Data Access & Collection · Restriction or exception
Declining required information can prevent use of features
Creating an account, setting up devices or enabling their functions may require information directly from you. You can decline, but this may prevent use of the Services or particular features.
Supporting quotations
Some features of the Services, such as creating an account, setting up your device(s), and enabling functionality of your device(s), may require you to directly provide certain information, including information about yourself. You may elect not to provide this information, but as this information is required to enable us to provide you with the Services, choosing not to provide this information may prevent you from using, or accessing features of, the Services.
Information that you directly submit through our Services includes:
Data Access & Collection · Company practice
Contact information supports accounts and communications
Eight Sleep collects details such as name, address, phone and email to create and maintain accounts and deliver Services under its contract, and for its legitimate interest in communicating with you. Promotional communications require consent where required.
Supporting quotations
Basic contact details, such as name, address, phone number, and email. We use this information to create and maintain your account and provide the Services, as required to perform our contract with you, and because it is in our legitimate interest to communicate with you (including, with your consent where required, to tell you about certain promotions, products or services that may be of interest to you). Where you provide the same email address at checkout and during app account creation, we may associate your purchase record with your app account for purposes of service delivery, account setup, and personalization of the Services.
Data Access & Collection · Company practice
Health information can include app entries and authorized clinical records
Eight Sleep collects health and wellness information you choose to provide in the app and clinical records you authorize it to obtain through platforms such as HealthEx. It uses health information with consent to the extent required by applicable privacy law. For clinical records, it specifically says access is with consent for personalized health insights and a Biological Age score; pseudonymized use for health-model and feature development needs separate consent. US residents are directed to a separate Consumer Health Data Privacy Policy, whose additional terms are not supplied here.
Supporting quotations
Health and wellness information, such as information you choose to provide about your health and wellness when setting up your account in the App, and clinical health data you authorize us to access from your healthcare providers through third-party health record platforms such as HealthEx (as described below under "Information Collected From Other Sources"). We use this information with your consent, to the extent consent is required by applicable privacy law. If you reside in the US, please refer to the Eight Sleep Consumer Health Data Privacy Policy for more information.
Information we receive from third-party health record connectivity platforms, such as HealthEx, including laboratory and diagnostic test results, vital signs, medications, and allergies from your healthcare providers. We access this information with your consent to provide personalized health insights and your Biological Age score within the App. With your separate consent, we may also use this data in pseudonymized form (with your name and contact information removed) to improve our health models and develop new features.
Not stated here
The linked Consumer Health Data Privacy Policy text is not supplied here; this card cannot describe its additional rules.
Data Access & Collection · Company practice
Messages to Eight Sleep may include other information you choose to supply
Eight Sleep uses information you choose to include in communications, such as messages through the Services, for its legitimate interest in responding to you.
Supporting quotations
Any other information you choose to include in communications with us, for example, when sending a message through the Services, because it is in our legitimate interest to be responsive to you.
Data Access & Collection · Company practice
Devices collect metrics and send recorded data to company servers
The Pod and other Eight Sleep devices automatically collect metrics to provide Services, including personalized sleep statistics, recommendations and app health statistics. The notice cites contract performance and consent to the extent privacy law requires. When a device syncs with the app, recorded data transfers to Eight Sleep’s servers. US residents are directed to a separate Consumer Health Data Privacy Policy for more information; its terms are not supplied in this notice.
Supporting quotations
If you use the Pod or other Eight Sleep device(s), the device(s) will automatically collect a variety of metrics to provide the Services, such as to personalize your sleep statistics and sleep recommendations and to provide health statistics in the App, as required to perform our contract with you and with your consent, to the extent consent is required by applicable privacy law. If you are a US resident, please refer to the Eight Sleep Consumer Health Data Privacy Policy for more information about our processing of certain data collected through the device(s). When your device syncs with your App, data recorded on your device is transferred from your device(s) to our servers.
Not stated here
The linked Consumer Health Data Privacy Policy text is not supplied here; this card cannot describe its additional rules.
Data Access & Collection · Company practice
Automatic collection includes device and online identifiers
Tracking on the website and app may collect device type, operating system, unique device identifiers, IP address, cookie ID and other online identifiers for the stated personalization, advertising and analytics purposes, with consent where legally required.
Supporting quotations
We and third parties may also use cookies, pixels, or other tracking technologies ("Tracking Technologies") on the Website and your App to automatically collect certain information about your interactions with the Services. This information is collected and used either with your consent (where consent is required by applicable law) to personalize the Services for you, and to target, deliver and measure interest-based advertising, or because it is in our legitimate interests to tailor your experience with the Services, provide you with offers or promotions, run analytics, better understand user interactions with the Services. Such information includes:
Device information and online identifiers, such as device type, operating system, unique device identifier, internet protocol (IP) address, cookie ID and other online identifiers.
Data Access & Collection · Company practice
Location may be approximate or, if you choose, precise
The automatically collected information may include approximate location inferred from IP address and precise geolocation if you choose to provide it. These fall within the notice’s tracking purposes and applicable consent conditions.
Supporting quotations
We and third parties may also use cookies, pixels, or other tracking technologies ("Tracking Technologies") on the Website and your App to automatically collect certain information about your interactions with the Services. This information is collected and used either with your consent (where consent is required by applicable law) to personalize the Services for you, and to target, deliver and measure interest-based advertising, or because it is in our legitimate interests to tailor your experience with the Services, provide you with offers or promotions, run analytics, better understand user interactions with the Services. Such information includes:
Location information, such as approximate location based on IP address and, if you choose to provide it, precise geolocation.
Data Access & Collection · Company practice
Tracked activity can include purchases, scrolling and marketing interactions
Tracking information may include browser and log data, timestamps, scrolling, session statistics, clickstreams, purchase history, ad views and impressions, and interactions with marketing emails and SMS. This collection supports the stated personalization, advertising and analytics uses, with consent where law requires.
Supporting quotations
We and third parties may also use cookies, pixels, or other tracking technologies ("Tracking Technologies") on the Website and your App to automatically collect certain information about your interactions with the Services. This information is collected and used either with your consent (where consent is required by applicable law) to personalize the Services for you, and to target, deliver and measure interest-based advertising, or because it is in our legitimate interests to tailor your experience with the Services, provide you with offers or promotions, run analytics, better understand user interactions with the Services. Such information includes:
Other information regarding your interaction with the Services, such as browser type, log data, date and time stamps, scroll-to-page interactions, session statistics, clickstream data, purchase history and related information, ad views and impressions, and interactions with marketing emails and SMS messages.
Data Access & Collection · Company practice
Connected health apps provide information with consent
Eight Sleep may obtain information directly from third parties or through sharing you choose. It uses information from apps and accounts such as Apple Health and Google Health Connect with your consent and to perform its Services contract.
Supporting quotations
We may obtain information about you from outside sources, including information that we collect directly from third parties and information from third parties that you choose to share with us. Such information includes:
Information we receive from third-party apps and accounts, such as Apple Health and Google Health Connect, which we use with your consent and in order to perform our contract to provide the Services.
Data Access & Collection · Company practice
Authorized clinical records support health insights and a Biological Age score
With consent, Eight Sleep accesses healthcare-provider records through connectivity platforms such as HealthEx, including lab and diagnostic results, vital signs, medications and allergies. It uses these for personalized app health insights and a Biological Age score. Separate consent permits pseudonymized use to improve health models and develop features. Removing name and contact information does not make pseudonymized data deidentified: it can retain demographics, general location and other indirect identifiers.
Supporting quotations
Information we receive from third-party health record connectivity platforms, such as HealthEx, including laboratory and diagnostic test results, vital signs, medications, and allergies from your healthcare providers. We access this information with your consent to provide personalized health insights and your Biological Age score within the App. With your separate consent, we may also use this data in pseudonymized form (with your name and contact information removed) to improve our health models and develop new features.
Finally, we may deidentify or anonymize your information such that it cannot reasonably be used to infer information about you or otherwise be linked to you (or we may collect information that has already been deidentified/anonymized), and we may use such deidentified/anonymized information to improve our Services and better understand our users, share such deidentified/anonymized information with third parties, and for any other purpose in accordance with applicable law. Where you separately consent, we may also use your health and sleep data in pseudonymized form (with direct identifiers such as your name and contact information removed, but associated with demographic information and general location) to improve our health models and develop new features. Pseudonymized data retains certain indirect identifiers and is not considered deidentified information under this section.
Data Access & Collection · Company practice
External marketing databases help customize advertising
Eight Sleep receives information from consumer marketing databases or other data enrichment companies and uses it for its legitimate interests in customizing advertising and marketing to you.
Supporting quotations
Information we receive from consumer marketing databases or other data enrichment companies, which we use in our legitimate interests to better customize advertising and marketing to you.
Data Access & Collection · Company commitment
The Services are not intended for children under 16
Eight Sleep says it does not seek or knowingly collect personal information about children under 16, knowingly sell or share their personal information, or knowingly process it for targeted ads. If it learns it unknowingly collected a child’s information, it will make commercially reasonable efforts to delete it. A parent or guardian can request deletion through Section 11’s contacts, including privacy@eightsleep.com.
Supporting quotations
Our Services are not intended for children under the age of 16, and we do not seek or knowingly collect any personal information about children under the age of 16. We do not knowingly sell or share the personal information of consumers under 16 years of age, or knowingly process such consumers' personal information for targeted advertising. If we become aware that we have unknowingly collected information about a child under 16, we will make commercially reasonable efforts to delete such information from our database. If you are the parent or guardian of a child who has provided us with their personal information, you may contact us using the details set out in Section 11 to request that it be deleted.
Should you have any questions about our privacy practices or this Privacy Notice, please contact us at privacy@eightsleep.com. If you are a resident of the EU, UK, or Switzerland, you may contact our local representative, through the details set out below.
Cross-references
qualifies (model-proposed): The US supplement reports sales and sharing for ads and analytics — qualifies: The general under-16 rule says no knowing sale, sharing or targeted advertising; the US historical disclosure section similarly disclaims actual knowledge of under-16 sale or sharing.
Data Access & Collection · Company practice
The US table lists professional information without naming recipients
For California residents and residents of other US states with similar privacy laws requiring these disclosures, the preceding-12-month table lists collection of resume or job-history information. Its recipient cell supplies no category. That blank does not establish a promise never to disclose professional information.
Supporting quotations
This Section 10 applies to you if you are a resident of California or another U.S. state that has passed a privacy law similar to the California Consumer Privacy Act ("CCPA") and require specific privacy notice disclosures. For purposes of this section, references to "personal information" shall include "sensitive personal information," as these terms are defined under such laws.
In the preceding 12 months, we collected and (where indicated below) disclosed for a business purpose the following categories of personal information and sensitive personal information (denoted by *):
Professional information included in an individual's resume or job history
Not stated here
The table does not identify recipients for these rows; no no-sharing promise is inferred.
Data Access & Collection · Company practice
The US table lists location categories without recipient categories
For California residents and residents of other US states with similar privacy laws requiring these disclosures, the preceding-12-month table lists geolocation such as IP address and precise geolocation, marking the latter sensitive. Neither row names a recipient category. This is an unspecified recipient field, not a general prohibition on disclosure.
Supporting quotations
This Section 10 applies to you if you are a resident of California or another U.S. state that has passed a privacy law similar to the California Consumer Privacy Act ("CCPA") and require specific privacy notice disclosures. For purposes of this section, references to "personal information" shall include "sensitive personal information," as these terms are defined under such laws.
In the preceding 12 months, we collected and (where indicated below) disclosed for a business purpose the following categories of personal information and sensitive personal information (denoted by *):
Geolocation data such as IP address
Precise geolocation data*
Not stated here
The table does not identify recipients for these rows; no no-sharing promise is inferred.