Testing Program Privacy Notice
In brief: This notice applies only to TestFlight builds. It describes the opt-in testing programs a tester can join, what each one sends under a device identifier, and how leaving erases it. It also covers one anonymous feature only TestFlight builds have: flagging a show from search. The App Store version carries none of these programs.
This notice covers Dreamerie's TestFlight builds only. If you installed Dreamerie from the App Store, none of it applies to you: the App Store version carries none of the programs described here and cannot join them.
Our Privacy Policy also applies to TestFlight builds. This notice adds what TestFlight builds do beyond it. Where this notice and the Privacy Policy differ for a TestFlight build, this notice applies.
Flagging a show from search. TestFlight builds also let you flag a show you find in search. It goes to us the anonymous way our Privacy Policy describes under “Shows you flag”. What goes with it is the show's feed address and its title as search showed it, the reason, your note if you add one, the app version, and the day. No episode goes with it, and nothing you searched for.
Diagnostics logs. On TestFlight builds, the diagnostics logs you can export from Settings → About can also include figures the app worked out from your Apple Health sleep records and overnight steps, such as how long you took to fall asleep or whether you got up during a night. They can also note your answers to Did you get up? in Your nights. They never include a step count. They reach us only if you choose to send them.
Playing an episode on an older build. TestFlight builds before version 1.0.0 (8) name the episode in the address of the request that asks where its audio is, so for those builds our server’s logs record which episode was requested, still with no identifier.
The programs
These programs, and the three things described just above, are the only things that change anything in our Privacy Policy, and there are no exceptions hiding elsewhere in this notice.
While you are in a program, Cloudflare also carries your random device ID in transit, on the requests that include it. A backstop covers both programs: if a device with an identifier from a program does not talk to us for 12 months, we erase everything it sent, including the identifier itself.
The Product Tuning Program, by invitation only
We run a small, invitation-only program to tune how Dreamerie works with real nights: which shows actually help people fall asleep, and whether the audio behaves the way it should. Participants are adults we invite one by one. The Product Tuning Notice has the full detail, and is what the app shows you before you decide anything. If your invitation also opens the raw health data level, the app shows you a second notice for that level, on its own screen, before you decide about it.
How joining works. Without an invitation the program does not apply to you, full stop. You enter your invitation code in the app under Settings → Product Tuning, which opens the consent screen. It shows the Product Tuning Notice: which sleep summaries, which usage records, and what they are used for. You confirm you are 18 or older. Only when you tap agree does the app create a random device identifier and begin sharing. Before that, nothing has left your device.
If your invitation opens the raw health data level. Some do and most do not. When yours does, the app shows you a second screen straight after you join, with its own notice for that level, and no raw health data leaves your device unless you agree there as well. Saying no leaves your Product Tuning membership exactly as it is, and you can change your mind later under Settings → Raw overnight readings.
What changes while you are in it:
- Your app has a random device identifier, so we can group your data and delete it on request. It says nothing about who you are.
- Your app usage uploads to our server: what played and when, session events, device model.
- With Health access on, a short summary of each night, computed on your device, uploads the next day: how quickly you fell asleep, whether the audio ended at the right time, and how settled the night was, all in broad bands. Your raw health data stays on your device, with the one exception below. Step counts are not part of any upload: the app reads them on your device only to know whether you got up, and we never receive them. The Notice lists every field.
- Some invitations open a further level, where your raw health data is uploaded as well: heart rate, heart-rate variability, respiratory rate, blood oxygen, and sleep stages, with the times they were recorded. It is off until you agree to it on its own screen, which the app shows you right after you join and which carries its own notice. Joining Product Tuning does not turn it on. Settings → Raw overnight readings → Turn off and delete the readings turns it off again and deletes the readings we hold, and leaves the rest of your participation in place.
- Flagging a show does not change. The note you can add still goes to us the anonymous way our Privacy Policy describes under “Shows you flag”, separately from your usage records and never attached to your device identifier.
- Shows you add to your library are recorded on our server against that identifier. Removing one is a change on your device only. Leaving the program removes the shows it recorded, and clearing your data removes them all.
- Your country, and your state if you are in the United States, because the program is not open everywhere. We keep those answers with your record. Each night's summary also carries your device's time zone.
- Everything else in our Privacy Policy stays true: no name, no email, no advertising, no tracking, nothing sold, ever.
How long we keep it. Nightly sleep summaries until you leave. Raw health data until you turn that level off or the work it is for ends. The 12-month inactivity backstop applies here too. What Product Tuning holds, how long, and how your rights apply to it are all in the Notice; the raw health data level has its own notice, and the app shows it to you before you agree to that level.
How you leave. Three ways, all in the app, all immediate, no questions asked. Settings → Raw overnight readings → Turn off and delete the readings turns off the raw health data level on its own and deletes the readings we hold, and the rest of your participation carries on unchanged. Settings → Product Tuning → Leave Product Tuning stops all future uploads and deletes the data we hold, and you keep using the app as a regular user. Settings → Clear all my data goes further: it erases everything on your device, deletes your server data, and retires your device identifier so future use cannot be connected to past use.
Washington residents: see our Consumer Health Data Privacy Policy.
Beta diagnostics, in TestFlight builds only
Beta diagnostics is a temporary testing arrangement, not a permanent part of the product. The setting appears only in TestFlight builds, and only while Dreamerie is in testing. If you installed Dreamerie from the App Store you will not see it and cannot turn it on. For testers, it is off until they turn it on.
If a tester turns it on, that device sends usage and diagnostic events to our server: when playback starts, stalls, or fails, and how features are used. A random device ID is created at that moment so we can group events from the same device. It says nothing about who you are.
The events also carry the app version, the iOS version and your device model, and the start of each listening session carries your device’s time zone, as an offset from UTC. While it is on, the shows you add to your library are recorded on our server under that ID (see “Your library while you are enrolled” below), and the ID goes with the app’s requests for a show’s next episode, so our server can prefer episodes you haven’t heard.
Because Dreamerie is used at night, the timing of these events can reveal when you sleep. We want you to know that before you decide.
No health data is included. Heart rate and sleep readings never leave your device under this setting. Step counts are not included either: the app reads them on your device only to know whether you got up, and we never receive them.
Flagging a show is not part of this setting. The short note you can add to a flag goes to us the anonymous way our Privacy Policy describes under “Shows you flag”, whether this setting is on or off, and it is never joined to your device ID or to these events.
How long we keep it. Events are kept for 90 days and then deleted.
How you leave. The same screen turns it off: Settings → Beta diagnostics → Turn off beta diagnostics. That stops uploads and deletes what this device has sent. If you are offline, the change on your device happens immediately and the app finishes the server-side part the next time it connects. Settings → Clear all my data does all of that too, and more.
Clearing your data, or deleting the app
If your device is offline when you clear your data, the erase on your device happens immediately and the app finishes the server-side deletion the next time it connects, keeping your old identifier for that purpose alone and for at most 30 days. Server-side deletions are permanent and are never undone by an iCloud restore. Deleting the app retires your identifier the next time a TestFlight build runs on this device. Anything a program holds for it is erased then, or after 12 months of inactivity, whichever comes first. To erase it right away, use Clear all my data before deleting the app.
If you switch from TestFlight to the App Store version
Clear all my data on a TestFlight build erases everything, here and on our server. If you switch to the App Store version before you do this, the identifier stays on your phone and this program's data stays on our servers until you ask us to delete it, or until 12 months go by without the TestFlight app talking to us. Only the TestFlight app shows that device ID, under Settings → About, so copy it there before you delete the TestFlight app.
Your library while you are enrolled
While you are in either program, the shows you save are kept on our server under your device ID so tonight's picks can avoid what you've already heard. Leaving a program deletes the shows it recorded, and Clear all my data deletes them all.
Where you live
We keep the country and, in the US, the state you gave at enrollment, to apply the right consent rules to your data, for as long as you are enrolled; leaving deletes it.
Your rights
If you are in a program, find your identifier under Settings → About → Device ID, tap to copy, and include it when you write to privacy@dreamerie.app, so we can find your data. Your data is tied to that random ID rather than your name, so we treat it as pseudonymous personal data and honor your rights on that basis. Our Privacy Policy describes those rights.