Privacy Policy

Last updated: October 17, 2026

Somni ("us", "we", or "our") operates the www.puresomni.com website and related services (the "Service"). This Privacy Policy describes how we collect, use, protect, and share your information, including personal information, health information, and genetic data.

We are deeply committed to protecting your privacy. We will not use or share your information with anyone except as described in this Privacy Policy.

Information We Collect

Personal Information

We collect personally identifiable information that can be used to contact or identify you, including but not limited to:

• Name, email address, phone number, and postal address
• Billing and payment information
• Account credentials and preferences
• Communications with us (emails, support requests, feedback)

Health and Sleep Information

To provide our sleep health services, we collect:

• Sleep patterns, quality, and duration data
• Sleep disorder screening information and questionnaire responses
• Health conditions and medical history related to sleep
• Wearable device data (sleep tracking, heart rate, activity levels)
• Sleep diary entries and self-reported sleep metrics

Genetic and Biomarker Information

If you participate in our biomarker testing program, we collect:

• Saliva samples for DNA extraction and analysis
• Epigenetic data, including DNA methylation patterns
• Biomarker test results and analysis
• Genetic information related to sleep health

Important: We never share or sell your genetic information to third parties. Your genetic data is used solely to provide you with personalized sleep health insights and recommendations.

Usage Data and Analytics

We automatically collect information about how you use our Service:

• Log data (IP address, browser type, pages visited, time spent)
• Device information (operating system, device identifiers)
• Cookies and similar tracking technologies
• Analytics data through services like Google Analytics

How We Use Your Information

We use the information we collect to:

• Provide and improve our sleep health services and recommendations
• Analyze your sleep patterns and generate personalized insights
• Process and analyze biomarker samples through our CLIA-certified laboratory partners
• Communicate with you about your account, results, and services
• Send educational content, updates, and newsletters (you can opt out anytime)
• Conduct research to improve sleep health understanding (data is anonymized)
• Ensure security and prevent fraud
• Comply with legal obligations

Genetic and Biomarker Data Protection

Collection and Processing

Your saliva samples are processed by CLIA-certified laboratory partners who are contractually obligated to protect your privacy and security. These labs:

• Extract DNA from your saliva sample
• Analyze epigenetic markers (DNA methylation patterns)
• Provide us with processed data (not raw samples)
• Destroy biological samples according to established protocols

Use of Genetic Data

Your genetic and epigenetic data is used exclusively to:

• Generate your personalized sleep health biomarker results
• Provide tailored sleep recommendations based on your epigenetic profile
• Contribute to aggregated, anonymized research (only with your explicit consent)

What We Never Do With Your Genetic Data

• We never sell your genetic information to third parties
• We never share your genetic data with insurance companies
• We never share your genetic data with employers
• We never use your genetic data for marketing purposes
• We never share identifiable genetic data with researchers without explicit consent

Data Sharing and Third-Party Services

Service Providers

We share information with trusted third-party service providers who help us operate our Service:

• CLIA-Certified Laboratories: Process biomarker samples under strict confidentiality agreements
• Cloud Hosting Services: Securely store encrypted data
• Payment Processors: Handle billing and payments securely
• Email and Communication Services: Deliver service communications
• Analytics Providers: Help us understand service usage (anonymized data only)

These providers have access only to information necessary to perform their functions and are obligated not to disclose or use it for other purposes.

Wearable Device Integration

If you connect wearable devices to our Service, we receive sleep and health data from these platforms according to their privacy policies and your authorization.

Apple HealthKit Integration

Our iOS app can connect to Apple HealthKit to read the following health data categories with your explicit permission:

• Sleep Analysis: Sleep duration, sleep stages (awake, REM, core, deep), and sleep quality metrics
• Heart Rate: Resting heart rate and heart rate variability data during sleep
• Activity: Step count and active energy data to correlate with sleep patterns

Important: We access HealthKit data solely to provide personalized sleep insights and recommendations. We do not sell or share your HealthKit data with third parties for advertising or marketing purposes. HealthKit data is never used for any purpose other than improving your sleep health experience within our Service.

Wearable Integration Provider

We use a third-party wearable integration provider to securely connect with wearable devices and health platforms including Apple HealthKit, Fitbit, Garmin, and others. This provider:

• Acts as a secure intermediary to standardize health data from multiple sources
• Processes your health data on our behalf under strict data protection agreements
• Does not retain your personal health information beyond what is necessary for data transmission
• Is contractually obligated to protect your privacy and comply with applicable data protection laws

By connecting a wearable device through our Service, you authorize our wearable integration provider to access and transmit your health data to Somni according to this Privacy Policy.

Garmin Data

If you choose to connect your Garmin account, Garmin shares data from Garmin Connect with Somni under your authorization. This section describes how we handle that data.

• What we collect: Sleep summaries from your Garmin device, including sleep and wake times, total sleep time, sleep stages (deep, light, REM, awake), sleep score, naps, and the time zone the sleep was recorded in.
• How we use it: To build your personalized daily sleep plan and recommendations, to show your sleep history in the Somni app, and to let your assigned Somni sleep coach review your sleep as part of your program. We use Garmin data only to provide the Service to you.
• How it is collected: Garmin delivers your data to an endpoint on a Somni domain (garmin.puresomni.com) operated for us by our wearable integration provider. The provider processes the data on our behalf solely to deliver it to Somni and does not use it for any other purpose.
• How it is stored: Garmin data is stored in Somni's database on secure cloud infrastructure in the United States, encrypted in transit and at rest, with access limited to Somni staff who need it to support your program.
• No sale or advertising: We do not sell Garmin data or use it for advertising.
• Disconnecting and deletion: You can disconnect Garmin at any time in the Somni app or in Garmin Connect, and we stop receiving new Garmin data. You can ask us to delete Garmin data we have already received by contacting us, as described under Data Deletion below.

Research and Development

We may use aggregated, de-identified data for research purposes to advance sleep science. Individual participants are never identifiable in research outputs. If you wish to contribute identifiable data to specific research studies, we will obtain separate explicit consent.

Data Security

We implement industry-standard security measures to protect your information:

• Encryption: All data is encrypted in transit (TLS/SSL) and at rest (AES-256)
• Access Controls: Strict role-based access limits who can view your data
• Secure Infrastructure: Data stored on secure, compliant cloud platforms
• Regular Security Audits: Ongoing monitoring and security assessments
• Employee Training: Staff trained on privacy and security best practices

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Your Privacy Rights and Choices

Access and Correction

You have the right to access and update your personal information at any time through your account settings or by contacting us.

Data Deletion

You may request deletion of your account and associated data at any time. Upon request, we will:

• Delete your account and personal information
• Delete your genetic and biomarker data
• Instruct our laboratory partners to destroy any remaining biological samples
• Remove your data from active systems within 30 days

Note: We may retain certain information as required by law or for legitimate business purposes (e.g., fraud prevention, legal compliance).

Data Portability

You have the right to receive a copy of your personal data in a structured, commonly used format.

Communication Preferences

You can opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link in any email
• Updating your communication preferences in account settings
• Contacting us directly

Note: You cannot opt out of essential service communications (e.g., account notifications, test results).

Cookies and Tracking

You can control cookies through your browser settings. Most browsers allow you to refuse cookies or alert you when cookies are being sent. Disabling cookies may limit some features of our Service.

Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations:

• Account Information: Retained while your account is active and for a reasonable period thereafter
• Health and Sleep Data: Retained to provide ongoing personalized insights and track progress
• Genetic and Biomarker Data: Retained unless you request deletion
• Biological Samples: Destroyed by laboratory partners after analysis is complete
• Transaction Records: Retained as required by financial and tax regulations

Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected information from a child under 18 without parental consent, we will take steps to delete that information.

International Data Transfers

Your information, including personal and genetic data, may be transferred to and processed in the United States or other countries where data protection laws may differ from your jurisdiction.

If you are located outside the United States and choose to use our Service, you consent to the transfer of your information to the United States and its processing there.

HIPAA and Health Information

While we handle health-related information, Somni is not currently a HIPAA-covered entity. However, we apply privacy and security practices consistent with HIPAA standards to protect your health information.

California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect, use, and share
• Right to request deletion of your personal information
• Right to opt out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

To exercise these rights, please contact us using the information below.

Do Not Track

We support Do Not Track ("DNT") signals. You can enable DNT by visiting the Preferences or Settings page of your web browser.

Business Transfers

If Somni is involved in a merger, acquisition, or asset sale, your personal information may be transferred. We will provide notice before your information is transferred and becomes subject to a different Privacy Policy. Your genetic data will receive the same protections under any new ownership.

Legal Compliance

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, subpoenas). We will notify you of such requests unless prohibited by law.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated policy on this page
• Updating the "Last updated" date
• Sending you an email notification (for significant changes)
• Displaying a prominent notice on our website

Your continued use of the Service after changes are posted constitutes your acceptance of the updated Privacy Policy.

Contact Us

If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about how we handle your information, please contact us at:

Somni Privacy Team
Website: www.puresomni.com

Research Participation and Consent

Our biomarker testing program is part of early-stage research and development. By participating, you:

• Understand this is early-stage technology and results should be interpreted accordingly
• Contribute to important research about epigenetics and sleep
• Receive insights about your own sleep health
• Can withdraw consent and request data deletion at any time

Your participation is voluntary and does not affect your access to other Somni services.