Consumer Health Data Notice
Last updated: October 30th, 2026
slowave Inc. ("we," "us") provides this notice for Slowave ON. It covers only your consumer health data: the sleep, EEG and body-signal information your Slowave ON device collects.
We give you this notice separately from our Privacy Policy because Washington's My Health My Data Act, Nevada SB 370 and Connecticut's data privacy law require health data to have its own notice and its own consent. We apply it to all users, wherever you live.
What we collect
- EEG (brainwave), PPG (pulse) and 3-axis accelerometer signals from your paired device
- Your date of birth, sex and sleep schedule
- Your Morning Check-in answers
- The country you choose and your time zone
Why we collect it
To measure your sleep, create your Daily Insights and Sleep Patterns, and guide your Journey based on your results.
We also build de-identified data to improve our sleep analysis. For example, we combine sleep patterns with the age we calculate from your date of birth and your sex, and remove anything that could identify you. This data can't reasonably be linked back to you, so withdrawing consent or deleting your account does not affect it. We will not try to re-identify it.
Who we share it with
We share it only with service providers that process it for us:
- Amazon Web Services (AWS), to store and process your data. We keep your data in the AWS region for the country you chose when you created your account (currently the United States only).
- OpenAI, to write the plain-language explanations in your Daily Insights. We send only the sleep and heart measurements we calculated for that night and your age. We never send your name, email address or your raw EEG, PPG or accelerometer signals.
We never sell your consumer health data, and we don't share it for advertising. We share it with no one else.
How long we keep it
We keep your consumer health data, including your EEG, PPG and accelerometer signals and the Daily Insights and Sleep Patterns we generate from it, only while your account is active or as long as we reasonably need it to provide the Service.
If you delete your account, we delete this data, including your EEG, PPG and accelerometer signals. Backup copies are removed within a limited period afterward, as part of our regular backup cycle. We keep certain records longer only where the law requires it.
Your rights
You can:
- See what we hold and get a copy (Profile > Terms & Privacy > Download Your Data)
- Withdraw your consent (Profile > Terms & Privacy > Manage Consent)
- Ask us to delete your data (Profile > Terms & Privacy > Delete Your Data)
We respond to verified requests within 45 days. If reasonably necessary, we may extend this once by an additional 45 days, and we will tell you if we do.
If you withdraw your consent
Withdrawing consent stops new sleep tracking. We stop collecting and analyzing new EEG, PPG and related data from that point on.
You keep your account. You can still sign in and view the Daily Insights, Sleep Patterns and Journey progress you already have, because they were created while your consent was active. Withdrawing does not delete data we already hold. To delete it, use Delete Your Data.
You can turn tracking back on at any time by giving your consent again.
How we ask for your consent
We ask for your consent before we start measuring your sleep. The request is separate from our Terms of Service, and the box is never pre-checked.
Location and geofencing
We don't collect your precise location, and Slowave ON doesn't ask for location permission. We use only the country you choose, to store your data in the right region, and your time zone, to time your measurements correctly.
We also don't use geofencing around healthcare facilities to identify or track you, collect your health data, or send you health-related messages.
Changes to this notice
If we make material changes, we will tell you in the app or by email, and we will ask for your consent again where the law requires it.
Contact us
Questions about this notice? Email us at support@slowave.io.