, precise Data Access & Collection
- Other information regarding your interaction with the Services, such as browser type, log data, date and time stamps, scroll-to-page interactions, session statistics, clickstream data, purchase history and related information, ad views and impressions, and interactions with marketing emails and SMS messages.
- Tracked activity can include purchases, scrolling and marketing interactions Data Access & Collection
Most browsers accept cookies automatically, but you may be able to control the way in which your devices permit the use of cookies. If you so choose, you may block or delete certain of our cookies from your browser; however, blocking or deleting cookies may cause some of the Services, including any portal features and general functionality, to work incorrectly. You may also opt-out of the collection and use of information for interest-based advertising by advertisers that are part of certain industry alliances, including through tools offered by the National Advertising Initiative, the Digital Advertising Alliance or the European Interactive Digital Advertising Alliance, by clicking the links provided.
Opt-out preference signals. Our website honors the Global Privacy Control ("GPC") and "Do Not Track" browser signals as requests to opt out of the sale or sharing of personal information and of targeted advertising. When your browser sends either signal, we turn off the cookies and Tracking Technologies used for those purposes on that browser from the first page you load, without requiring any further action from you. The signal applies to the browser and device on which it is enabled, so you will need to enable it on each browser and device you use, or use the "Your Privacy Choices" link in the footer of every page of our website to set your preference directly.
- Tracking supports personalization, advertising and analytics Use & Processing
- GPC and Do Not Track turn off advertising tracking on that browser Sharing & Disclosure
- Third parties’ own direct marketing requires affirmative opt-in Sharing & Disclosure
- The US supplement reports sales and sharing for ads and analytics Sharing & Disclosure
For more information on how we use cookies, please see our Cookies Policy.
- Further cookie information is in a separate policy Legal Rights & Agreement Rules
Information Collected From Other Sources
We may obtain information about you from outside sources, including information that we collect directly from third parties and information from third parties that you choose to share with us. Such information includes:
- Connected health apps provide information with consent Data Access & Collection
- Information we receive from third-party apps and accounts, such as Apple Health and Google Health Connect, which we use with your consent and in order to perform our contract to provide the Services.
- Connected health apps provide information with consent Data Access & Collection
- Information we receive from third-party health record connectivity platforms, such as HealthEx, including laboratory and diagnostic test results, vital signs, medications, and allergies from your healthcare providers. We access this information with your consent to provide personalized health insights and your Biological Age score within the App. With your separate consent, we may also use this data in pseudonymized form (with your name and contact information removed) to improve our health models and develop new features.
- Health information can include app entries and authorized clinical records Data Access & Collection
- Authorized clinical records support health insights and a Biological Age score Data Access & Collection
- Information we receive from consumer marketing databases or other data enrichment companies, which we use in our legitimate interests to better customize advertising and marketing to you.
- External marketing databases help customize advertising Data Access & Collection
- Information we receive when you choose to link any social media platforms to your account, such as Facebook or X, which we use in our legitimate interests to maintain your account and login information.
- Linking a social account supplies information for account maintenance Linking & Identification
Any information we receive from outside sources will be treated in accordance with this Privacy Notice. We are not responsible for the accuracy of the information provided to us by third parties and are not responsible for any third party's policies or practices. For more information, see the section below, Third-Party Websites and Links.
- Outside information follows this notice, but third-party accuracy is disclaimed Legal Rights & Agreement Rules
Deidentified Information
Finally, we may deidentify or anonymize your information such that it cannot reasonably be used to infer information about you or otherwise be linked to you (or we may collect information that has already been deidentified/anonymized), and we may use such deidentified/anonymized information to improve our Services and better understand our users, share such deidentified/anonymized information with third parties, and for any other purpose in accordance with applicable law. Where you separately consent, we may also use your health and sleep data in pseudonymized form (with direct identifiers such as your name and contact information removed, but associated with demographic information and general location) to improve our health models and develop new features. Pseudonymized data retains certain indirect identifiers and is not considered deidentified information under this section.
- AI tools use your inputs to generate outputs Use & Processing
- Authorized clinical records support health insights and a Biological Age score Data Access & Collection
- Deidentified data may be used and shared for lawful purposes Sharing & Disclosure
- Health-model development with pseudonymized data requires separate consent Use & Processing
Partner and Household Account Linking
If you share your Pod with another person, you may invite them to link their Eight Sleep account to your Pod so that each user can independently control their side of the bed and track their own sleep data. When accounts are linked, both users will be able to view each other's sleep and health data within the App, including:
- Linking Pod accounts makes sleep and health data visible to both users Sharing & Disclosure
- Sleep metrics, such as sleep score, sleep stages, time asleep, and sleep consistency;
- Linking Pod accounts makes sleep and health data visible to both users Sharing & Disclosure
- Biometric data, such as heart rate, heart rate variability, and respiratory rate;
- Linking Pod accounts makes sleep and health data visible to both users Sharing & Disclosure
- Temperature preferences and adjustments; and
- Linking Pod accounts makes sleep and health data visible to both users Sharing & Disclosure
- Leaderboard and comparative features, such as the Sleep Fitness leaderboard, which displays linked users' sleep performance data.
- Linking Pod accounts makes sleep and health data visible to both users Sharing & Disclosure
By sending or accepting a partner invitation, you consent to this mutual sharing of sleep and health data with the linked user. This consent is separate from, and in addition to, your consent to Eight Sleep's collection and use of your data as described elsewhere in this Privacy Notice.
- Linking Pod accounts makes sleep and health data visible to both users Sharing & Disclosure
You may unlink your account at any time through the App settings (see our Help Center for instructions). Unlinking will revoke the other user's ongoing access to your sleep and health data going forward. Once unlinked, the other user will no longer be able to view any of your sleep and health data, including data recorded during the linked period.
- Unlinking ends access to both new and previously recorded linked data Sharing & Disclosure
3. DISCLOSURE OF YOUR INFORMATION
We may disclose your information for legitimate purposes subject to this Privacy Notice, including the following categories of third parties:
- Corporate-group disclosure supports service delivery Sharing & Disclosure
- Our affiliates or others within our corporate group, as a matter of our legitimate interests to efficiently provide the Services.
- Corporate-group disclosure supports service delivery Sharing & Disclosure
- Vendors or other service providers who help us provide the Services, including for system administration, cloud storage, security, customer relationship management, marketing communications and email personalization (which may include health and wellness metrics such as sleep scores, heart rate, and heart rate variability to deliver personalized reports and communications to you), web analytics, payment networks, and payment processing, in our legitimate interests to ensure the reliable and safe operation of the Services and, where applicable, with your consent.
- Service providers may receive health metrics for personalized communications Sharing & Disclosure
- Third parties to whom you request or direct us to disclose information, such as through your use of social media widgets or connecting with third party applications or integrations such as Apple Health, Google Health Connect, and HealthEx with your consent or to perform our contract with you.
- Your requested integrations can disclose information to third parties Sharing & Disclosure
- Professional advisors, such as auditors, law firms, or accounting firms, as a matter of our legitimate interests to assess, protect, enforce and defend our rights and to comply with our legal and regulatory obligations.
- Professional advisers may receive information for rights and compliance work Sharing & Disclosure
- Third parties in connection with or in anticipation of an asset sale, merger, bankruptcy, or other business transaction, as a matter of our legitimate interests to run a successful and efficient business.
- Business transactions may involve disclosure before a deal closes Sharing & Disclosure
- Linked account users: If you link your account with another Eight Sleep user as described in Section 2 above, we will disclose your sleep and health data (including sleep metrics, biometric data, temperature preferences, and leaderboard performance) to that linked user through the App. This disclosure is made at your direction when you send or accept a partner invitation. You may revoke this disclosure at any time by unlinking the account through the App settings.
- Linking Pod accounts makes sleep and health data visible to both users Sharing & Disclosure
- The US health row lists communication providers and linked users Sharing & Disclosure
We may also disclose your information as needed to comply with applicable law or any obligations thereunder or in our legitimate interests to cooperate with law enforcement, judicial orders, and regulatory inquiries, to enforce any applicable terms of service, and to ensure the safety and security of our business, employees, and users.
- Legal compliance, enforcement and safety can prompt disclosure Sharing & Disclosure
We do not disclose your personal information to third parties for the third parties' direct marketing purposes, unless you have affirmatively opted in to such sharing.
- Service providers may receive health metrics for personalized communications Sharing & Disclosure
- Third parties’ own direct marketing requires affirmative opt-in Sharing & Disclosure
4. SOCIAL FEATURES
Certain features of the Services allow you to initiate interactions between the Services and third-party services or platforms, such as social networks ("Social Features"). Social Features may include features that allow you to access our pages on third-party platforms, and from there to "like" or "share" our content. Use of Social Features may allow a third party to collect and/or use your information. If you use Social Features, information you post or make accessible may be publicly displayed by the third-party service. Both we and the third party may have access to information about you and your use of both the Services and the third-party service. For more information, see the section below, Third-Party Websites and Links.
- Social interactions can expose information to platforms and the public Sharing & Disclosure
5. THIRD-PARTY WEBSITES AND LINKS
We may provide links to third-party websites or platforms. If you follow links to sites or platforms that we do not control and are not affiliated with us, you should review the applicable privacy notice, policies and other terms. We are not responsible for the privacy or security of, or information found on, these sites or platforms. Information you provide on public or semi-public venues, such as third-party social networking platforms, may also be viewable by other users of the Services and/or users of those third-party platforms without limitation as to its use. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators.
- Social interactions can expose information to platforms and the public Sharing & Disclosure
- Linked external sites have their own privacy and security practices Legal Rights & Agreement Rules
6. CHILDREN'S PRIVACY
Our Services are not intended for children under the age of 16, and we do not seek or knowingly collect any personal information about children under the age of 16. We do not knowingly sell or share the personal information of consumers under 16 years of age, or knowingly process such consumers' personal information for targeted advertising. If we become aware that we have unknowingly collected information about a child under 16, we will make commercially reasonable efforts to delete such information from our database. If you are the parent or guardian of a child who has provided us with their personal information, you may contact us using the details set out in Section 11 to request that it be deleted.
- The Services are not intended for children under 16 Data Access & Collection
7. DATA SECURITY AND RETENTION
Despite our reasonable efforts to protect your information, no security measures are impenetrable, and we cannot guarantee "perfect security." Any information you send to us electronically, while using the Services or otherwise interacting with us, may not be secure while in transit. We recommend that you do not use unsecure channels to send us sensitive or confidential information.
- Reasonable protection does not guarantee secure transmission Security & Safeguards
We retain your information for as long as is reasonably necessary for the purposes specified in this Privacy Notice. When determining the length of time to retain your information, we consider various criteria, including whether we need the information to continue to provide you the Services, resolve a dispute, enforce our contractual agreements, prevent harm, promote safety, security and integrity, or protect ourselves, including our rights, property or products.
- Retention depends on the purpose, with a separate clinical-data limit Retention & Deletion
- Sensitive-information uses are limited to CCPA purposes or consent Use & Processing
Clinical health data accessed through third-party health record platforms such as HealthEx is retained for up to one year, corresponding to the duration of your consent authorization. When your consent expires or is revoked, Eight Sleep automatically deletes your stored clinical health data. You may also request deletion at any time by disconnecting the health record platform in the App settings or by contacting us at privacy@eightsleep.com.
- Retention depends on the purpose, with a separate clinical-data limit Retention & Deletion
- Clinical platform data is deleted when consent ends Retention & Deletion
- Sensitive-information uses are limited to CCPA purposes or consent Use & Processing
8. DATA TRANSFERS
The information we collect from you may be stored and processed in countries outside the country in which you live. We transfer personal information, subject to European and UK privacy laws (e.g., the GDPR), to countries outside the EEA and/or UK, such as the United States, subject to the European Commission's standard contractual clauses for the transfer of personal data to third countries; specifically, module one (controller to controller transfer) and/or module two (controller to processor transfer), as relevant, or the UK Information Commissioner's international data transfer addendum to the EU standard contractual clauses, as relevant, unless the data transfer is to a country that has been determined by the European Commission and/or the relevant UK authorities, as applicable, to provide an adequate level of protection for individuals' rights and freedoms for their personal data. Please contact us using the details set out in Section 11 should you like further information on this.
- Information may be processed abroad under specified transfer safeguards Sharing & Disclosure
9. PRIVACY RIGHTS
Depending on where you live, you may have certain rights in relation to your personal information. However, please note that a number of these rights only apply in certain circumstances, and these rights may be limited by law.
- Access rights may include information about past recipients Account & Service Control
- You may be able to request deletion Retention & Deletion
- You may be able to correct inaccurate personal information Account & Service Control
- You may be able to obtain a copy or request transfer Account & Service Control
- Processing restrictions may leave storage permitted Use & Processing
- You may have a right to object to processing Use & Processing
- Consent-based processing may allow withdrawal at any time Use & Processing
- UK complaints receive acknowledgment within 30 days Legal Rights & Agreement Rules
- Privacy Choices and GPC provide sale, sharing and ad opt-outs Sharing & Disclosure
- Access / Know: You may have the right to request access to the personal information we hold about you, and to obtain details about how we use and share your information, and with whom we share or have shared it in the past.
- Access rights may include information about past recipients Account & Service Control
- Deletion / Erasure: You may have the right to request that we delete personal information we hold about you.
- You may be able to request deletion Retention & Deletion
- Correction: You may have the right to request that we correct inaccurate personal information we hold about you.
- You may be able to correct inaccurate personal information Account & Service Control
- Portability: You may have the right to receive a copy of the personal information we hold about you and to request that we transfer it to a third party.
- You may be able to obtain a copy or request transfer Account & Service Control
- Restriction of Processing: You may have the right to require us to stop, suspend or restrict our processing of personal information we hold about you, other than for storage purposes.
- Processing restrictions may leave storage permitted Use & Processing
- Objection: You may have the right to object to our processing of your personal information.
- You may have a right to object to processing Use & Processing
- Opt-Out of Marketing: You may opt out of marketing, including from SMS messages, by using the unsubscribe / opt-out instructions provided in our communications to you. If you opt out, we may still send you transactional or administrative messages.
- Unsubscribing from marketing does not stop administrative messages Use & Processing
- Withdrawal of Consent: Where we rely on consent to process your personal information, you may have the right to withdraw this consent at any time.
- Consent-based processing may allow withdrawal at any time Use & Processing
- Right to Complain: You may have the right to complain to us and/or your local data protection authority about how we process your personal information. If you are a UK resident, you have a statutory right to submit a data protection complaint directly to us. We will acknowledge your complaint within 30 days of receipt, take appropriate steps to investigate it without undue delay, and communicate the outcome to you, including your right to escalate the matter to the UK Information Commissioner's Office (ICO). You may submit a complaint through any of the contact methods described in Section 11 below or through any other channel by which you contact us.
- UK complaints receive acknowledgment within 30 days Legal Rights & Agreement Rules
- Right to Opt Out of Sale, Sharing, or Targeted Advertising: You may have a right to direct us not to "sell" or "share" your personal information (as those terms are defined in applicable laws) or process your personal information for targeted advertising. To exercise this right, click the "Your Privacy Choices" link in the footer of any page of our website and switch off the toggle next to "Sale of Personal Data" in the preferences panel that opens, or enable the Global Privacy Control signal in your browser, which we honor automatically. For information on how we process opt-out preference signals, see Opt-out preference signals under Information Collected Automatically above.
- Privacy Choices and GPC provide sale, sharing and ad opt-outs Sharing & Disclosure
- The US supplement reports sales and sharing for ads and analytics Sharing & Disclosure
Submitting a Request
To make a request described in this Section, please email us at privacy@eightsleep.com. If you are an EEA, UK or Swiss resident, you may also make a request here. We will not discriminate against you for exercising any of these rights. Further information may be needed to verify your identity before exercising these rights. You may designate, in writing or through a power of attorney document, an authorized agent to make requests on your behalf to exercise your rights. Before accepting such a request from an agent, we will require that the agent provide proof you have authorized them to act on your behalf, and we may need you to verify your identity directly with us. If we deny your request, you may appeal our decision by contacting us through the methods described in Section 11. We will not require you or your authorized agent to pay a fee for the verification of your request or appeal.
- Privacy requests may require identity verification Account & Service Control
- An agent must show authorization to make rights requests Account & Service Control
10. U.S. RESIDENTS
This Section 10 applies to you if you are a resident of California or another U.S. state that has passed a privacy law similar to the California Consumer Privacy Act ("CCPA") and require specific privacy notice disclosures. For purposes of this section, references to "personal information" shall include "sensitive personal information," as these terms are defined under such laws.
- The US supplement applies to California and certain similar-law states Legal Rights & Agreement Rules
- The US table lists recipients of identifiers and customer-record information Sharing & Disclosure
- The US table lists professional information without naming recipients Data Access & Collection
- The US table lists marketing partners for commercial and activity data Sharing & Disclosure
- The US table lists location categories without recipient categories Data Access & Collection
- Account access credentials are marked sensitive in the US table Sharing & Disclosure
- The US table lists recipients for protected-characteristic information Sharing & Disclosure
- The US health row lists communication providers and linked users Sharing & Disclosure
- Accounts with different emails are not linked without your direction Linking & Identification
- Sensitive-information uses are limited to CCPA purposes or consent Use & Processing
- The US supplement reports sales and sharing for ads and analytics Sharing & Disclosure
Processing of Personal Information
In the preceding 12 months, we collected and (where indicated below) disclosed for a business purpose the following categories of personal information and sensitive personal information (denoted by *):
- The US supplement applies to California and certain similar-law states Legal Rights & Agreement Rules
- The US table lists recipients of identifiers and customer-record information Sharing & Disclosure
- The US table lists professional information without naming recipients Data Access & Collection
- The US table lists marketing partners for commercial and activity data Sharing & Disclosure
- The US table lists location categories without recipient categories Data Access & Collection
- Account access credentials are marked sensitive in the US table Sharing & Disclosure
- The US table lists recipients for protected-characteristic information Sharing & Disclosure
- The US health row lists communication providers and linked users Sharing & Disclosure
Category of Information Categories of Recipients
- The US supplement applies to California and certain similar-law states Legal Rights & Agreement Rules
Identifiers such as name, e-mail address and IP address Vendors and service providers, login integration partners, at your direction to third party applications or integrations
- The US table lists recipients of identifiers and customer-record information Sharing & Disclosure
Personal information categories listed in the California Customer Records statute such as name, address and telephone number Vendors and service providers
- The US table lists recipients of identifiers and customer-record information Sharing & Disclosure
Professional information included in an individual's resume or job history
- The US table lists professional information without naming recipients Data Access & Collection
Commercial information such as purchase history Vendors and service providers, marketing partners
- The US table lists marketing partners for commercial and activity data Sharing & Disclosure
Internet or other similar network activity such as information regarding your interaction with the Services Vendors and service providers, marketing partners, login integration partners
- The US table lists marketing partners for commercial and activity data Sharing & Disclosure
Geolocation data such as IP address
- The US table lists location categories without recipient categories Data Access & Collection
Account access credentials* such as account log-in information for the Services Vendors and service providers, login integration partners
- Account access credentials are marked sensitive in the US table Sharing & Disclosure
Characteristics of protected classifications under California or federal law such as sex (including gender and pregnancy) and age Vendors and service providers, at your direction to third party applications or integrations
- The US table lists recipients for protected-characteristic information Sharing & Disclosure
Precise geolocation data*
- The US table lists location categories without recipient categories Data Access & Collection
Personal information concerning an individual's health*, third-party health record connectivity platforms (e.g., HealthEx) at your direction Vendors and service providers (for personalized communications such as period sleep reports), linked account users, at your direction
- The US health row lists communication providers and linked users Sharing & Disclosure
Internal cross-referencing: Where you use the same email address at checkout and during app account creation, we may associate your purchase record with your Eight Sleep app account for purposes of service delivery, account setup, and personalization. We do not associate accounts across different email addresses without your direction.
- Accounts with different emails are not linked without your direction Linking & Identification
The specific business or commercial purposes for which we collect and disclose your personal information and the categories of sources from which we collect your personal information are described in the sections above, Collection of Your Information, Use of Your Information, and Disclosure of Your Information. We only use and disclose sensitive personal information for purposes specified in the CCPA or otherwise in line with your consent. The criteria we use to determine how long to retain your personal information is described in the section above, Retention of Your Information.
- Sensitive-information uses are limited to CCPA purposes or consent Use & Processing
Selling or Sharing of Personal Information
We do not have actual knowledge that we "sell" or "share" (as those terms are defined under applicable law) personal information of individuals under 16 years of age. However, we do sell and share certain categories of personal information and, in the preceding 12 months, we have sold and shared the following categories of personal information about individuals for marketing, advertising, and analytics purposes:
- The US supplement reports sales and sharing for ads and analytics Sharing & Disclosure
Category of Information Categories of Recipients
- The US supplement reports sales and sharing for ads and analytics Sharing & Disclosure
Identifiers such as name, e-mail address and IP address Tracking technologies and advertising partners
- The US supplement reports sales and sharing for ads and analytics Sharing & Disclosure
Commercial information such as purchase history
- The US supplement reports sales and sharing for ads and analytics Sharing & Disclosure
Internet or other similar network activity such as information regarding your interaction with the Website
- The US supplement reports sales and sharing for ads and analytics Sharing & Disclosure
11. HOW TO CONTACT US
Should you have any questions about our privacy practices or this Privacy Notice, please contact us at privacy@eightsleep.com. If you are a resident of the EU, UK, or Switzerland, you may contact our local representative, through the details set out below.
- The Services are not intended for children under 16 Data Access & Collection
- Information may be processed abroad under specified transfer safeguards Sharing & Disclosure
- UK complaints receive acknowledgment within 30 days Legal Rights & Agreement Rules
- Privacy questions can be emailed to Eight Sleep Legal Rights & Agreement Rules
For EU inquiries
- EU inquiries can go to Prighter in Vienna Legal Rights & Agreement Rules
Prighter EU Rep GmbH Schellinggasse 3/10 1010 Vienna Austria
- EU inquiries can go to Prighter in Vienna Legal Rights & Agreement Rules
For UK inquiries
- UK inquiries can go to Prighter in London Legal Rights & Agreement Rules
Prighter Ltd 20 Mortlake High St London, SW14 8JN United Kingdom
- UK inquiries can go to Prighter in London Legal Rights & Agreement Rules
For Swiss inquiries
- Swiss inquiries can go to Prighter in Luzern Legal Rights & Agreement Rules
Prighter CH GmbH Obergrundstrasse 17 6002 Luzern Switzerland
- Swiss inquiries can go to Prighter in Luzern Legal Rights & Agreement Rules