Somly Privacy Policy
Effective date: 14 September 2026
This policy explains what Somly does with your data. It describes the app as it actually behaves, feature by feature — not a generic template.
The short version
- Somly works without an account. Alarms, timers, reminders, your sleep history and your night recordings all live on your phone. If you never sign in, nothing in this policy about servers applies to you.
- Signing in stores a small profile so your account works across devices.
- Somly Plus syncs your sleep history to your own private area of our database.
- Night audio leaves your phone in exactly one case: you have Plus, you have linked a parent account, and sleep sharing is on. Those copies are deleted automatically after 7 days.
- There is no advertising, no analytics SDK, and no tracking. We do not sell or share your data for advertising, and Somly does not follow you across other companies' apps or websites.
Who this policy covers
Somly ("we", "the app") for iOS and Android. Contact: privacy@somly.app.
What stays on your phone
These never leave your device unless you explicitly back them up or share them:
- Alarms, timers, reminders and lists, and all app settings
- Your sleep history: bedtime, wake time, duration, quality score, mood, wake-up difficulty, snooze count, your notes and dream notes
- Night audio recordings and wake notes. Somly records sound during a sleep session to build your morning report. The audio is written to the app's private storage and deleted according to the retention period you pick in Sleep settings.
- Custom alarm sounds you add from your own files
- Photos you attach to reminders
- Your chosen weather location
Deleting the app removes all of it.
What we store when you sign in
Signing in is optional and is what enables family features, subscriptions and sync. We use Firebase Authentication (Google) and store, under your account id:
| Data | Why |
|---|---|
| Email address | Identifies the account and lets you sign back in |
| Display name and nickname | Shown to family members you link with |
| Account id (uid) | The key everything else is stored under |
| Avatar choice, or an uploaded avatar photo | Shown in the app and to linked members |
| Subscription status and expiry | Unlocks Plus features |
| Notification token for this device | Lets family nudges and alarm reminders reach you |
Sign in with Apple and Google Sign-In are supported. If you use Apple's "Hide My Email", we only ever see the relay address Apple gives us.
Somly Plus sync
With an active Plus subscription, your sleep sessions are mirrored to your own private area of our database so they survive a new phone. That record contains the same fields listed above, including any notes and dream notes you wrote. It does not contain the audio. Security rules restrict it to your account.
Kids & Family sleep sharing
This is the only feature that uploads recordings, and it needs all of the following at once:
- You are signed in, and
- you have an active Somly Plus subscription, and
- you have linked a parent account and the link is active, and
- sleep sharing is turned on in the app.
Linking is a deliberate action on both sides. Once it is in place, sharing is on by default and can be turned off at any time in the app.
While it is on, your last 7 nights — the morning report, the detected sound highlights, and (if you leave recordings included) the night's audio — are readable by your linked parent. Each shared night is stamped to expire 7 days after you woke up, and a scheduled job deletes the record and the audio when it does. Turning sharing off deletes the shared copies immediately. Audio kept on your own phone follows your own retention setting, separately.
Location and weather
If you allow location access, Somly reads your approximate location (low-accuracy) and sends the coordinates to Open-Meteo to fetch a forecast. Searching for a place by name sends that text to Open-Meteo's geocoding service. Open-Meteo receives no account information and no device identifier — only the coordinates or the search text. Your chosen location is saved on your phone, not on our servers. You can decline location access and pick a city manually instead.
Microphone
The microphone is used during a sleep session to detect sounds like snoring and noise for your morning report, and to record a short wake note if you make one. It is not used at any other time. Where that audio goes is covered above: local by default, uploaded only under the Kids & Family conditions.
Camera and photos
The camera is used for wake-up missions — scanning a barcode, photographing a place you registered, or checking for a smile — and for taking an avatar photo. Mission photos are evaluated on the device and are not uploaded. Photo library access is used to attach an image to a reminder or choose an avatar. Only an avatar photo is uploaded, and only to your own account's storage.
Notifications
Alarms and reminders are delivered locally by your phone. Push notifications are used for family features — a nudge from a linked member, or an alert that someone overslept. Your device's notification token is stored with your account so those can be delivered.
Purchases
Somly Plus is sold through the App Store or Google Play. We never see your payment details. Your purchase is verified with Apple or Google, and the result — active or not, and until when — is written to your account. Manage or cancel the subscription in your App Store or Google Play settings; deleting your Somly account does not cancel it.
Who else processes your data
- Google (Firebase) — authentication, database, file storage, push messaging, and the server-side code that verifies purchases and expires shared nights.
- Apple — sign-in, push delivery, and subscription verification.
- Open-Meteo — weather forecasts and place search, from coordinates or a search term only.
That is the complete list. We do not use any advertising network, analytics SDK, crash-reporting SDK or attribution SDK.
What we do not do
- No advertising and no ad identifiers
- No analytics or behavioural profiling
- No tracking across other companies' apps or websites
- No selling or sharing of personal information for advertising
- No reading of your contacts, calendar, messages or browsing history
- No access to Apple Health or Google Health Connect
How long we keep things
| Data | Kept |
|---|---|
| On-device sleep audio | The retention period you choose in Sleep settings |
| Shared nights and their audio | 7 days after the night ends, deleted automatically |
| Account profile and synced sleep history | Until you delete your account |
| Local alarms, reminders and history | Until you delete them or remove the app |
Deleting your data
Profile → Delete account permanently deletes your Somly account and everything stored for it in the cloud: your profile, synced sleep history, uploaded avatar, shared nights and account settings. Alarms, timers and data on your phone are kept, and you continue as a guest. This cannot be undone, and it does not cancel an active subscription — cancel that in your Apple ID or Google Play settings.
You can also delete individual items without deleting the account: a single night and its recording, all recordings, or all shared copies (by turning sharing off).
Children
Somly's family features let a parent and a child link accounts. A child's account holds the same limited profile described above, and a linked parent can see the child's morning reports and, if enabled, night recordings, for 7 days. A parent can unlink at any time, which immediately ends that access.
If you believe a child has given us personal data without the involvement of their parent or guardian, write to privacy@somly.app and we will delete it.
Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to or restrict processing, and to complain to your local data protection authority. Account deletion in the app covers most of this immediately. For anything else, write to privacy@somly.app.
Our legal bases for processing, where the GDPR applies, are: performing the contract you enter into by using the app (your account, sync and subscription), your consent (location, microphone, camera, sleep sharing — each revocable in your device or app settings), and our legitimate interest in keeping the service working and secure.
Where your data is processed
Our cloud services run on Google and Apple infrastructure and may be processed in countries other than yours, including the United States. Where required, the transfer is covered by the standard contractual clauses those providers offer.
Security
Traffic between the app and our services uses HTTPS. Access to your stored data is enforced by server-side rules that restrict every record to your own account and, for shared nights only, to an actively linked parent while the subscription is active. Subscription status is written only by our server after verifying the purchase with Apple or Google — the app cannot grant itself Plus.
No system is perfectly secure, and we cannot guarantee absolute security.
Changes to this policy
If we change how Somly handles your data, we will update this page and move the effective date. Significant changes will be announced in the app.