Privacy policy for Snorly Schnarchtracker

Source policy dated 25 September 2026. English translation: 8 October 2026.

Controller and contact

Snorly GmbH, Stresemannstraße 84, 22769 Hamburg, Germany, represented by Simon Wilmes. For questions about the app and privacy, contact support@snorly.de. Further details are available in the legal notice.

Recording and analysis on your iPhone

The app uses the microphone only for a recording that you start. Audio, detected sound events, time and intensity values, and optional details about your oral appliance, influencing factors, rest and notes are processed on your iPhone. This provides the recording and analysis functions you request (Article 6(1)(b) GDPR). You grant microphone permission in iOS and can withdraw it there at any time.

Results, notes and audio are stored locally. The results database and audio storage are excluded from iCloud device backups. Snorly does not provide cloud synchronisation or recovery of your nights. You can export results as a file and choose the destination yourself. Copies you export are subject to the settings and terms of your chosen destination.

Audio clips are removed after 30 days the next time the app runs its cleanup. The app cannot delete files while it is closed. You can also delete audio earlier within the relevant night without removing its results. Results and personal details remain stored until you delete the night, perform a full reset or remove the app. Original recordings retained for technical reprocessing also remain local. They may be removed earlier if storage is low. The 30-day period for clips does not apply to these original recordings; “Delete audio”, “Delete night” or a full reset also removes the original recordings.

From version 1.1, for newly recorded nights, the original audio files are removed after the selected audio clips have been successfully saved and checked. If this step is not completed successfully, original files may remain locally for recovery or technical reprocessing. Existing nights are not changed by the update; the information above continues to apply to any original recordings they still contain.

Customer access and Apple subscriptions

For customer access, we process your email address, login codes, an internal user identifier and the association with your eligible Snorly order. We use these to verify your access and keep you signed in on the device. Signing in does not transfer nights or audio recordings. The legal basis is Article 6(1)(b) GDPR. Account data is retained until you delete your app account, unless statutory retention obligations apply.

Apple handles purchases, trials and subscriptions. The app reads product and transaction information supplied by Apple, including the subscription period and entitlement status, to verify your access (Article 6(1)(b) GDPR). Snorly does not receive payment details through this process. Apple’s privacy policy applies to Apple’s own processing.

Optional sharing of results with support

After expressly confirming, you can share either all nights already saved and subsequently completed until you stop sharing, or the last 7 or 14 days once. The scope is described before activation. Under “Details & scope”, you can choose between all past and future nights and the last 7 or 14 days. The transferred data consists of time and duration, score, sound and phase values, detected events, selected factors and your rest rating. Audio, free-text notes, device model and internal raw sound-level series are not transferred.

Sharing is optional and is used exclusively to handle your support case. Because results may allow conclusions about your health, we rely on your explicit consent under Article 9(2)(a) together with Article 6(1)(a) GDPR. You can continue to use the other app functions and local export without sharing.

You can stop sharing for the future at any time under Profile → Help & support → Share results. Pending and future transfers stop; copies already transferred are not automatically deleted. You can request their deletion at support@snorly.de. We process deletion requests manually. Copies are stored to handle your support request; no automatic deletion period is currently configured. Withdrawing consent does not affect the lawfulness of processing already carried out.

Service providers and international processing

We use Supabase Pte. Ltd., Singapore, for sign-in and databases. The app database and our order-management database are set up in Frankfurt am Main, Germany. The order-management system is hosted by Vercel Inc., USA. Login codes are sent through Resend (Plus Five Five, Inc., USA), which processes the recipient address, email content and delivery information. Support results are not sent as login emails. Only authorised people at Snorly have access to shared support data.

These services may collect technical connection and security data, particularly IP address, timestamp and error status. This data supports operation, delivery and prevention of misuse (Article 6(1)(f) GDPR; legitimate interest in a secure service). It is not used for advertising profiles and is stored only as long as necessary for that purpose.

Despite the database location, providers and subprocessors may process data outside the European Economic Area, particularly in the USA and Singapore. The providers’ data-processing terms include, in particular, EU Standard Contractual Clauses for these transfers. Details of safeguards and subprocessors are available from Supabase, Vercel and Resend. You can also ask us for a copy of the safeguards applicable to your data.

Usage analytics

Under Profile → Data & privacy → Share usage data, you can optionally share usage data. This setting is off initially. Only after you confirm do we collect activation, the first saved night, return on a later day, active or inactive Apple purchase status and recording errors to improve the app’s use and reliability. Audio, snoring values, free-text notes, email address, customer identifier and persistent device identifiers are not transferred.

Through Supabase, the app sends only the event type and the version of your consent. The server increments a shared daily counter. No individual analytics events or user profiles are stored. Your consent and local markers used to prevent duplicate counting are stored on your iPhone. The legal bases are Article 6(1)(a) GDPR and, where applicable, section 25(1) of Germany’s TDDDG.

You can turn the setting off again at any time, stopping further transfers. Totals already created cannot be attributed to any individual and remain available for comparisons over time. Technical connection data held by the provider is separate and described under “Service providers and international processing”. The rest of the app can be used without this consent.

Deletion and your rights

Account deletion in the app removes your app account and associated server data, including support copies; local nights and files are then removed. If a required step fails, the app does not report complete success. Deleting the app account does not delete your oral-appliance order or business records that must be retained by law. You must cancel an Apple subscription separately with Apple.

Subject to the legal conditions, you have rights of access, rectification, erasure, restriction and data portability. You may object to processing based on legitimate interests on grounds relating to your particular situation. You may withdraw consent at any time with effect for the future. You may complain to a data-protection supervisory authority, particularly where you live or to the Hamburg Commissioner for Data Protection and Freedom of Information (datenschutz-hamburg.de).

We do not use your app data for personalised advertising or automated decisions with legal or similarly significant effects. If the purpose or scope of processing that requires consent changes, we will ask for your consent again.