Last updated: September 15, 2026
Sushupati ("we," "us," or "our") is a sleep wellness application that combines Vedic wisdom with modern sleep science to guide you toward restful, dreamless sleep. This Privacy Policy explains how we collect, use, store, and protect your personal and health information when you use the Sushupati app (the "Service").
By creating an account and using Sushupati, you agree to the practices described in this policy.
You voluntarily provide the following through journal entries and app interactions:
When you explicitly start a Sleep Sensor session, Sushupati uses your device's microphone and accelerometer/motion sensors to monitor overnight movement and snoring. This is strictly opt-in and permission-gated — no sensor access occurs until you press "Start sensing" and grant the required permissions.
What we collect from sensors:
What we do NOT collect from sensors:
Only derived, anonymized metrics (event counts, intensity levels, and timestamps) are saved to your Sleep Journal. All audio and motion analysis happens on-device in real time; the raw signals are discarded immediately after processing.
If you connect a wearable device via Web Bluetooth, Sushupati may receive:
This data is stored in your Sleep Journal alongside sensor-derived data. Wearable connections are optional and initiated by you.
If you connect Apple Health (iOS) or Health Connect (Android) in the Sushupati app, you choose which data types to allow in the system permission sheet, and you can switch individual types off in Sushupati at any time.
What we read (only the types you grant): sleep sessions and stages, heart rate, resting heart rate, heart rate variability, respiratory rate, blood oxygen saturation, steps, active energy, body temperature, VO2 max and weight.
Why we read it: to show your imported sleep and recovery trends, compare them with your PVT alertness results and Body Clock, and, if you leave the AI coaching setting on, to give you more relevant coaching. We do not sell this data and do not use it for advertising.
When it syncs: On Android, data syncs when you open Sushupati. On iOS, syncing may also run in the background, depending on your phone's system settings.
You can disconnect, export or delete imported health data at any time in Health connections, or delete your whole account in Settings.
If you use the referral feature, we store your referral code, who referred you, and conversion status to manage referral rewards.
We collect anonymized, aggregated usage analytics (e.g., feature engagement, event counts) to improve the app. These analytics do not include personal health information.
Your data is stored securely on Base44's cloud infrastructure, which provides:
Every user's health data is isolated at the database level through Row-Level Security (RLS). This means:
Sushupati will never sell, rent, or trade your personal or health information to third parties.
We use the following third-party services to operate the app:
These providers process data on our behalf under appropriate data processing agreements and are bound by confidentiality obligations.
We may disclose your information if required by law, court order, or to protect the rights, property, or safety of Sushupati, our users, or others. This includes responding to valid legal requests from law enforcement.
If a crisis is detected, escalation data (account ID, crisis category, priority) is visible to admin users through the escalation queue and audit log. This is limited to the minimum information necessary to ensure your safety and is never shared externally.
Sushupati offers an optional MCP (Model Context Protocol) integration that allows AI assistants like Claude or ChatGPT to access your app data. This is opt-in and OAuth-gated — you must explicitly authorize each AI client, and it only accesses data your account permits. You can revoke access at any time.
You can delete your account and all your data at any time in the app: open Settings and tap Delete my account and all my data (direct link: https://sushupati.base44.app/settings?delete=1). This removes your account, imported health data, sleep sessions, wearable connections, device tokens, sync logs, chats, journal entries and progress.
Depending on your jurisdiction (including GDPR/DPDP Act for Indian users, CCPA for California residents), you have the right to:
To exercise these rights, contact us at the email listed in Section 9.
Sushupati is not directed at children under 18. We do not knowingly collect personal information from minors. If a user's account is tagged as belonging to a minor, crisis detection priority is automatically elevated to ensure the highest level of safety support.
If you believe a minor has provided us with personal information, please contact us so we can promptly delete it.
Your data may be processed and stored on servers located outside your country of residence. By using Sushupati, you consent to these transfers. We ensure appropriate safeguards (such as standard contractual clauses) are in place to protect your data during international transfers, in compliance with applicable data protection laws.
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact:
We will respond to your request within 30 days, in accordance with applicable data protection regulations.
We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the app or via email. The "Last updated" date at the top of this policy indicates when it was last revised. Your continued use of Sushupati after changes take effect constitutes acceptance of the updated policy.
By creating an account and using Sushupati, you consent to the collection, use, and processing of your data as described in this Privacy Policy. You may withdraw your consent at any time by deleting your account or adjusting your permissions in Settings.