Privacy Policy

We take the protection of your personal data very seriously.

1. Data Protection at a Glance

General Information

The following notes provide a simple overview of what happens to your personal data when you visit this website or use our app. Personal data is all data with which you can be personally identified.

Responsible Body

The responsible body for data processing on this website is:

TosLabs
Ömer Tos
Sturmvogelweg 2
Building 44
70378 Stuttgart
Germany
Email: info@toslabs.de

2. Hosting

We host the content of our website with the following provider:

Render

The provider is Render Services, Inc., 525 Brannan St Suite 300, San Francisco, CA 94107, USA. When you visit our website, Render collects various log files including your IP addresses.

The use of Render is based on Art. 6 (1) (f) GDPR. We have a legitimate interest in the most reliable presentation of our website possible.

3. Data Collection on this Website

Cookies

Our websites use so-called "cookies". Cookies are small text files and do not cause any damage to your terminal device. They serve to make our offer more user-friendly, effective and secure.

Server Log Files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

  • Browser type and browser version
  • Operating system used
  • Referrer URL
  • Hostname of the accessing computer
  • Time of the server request
  • IP address

This data is not combined with other data sources.

Contact Requests

If you contact us by e-mail, your inquiry including all resulting personal data (name, inquiry) will be stored and processed by us for the purpose of processing your request. We do not pass on this data without your consent.

4. Data Protection in the App "Vigil"

4.1 Locally Stored Data (On Device Only)

This data never leaves your device in its raw form:

  • Audio Recordings: The actual audio files (.m4a) of snoring or sleep talking are stored exclusively locally in the app's document directory. They are not uploaded to our cloud servers.
  • Raw Motion Data: High-frequency accelerometer data used to detect sleep phases is processed locally. Only the resulting sleep phases (e.g., Deep, Light) are synced.
  • Alarms & Settings: All alarm schedules, custom sound preferences, and app settings (theme, language) are stored locally (UserDefaults).

4.2 Data Synced to Cloud (Supabase)

If you create an account, the following data is encrypted and stored in our database (Supabase) to enable cross-device sync and community features:

  • Account Information: User ID and Email (via Supabase Auth).
  • Sleep Sessions: Date, start/end times, total duration, calculated sleep quality score, and sleep phases (time ranges for Awake, REM, Light, and Deep sleep).
  • Audio Event Metadata: Timestamps and duration of detected events (e.g., "Snoring detected at 3:04 AM for 12 seconds"). Note: As mentioned above, the actual audio file is NOT synced, only the fact that it happened.
  • Environmental Data: Downsampled decibel readings (approx. one reading per minute) to show noise trends.
  • Daily Check-Ins: Lifestyle tags (caffeine intake, late screen time, exercise, meditation) as well as subjective mood and sleep ratings.

4.3 Advertising (Google AdMob)

For the free version of Vigil, we use Google AdMob to serve advertisements.

  • What is collected: Device identifiers (like IDFA), approximate location, and app usage data.
  • Why: To display personalized advertisements to non-Pro users.
  • Control: This is subject to the iOS App Tracking Transparency (ATT) prompt. If you select "Ask App Not to Track," this data is not shared for tracking purposes.

4.4 Community Insights (Aggregated)

Your sleep quality score and simple session statistics (e.g., "7 hours sleep") are anonymized and aggregated with all other users to calculate percentiles (e.g., "You sleep better than 70% of the community"). Other users cannot see your individual data.

Legal Basis

The processing of your data is based on the following legal bases:

  • Performance of Contract (Art. 6 (1) (b) GDPR): For registration, cloud synchronization, and provision of app features.
  • Consent (Art. 9 (2) (a) GDPR): For the processing of health data (sleep data, snoring detection, daily check-ins). You explicitly grant this consent when registering in the app. You can revoke this at any time (e.g., by deleting your account).
  • Consent (Art. 6 (1) (a) GDPR): For personalized advertising (AdMob) via the iOS ATT dialog.

5. Your Rights

You have the right to receive information about the origin, recipient and purpose of your stored personal data free of charge at any time. You also have a right to request that this data be corrected or deleted. If you have given your consent to data processing, you may revoke this consent at any time for the future.

Furthermore, you have a right to lodge a complaint with the competent supervisory authority.