Collected information supports services, research and business protection
In addition to the specific uses listed in the notice, Eight Sleep may use information to provide and improve its Services, conduct research and development, and maintain its business relationship. It cites legitimate interests including service security, support, legal compliance, enforcing terms and protecting its own and others’ rights. Specific consent requirements and purpose restrictions elsewhere still apply.
Supporting quotations
When you use or access the Services, we collect certain categories of information about you from a variety of sources. In addition to the specific uses discussed below, we may use this information to provide and improve the Services, to conduct research and development and to maintain our business relationship, in our legitimate interests, including to enhance the safety and security of our Services, providing customer support, complying with applicable legal obligations, enforcing any applicable terms of service, and protecting our rights and the rights of our employees, users or other individuals.
Use & Processing · Company practice
AI tools use your inputs to generate outputs
Information you enter into Eight Sleep’s AI-powered tools is used to generate new information or content, including personalized insights, customer support and other Services. Eight Sleep says it does not use personal data to train large language models or third-party generative AI systems. Separately consented pseudonymized health and sleep data may improve its health models and new features; that data retains indirect identifiers and is not deidentified.
Supporting quotations
Any information you choose to input into our AI-powered tools ("Input"), which we use to generate and output new information or content ("Output") as a part of the Services, including to personalize insights, assist in our provision of customer support and otherwise provide the Services. We do not use your personal data to train large language models or third-party generative AI systems.
Finally, we may deidentify or anonymize your information such that it cannot reasonably be used to infer information about you or otherwise be linked to you (or we may collect information that has already been deidentified/anonymized), and we may use such deidentified/anonymized information to improve our Services and better understand our users, share such deidentified/anonymized information with third parties, and for any other purpose in accordance with applicable law. Where you separately consent, we may also use your health and sleep data in pseudonymized form (with direct identifiers such as your name and contact information removed, but associated with demographic information and general location) to improve our health models and develop new features. Pseudonymized data retains certain indirect identifiers and is not considered deidentified information under this section.
Use & Processing · Company practice
Job application details are used to assess candidates
Eight Sleep uses resume, CV and employment-history information to process job applications and evaluate candidacy in its legitimate interests.
Supporting quotations
Applicant details, such as information included in your resume or CV and job history. We use applicant details to process your application for employment and because it is in our legitimate interest to evaluate your candidacy.
Use & Processing · Company practice
Tracking supports personalization, advertising and analytics
Eight Sleep and third parties may use cookies, pixels and other tracking technologies on the website and app to collect interaction information. The notice cites consent where law requires for personalization and targeting, delivering and measuring interest-based ads, or legitimate interests for tailoring experiences, offers, analytics and understanding interactions. The website honors GPC and Do Not Track signals to disable sale, sharing and targeted-advertising tracking on that browser from the first loaded page.
Supporting quotations
We and third parties may also use cookies, pixels, or other tracking technologies ("Tracking Technologies") on the Website and your App to automatically collect certain information about your interactions with the Services. This information is collected and used either with your consent (where consent is required by applicable law) to personalize the Services for you, and to target, deliver and measure interest-based advertising, or because it is in our legitimate interests to tailor your experience with the Services, provide you with offers or promotions, run analytics, better understand user interactions with the Services. Such information includes:
Opt-out preference signals. Our website honors the Global Privacy Control ("GPC") and "Do Not Track" browser signals as requests to opt out of the sale or sharing of personal information and of targeted advertising. When your browser sends either signal, we turn off the cookies and Tracking Technologies used for those purposes on that browser from the first page you load, without requiring any further action from you. The signal applies to the browser and device on which it is enabled, so you will need to enable it on each browser and device you use, or use the "Your Privacy Choices" link in the footer of every page of our website to set your preference directly.
Use & Processing · User right or choice
Blocking cookies may affect functionality; industry ad opt-outs also exist
Most browsers accept cookies automatically. You may be able to control, block or delete some cookies, but this may make Services, portal features or general functionality work incorrectly. The notice also links NAI, DAA and EDAA tools to opt out of interest-based collection and use by advertisers participating in those alliances; it does not promise those tools cover all advertisers.
Supporting quotations
Most browsers accept cookies automatically, but you may be able to control the way in which your devices permit the use of cookies. If you so choose, you may block or delete certain of our cookies from your browser; however, blocking or deleting cookies may cause some of the Services, including any portal features and general functionality, to work incorrectly. You may also opt-out of the collection and use of information for interest-based advertising by advertisers that are part of certain industry alliances, including through tools offered by the National Advertising Initiative, the Digital Advertising Alliance or the European Interactive Digital Advertising Alliance, by clicking the links provided.
Use & Processing · Company practice
Health-model development with pseudonymized data requires separate consent
With separate consent, Eight Sleep may use health and sleep data stripped of direct identifiers but associated with demographics and general location to improve health models and develop features. This pseudonymized data retains indirect identifiers and is expressly not deidentified under this section.
Supporting quotations
Finally, we may deidentify or anonymize your information such that it cannot reasonably be used to infer information about you or otherwise be linked to you (or we may collect information that has already been deidentified/anonymized), and we may use such deidentified/anonymized information to improve our Services and better understand our users, share such deidentified/anonymized information with third parties, and for any other purpose in accordance with applicable law. Where you separately consent, we may also use your health and sleep data in pseudonymized form (with direct identifiers such as your name and contact information removed, but associated with demographic information and general location) to improve our health models and develop new features. Pseudonymized data retains certain indirect identifiers and is not considered deidentified information under this section.
Cross-references
qualifies (model-proposed): Deidentified data may be used and shared for lawful purposes — qualifies: The notice explicitly excludes pseudonymized health data from deidentified information because indirect identifiers remain; separate consent governs the health-model use.
contrast (model-proposed): AI tools use your inputs to generate outputs — contrast: Personal data is not used to train large language models or third-party generative AI systems, while separately consented pseudonymized health data may improve health models. The stated model types and consent conditions differ, so this is a scoped tension rather than an established contradiction.
Use & Processing · User right or choice
Processing restrictions may leave storage permitted
Depending on location, circumstances and legal limits, you may require Eight Sleep to stop, suspend or restrict processing of your personal information, other than storage.
Supporting quotations
Depending on where you live, you may have certain rights in relation to your personal information. However, please note that a number of these rights only apply in certain circumstances, and these rights may be limited by law.
Restriction of Processing: You may have the right to require us to stop, suspend or restrict our processing of personal information we hold about you, other than for storage purposes.
Use & Processing · User right or choice
You may have a right to object to processing
Depending on location, circumstances and legal limits, you may object to Eight Sleep’s processing of personal information. The notice does not promise every objection must result in all processing stopping.
Supporting quotations
Depending on where you live, you may have certain rights in relation to your personal information. However, please note that a number of these rights only apply in certain circumstances, and these rights may be limited by law.
Objection: You may have the right to object to our processing of your personal information.
Use & Processing · User right or choice
Unsubscribing from marketing does not stop administrative messages
You can opt out of marketing, including SMS, through unsubscribe or opt-out instructions in the communications. Eight Sleep may still send transactional or administrative messages afterward.
Supporting quotations
Opt-Out of Marketing: You may opt out of marketing, including from SMS messages, by using the unsubscribe / opt-out instructions provided in our communications to you. If you opt out, we may still send you transactional or administrative messages.
Consent-based processing may allow withdrawal at any time
Where Eight Sleep relies on consent for processing, you may have the right to withdraw that consent at any time, subject to the notice’s location, circumstance and legal qualifications.
Supporting quotations
Depending on where you live, you may have certain rights in relation to your personal information. However, please note that a number of these rights only apply in certain circumstances, and these rights may be limited by law.
Withdrawal of Consent: Where we rely on consent to process your personal information, you may have the right to withdraw this consent at any time.
Use & Processing · Restriction or exception
Sensitive-information uses are limited to CCPA purposes or consent
For California residents and residents of other US states with similar privacy laws requiring these disclosures, Eight Sleep says it uses and discloses sensitive personal information only for purposes specified in the CCPA or otherwise in line with your consent. The supplement refers back to the notice’s collection, use, disclosure and retention sections rather than supplying a separate full list of purposes and sources. General retention is based on reasonable necessity; clinical platform data has a specific up-to-one-year limit and deletion when consent expires or is revoked. The cited law’s text is not supplied here.
Supporting quotations
This Section 10 applies to you if you are a resident of California or another U.S. state that has passed a privacy law similar to the California Consumer Privacy Act ("CCPA") and require specific privacy notice disclosures. For purposes of this section, references to "personal information" shall include "sensitive personal information," as these terms are defined under such laws.
The specific business or commercial purposes for which we collect and disclose your personal information and the categories of sources from which we collect your personal information are described in the sections above, Collection of Your Information, Use of Your Information, and Disclosure of Your Information. We only use and disclose sensitive personal information for purposes specified in the CCPA or otherwise in line with your consent. The criteria we use to determine how long to retain your personal information is described in the section above, Retention of Your Information.
We retain your information for as long as is reasonably necessary for the purposes specified in this Privacy Notice. When determining the length of time to retain your information, we consider various criteria, including whether we need the information to continue to provide you the Services, resolve a dispute, enforce our contractual agreements, prevent harm, promote safety, security and integrity, or protect ourselves, including our rights, property or products.
Clinical health data accessed through third-party health record platforms such as HealthEx is retained for up to one year, corresponding to the duration of your consent authorization. When your consent expires or is revoked, Eight Sleep automatically deletes your stored clinical health data. You may also request deletion at any time by disconnecting the health record platform in the App settings or by contacting us at privacy@eightsleep.com.