Privacy Policy

This sleep diary app is provided by SleepDoc.ca. We built it to collect as little personal information as possible.

Who this is for

Accounts are created by invitation from your clinician only — there is no public signup. If you received an invite link, it was sent because your clinician is using this diary as part of your care.

What we collect

Your email address (for login), your device's timezone (so a night's entry, reminders, and charts line up with your actual local time), and the sleep diary entries you choose to log — bedtime, wake time, and related fields. We don't collect your name, location, or any other personal details.

Who can see your entries

Your diary entries — including the free-text notes you write — are visible to you and to Dr. Matt Desruisseaux, the clinician who invited you, through a read-only view used as part of your care. No one else can see them.

If you're participating in group therapy (for example, group CBT-I sessions), Dr. Desruisseaux may screen-share diary data during a session as part of that group's review. You can decline this verbally at that time if you'd rather your entries not be shown to the group.

How it's stored

Your password is hashed and never stored in plain text. Data is encrypted in transit. The free-text notes you write in a diary entry are also encrypted at rest, so they aren't readable directly from a database backup or credential — only the running app (and, through it, your clinician) can decrypt them.

How long we keep it

We keep your diary entries for as long as your account is active — there is currently no automatic deletion for inactive accounts. When you delete your account (see below), your entries, notes, push-notification subscriptions, and any invite record tied to your email are permanently removed immediately; we don't keep a separate copy of them afterward, aside from the routine backups our hosting provider retains for disaster recovery, which age out on their own schedule. We also keep a minimal security log (e.g. sign-ins, when an entry was saved, account deletion) that never includes your diary notes and is not tied to your account once it's deleted — a security event is generally referenced by an internal id rather than your email, and for the few events where that isn't possible (like a failed login before we know who it is, or the record of your account being deleted), we keep a one-way, non-reversible fingerprint of the email instead of the address itself. This security log is kept for up to 1 year, then deleted.

Your rights

You can delete your account and all associated data at any time from the Settings page. This permanently removes your entries.

Not medical advice

This tool helps you track sleep patterns and is not a diagnostic or treatment device. If you have concerns about your sleep, talk to a clinician.

Contact

Questions? Reach out via sleepdoc.ca.