Dozewise provides CBT-I based sleep improvement tools for educational purposes only. It is NOT a medical device and does NOT diagnose, treat, or cure insomnia or any medical condition.
The Cognitive Behavioural Therapy for Insomnia (CBT-I) content within Dozewise is self-guided, educational, and for general wellness purposes. It is not a substitute for professional medical care.
Always consult a qualified healthcare professional — including a GP, sleep specialist, or registered psychologist — before beginning any sleep programme, especially if you have a diagnosed sleep disorder, mental health condition, or other medical condition.
In the case of a medical emergency, contact emergency services immediately (000 in Australia).
Dozewise is a sleep improvement app for adults dealing with insomnia, incorporating evidence-based Cognitive Behavioural Therapy for Insomnia (CBT-I) principles. We understand that data about sleep difficulties and insomnia is health information and warrants the highest level of privacy protection.
Our commitment is structural: your personal sleep data, CBT-I progress, and all health information in Dozewise lives on your device only. Our servers have never received it and cannot receive it. This Privacy Policy explains how that works, what minimal data we do handle, and your full rights under Australian law. Dozewise is a brand of Sleep Portfolio, Queensland, Australia.
Dozewise handles data that intersects with personal health: sleep difficulties, insomnia patterns, anxiety and arousal scores (as used in CBT-I assessment), and therapeutic progress. We take a deliberately conservative approach for two reasons:
Your insomnia history, sleep diary, CBT-I session progress, and all related health data stays on your device. We do not have it. We cannot access it.
Dozewise data about sleep difficulties and insomnia is classified as health information under the Privacy Act 2024 (Cth), which requires elevated protection. Our compliance measures:
None of this data is ever transmitted to Dozewise servers. We have no access to it.
| Data | When | Why | Stored? |
|---|---|---|---|
| Anonymous AI Coach request (no PII — e.g. "adult managing insomnia, week 3 CBT-I programme") | When you use AI Coach | To generate a relevant response | No — discarded after response |
| Anonymous analytics event (e.g. "module_completed") | During app use | To understand feature engagement | Yes — no PII attached |
| Push notification device token | When you enable notifications | To send reminders | Yes — token only |
| Account email address | At account creation (optional) | For account recovery | Yes — encrypted at rest |
| Website waitlist: email, first name, last name, country, and city or region | When you submit the join-waitlist form on dozewise.com | To send launch and beta updates and for light-touch regional planning | Yes — in our secure database (encrypted at rest). Not used for AI Coach prompts and not sold to third parties |
| Subscription status | Via RevenueCat/Apple/Google | To unlock premium content | No — RevenueCat is source of truth |
Analytics events contain: a random session identifier (not linked to your identity), event type (e.g. "module_completed"), timestamp, device type and app version. They do not contain your name, email, sleep data, health information, CBT-I data, or any identifying information.
The CBT-I programme involves guided sessions, sleep diaries, and therapeutic exercises. All programme data — including your progress through modules, sleep diary entries, and thought restructuring records — is stored exclusively on your device.
The AI component works as follows: your device sends the AI only a de-identified, contextual summary (e.g. "user is in Week 3 of sleep restriction, has not logged difficulty with rising time"). No diary content, no thought records, no personal identifiers are transmitted.
The CBT-I approach within Dozewise is designed to support self-directed behaviour change. It is not a medical device and does not constitute medical advice or treatment. Please see the medical disclaimer at the top of this document.
All data is stored in an encrypted SQLite database using AES-256 encryption. The key is held in your device's secure enclave (iOS) or Android Keystore (Android) and is never transmitted anywhere. Deleting the app permanently and irrecoverably deletes all on-device data. We hold no copy.
The AI Sleep Coach is powered by the Anthropic API (Claude). When you interact with the Coach:
Anthropic's privacy policy: anthropic.com/privacy
When you enable notifications, we store your device push token to deliver reminders (sleep diary prompts, module reminders, bedtime alerts). Push tokens are not linked to your personal identity. Disabling notifications triggers deletion of your push token from our servers.
Consumer subscriptions are processed through Apple App Store or Google Play, managed by RevenueCat. Dozewise never sees or stores your payment card details.
| Service | Purpose | Data Shared |
|---|---|---|
| Anthropic (Claude API) | AI Coach | Anonymous, non-identifying request text |
| Apple APNs | Push notifications (iOS) | Device push token |
| Google FCM | Push notifications (Android) | Device push token |
| RevenueCat | Subscription management | Anonymous user ID, subscription events |
| Apple App Store / Google Play | In-app purchases | Governed by Apple/Google |
| Resend | Transactional email (e.g. waitlist confirmation) | Your email address; standard template content only |
| Sentry | Error reporting | Anonymous error logs, no PII |
Because your CBT-I data, sleep diary, and all health information are stored exclusively on your device, you already have complete control. You can view, export, and delete everything directly within the app.
Dozewise acknowledges that on-device data constitutes "health information" under the Privacy Act 2024. We respect your rights:
Dozewise acknowledges the Privacy Act 2024 statutory tort for serious invasions of privacy and is committed to compliance with the Australian Privacy Principles (APPs).
Under GDPR Article 9, health data is a "special category". Dozewise's zero-knowledge architecture means health data is never processed by our servers, removing the Article 9 compliance burden from our server-side operations. For the minimal server-side data we hold, your GDPR rights include access (Art. 15), rectification (Art. 16), erasure (Art. 17), portability (Art. 20), restriction (Art. 18), and objection (Art. 21). Contact sleepportfolio@gmail.com — we respond within 30 days.
To request deletion of your account and all server-side data:
We will process deletion requests within 30 days.
| Data Type | Retention |
|---|---|
| On-device sleep diary and CBT-I data | Indefinite — you control this; deleted when you delete the app |
| Account email | Until account deletion |
| Website waitlist (email, name, country, city) | Until you request removal or unsubscribe from waitlist email; contact sleepportfolio@gmail.com |
| Push token | Until notifications disabled or account deleted |
| Anonymous analytics | 24 months rolling, then automatically deleted |
| AI Coach message hashes | 12 months, then automatically deleted |
Dozewise is designed for adults aged 18 and over. We do not knowingly collect personal information from individuals under 18. If you believe a person under 18 has registered, contact sleepportfolio@gmail.com and we will delete the account within 48 hours.
We will provide at least 30 days' notice of material changes via in-app notification. The "Last updated" date reflects the most recent revision.
Privacy enquiries and rights requests:
sleepportfolio@gmail.com
Postal address:
Dozewise Privacy Officer (Sleep Portfolio)
Queensland, Australia
OAIC: oaic.gov.au · 1300 363 992