Privacy Policy
Last updated October 9, 2026
Bed by 10 (“we”, “us”) is made by EGGHEAD Engineering Inc. This policy explains what the Bed by 10 app and this website collect, why, and how to delete it. The short version: your health data stays on your phone. Our server only receives the nightly numbers you choose to share with your leagues, and only after you turn sharing on. Cycle, period, menopause and symptom data never leave your phone.
Health data we read (on your device only)
With your permission, the app reads from Apple Health (HealthKit) or Android Health Connect, read-only:
- Sleep (time in bed, time asleep and sleep stages), steps, resting heart rate, heart rate variability, active energy and workouts.
- Only if you turn on a women's health program: menstrual flow, your menopause stage where your phone records it, and symptoms such as hot flashes or night sweats. Symptom check-ins you enter in the app are stored on your phone.
This data is processed on your phone to build your nightly stats, goals and cards. It is never used for advertising, never sold, never used to train or prompt AI models, and never disclosed to anyone except — with your consent — the league numbers described below. We do not write to Apple Health or Health Connect. Data from devices such as Oura, WHOOP or Garmin reaches us only through Apple Health / Health Connect on your phone; we do not connect to those companies' services.
What our server receives
| Data | When | Why |
|---|---|---|
| A random device identifier created by the app (not your advertising ID, phone number or email) | First launch | Identifies your anonymous account; also used as your purchase account ID |
| Display name, emoji avatar, notification and sharing preferences | When you set them | Shown to members of your leagues; app settings |
| Only the metrics you switch on: per night — minutes asleep and in bed (Sleep); time you fell asleep and woke, and whether it was on time (Bedtime); daily steps (Steps); one 0–100 recovery number comparing your HRV and resting heart rate with your own recent baseline (Recovery, off by default). Last 120 days, plus your time zone | Only after you turn on league sharing | Weekly standings, report cards and head-to-head results in your leagues |
| Milestones, e.g. “100 nights of 7h+” or a bedtime streak | Only after you turn on league sharing | The league moments feed and notifications |
| League memberships, emoji reactions and nudges you send | When you use leagues | Running leagues |
| Push notification token and platform | If you allow notifications | League notifications |
| App usage events (e.g. “opened the paywall”), keyed by the device identifier | While using the app | Understanding which features work; first-party only |
| IP address and request metadata | Every request | Security and rate limiting; short-lived server logs |
Never sent: raw Health samples, sleep stages, heart-rate or HRV readings, workouts, and any cycle, period, pregnancy, menopause or symptom data. The server rejects such fields outright. League data is visible only to the members of your leagues; an invite link shows only the league name, type, scoring and the owner's display name and avatar.
Purchases and the family plan
Bed by 10 Pro and the Family plan are sold through the Apple App Store or Google Play. The store handles payment; we never see your card or billing details. RevenueCat receives your device identifier and the store's purchase records so the app and our server know whether your plan is active. If you hold a Family plan, the members of the one league you choose get Pro from our server while your plan is active; they see that it comes from your plan.
No ads, no tracking
No ads, no advertising or analytics SDKs, no tracking across other companies' apps or websites. We do not sell or rent personal data. We don't ask for your name, email or phone number.
Service providers
- Railway hosts our API and database (United States).
- Vercel hosts this website.
- Expo relays push notifications to Apple Push Notification service and Firebase Cloud Messaging.
- RevenueCat manages subscription status; Apple and Google process payments.
Your choices and deleting your data
- Per metric: Settings → League sharing. Turning a metric off deletes what you shared of it immediately.
- Stop sharing: deletes every night and milestone you shared and removes you from your leagues.
- Delete everything: Settings → Delete everything erases your account on our server (profile, leagues, shared nights, milestones, reactions, push tokens, usage events) and everything the app stored on your phone. Your Apple Health / Health Connect data isn't touched.
- Health permissions can be changed any time in Apple Health or Health Connect.
- If you no longer have the app, email us with your display name and league names and we will delete your data.
Depending on where you live (for example the EU, UK, California or Washington) you may have rights to access, correct, delete or port your data. Contact us and we will respond within 30 days.
Retention
Shared league data is kept while your account exists and sharing is on; the server accepts only the last 400 days. Deleted data is removed from the live database immediately and from backups within 30 days.
Children
Bed by 10 is not directed at children under 13, and we do not knowingly collect data from them.
Changes
If this policy changes materially we will update the date above and tell you in the app.
Contact
EGGHEAD Engineering Inc. · support@bedby10.com