Pillowbird Privacy Policy

1. Introduction

Pillowbird is a bedtime wind-down application developed and operated by 4nlab ("we," "us," or "our").

We designed Pillowbird to give you a quiet, private place to set aside your thoughts before rest. Protecting those thoughts is an important part of how the app works.

This Privacy Policy explains what information Pillowbird handles, where it is stored, when it may be shared, and what choices you have.

This policy applies specifically to Pillowbird. For other 4nlab products and services, please see our general Privacy Policy at https://4nlab.com/privacy.

2. Information Pillowbird Handles

a. Your Notes and Personal Content

When you use Pillowbird, you may enter information such as:

• Thoughts and notes you type or dictate
• Categories you choose for your notes
• Morning reflections and check-ins
• Preferences related to your bedtime routine

Your notes are stored locally on your device by default. We do not receive, read, or store them on our servers as part of the normal bedtime ritual.

Pillowbird does not require you to create an account.

b. Device and Usage Information

Pillowbird processes limited technical information to operate its features and protect optional online services.

This may include:

• Locally stored preferences and free-use counters
• Random identifiers used for cloud sorting limits
• Network information, including IP addresses, when you use online features
• Optional, privacy-focused usage analytics

All usage analytics are off by default and are sent only if you enable them in the app's settings.

c. Communications

If you contact us for support or feedback, we receive the information you provide, such as your email address and message.

We use this information to respond to your request.

3. Local Storage and Offline Use

Pillowbird is designed to work primarily on your device.

Your notes, categories, and bedtime ritual data are saved locally. Core features and bundled wind-down audio work without an internet connection.

You can review, export, or delete your notes within the app. Export is available in text and JSON formats.

Removing Pillowbird generally removes its locally stored app content. However, information may remain in device backups managed by Apple, depending on your backup settings.

A limited record of previously used free nights may remain in secure device storage, such as the iOS Keychain, after the app is removed. This record does not contain your notes or voice recordings.

Additional Device Features

Pillowbird also provides optional features that interact with iOS:

• Face ID app lock: Biometric authentication is handled by iOS. Pillowbird receives the authentication result but does not receive or store your biometric data.
• Local notifications: Bedtime reminders and morning notifications are scheduled on your device. Their content is not sent to our servers.
• Widgets and Live Activities: These features may display information, including note text, on your Home Screen or Lock Screen.
• Siri and Shortcuts: Supported shortcuts may capture or process note text locally through iOS.

Information displayed on your Lock Screen or Home Screen may be visible to anyone who can view your device. You can manage these features through Pillowbird and your device settings.

4. Microphone and Speech Recognition

Pillowbird offers optional voice input so you can speak your thoughts instead of typing them.

Your voice is processed entirely on your device.

Pillowbird requires on-device speech recognition and does not fall back to Apple's server-based speech recognition.

• Voice input is converted to text locally.
• Your microphone audio is not uploaded to Apple, 4nlab, or another speech recognition provider.
• Pillowbird does not save voice recordings.
• We do not use your voice for advertising, voice identification, or AI model training.

Speech recognition availability depends on your device, operating system, and language. If on-device recognition is unavailable, you can use text input instead.

If you separately enable cloud-based AI sorting, the resulting note text may be sent for sorting as explained in Section 5. Your microphone audio is never sent for that purpose.

5. Sorting Your Notes and Optional AI

Pillowbird lets you organize your notes manually or use automatic sorting.

Where supported, automatic sorting happens on your device without sending your notes to an external service.

Pillowbird also offers optional cloud-based AI sorting.

Cloud sorting is off by default and requires your explicit consent.

Before enabling it, the app explains what information will be sent, which provider receives it, and how the provider handles and retains it.

How Cloud Sorting Works

When you enable and use cloud sorting:

• Only the text required for sorting is submitted. Your voice recordings are never sent.
• The text travels over an encrypted connection through Google Firebase Cloud Functions to Anthropic, our AI processing provider.
• Our application server does not store your note content or intentionally log the text submitted for sorting.
• Anthropic processes the submitted text to return a sorting result under its applicable commercial data-processing terms.
• The provider's retention periods and any safety-related or legal exceptions are explained in the consent information shown before enabling the feature.

We do not use your notes to train our own AI models or for advertising purposes.

You can disable cloud sorting in Pillowbird's settings at any time. No further notes will be submitted for cloud sorting after you disable it unless you enable it again.

Cloud Sorting Security and Usage Limits

Cloud sorting requests are protected using Firebase App Check with Apple App Attest to help verify that requests originate from a legitimate installation of Pillowbird.

Cloud sorting is subject to a limit of 20 sorting requests per day.

To enforce this limit, we store a hashed random installation identifier and a daily request count in Google Firestore.

These records do not contain the text of your notes, your name, or your Apple account information. They are automatically removed under a configured time-to-live (TTL) policy.

Our Google Cloud Functions endpoint also receives your device's IP address as part of normal network communication when a cloud sorting request is made.

6. Apple Health Integration

If you choose to enable Apple Health integration, Pillowbird may write Mindful Minutes entries to Apple Health for eligible wind-down activities.

Pillowbird requests your permission before writing this information.

Pillowbird does not read your Apple Health records as part of this feature.

We do not sell health data, use it for advertising or marketing, or share it with advertising providers.

You can change or revoke Pillowbird's Apple Health permissions through the Apple Health app or your device settings.

7. Free Uses and App Integrity

Pillowbird offers 3 free nights before paid access is required to continue using certain features.

Free-use counting happens entirely on your device.

The app uses its local data store and iOS Keychain to track free uses. No server request or remote verification is involved in counting free nights.

These records do not contain your notes or voice recordings. A small Keychain record may remain after the app is uninstalled to preserve previously used free access.

Pillowbird offers both subscription access and a one-time Lifetime purchase.

Cloud-based AI sorting is available during the 3 free nights and with an eligible subscription. It is not included in the Lifetime purchase.

Cloud sorting always requires separate consent and is subject to the daily usage limit described in Section 5.

Apple App Attest is used through Firebase App Check to protect cloud sorting requests. It is not used to verify or count free nights.

8. Analytics and Diagnostics

Pillowbird uses TelemetryDeck for optional, privacy-focused usage analytics.

Analytics are off by default. No usage analytics events are sent to TelemetryDeck unless you choose to enable them in the app's settings.

When enabled, each analytics event contains only:

• The event name
• A hashed random identifier
• A session identifier
• A test flag

We do not include note content, voice recordings, device model, operating system version, or app version in these analytics event payloads.

Crash information is reported only as an aggregate crash count obtained through Apple's MetricKit. We do not submit crash stack traces, crash messages, or the contents of your notes.

Although IP addresses are not included as event fields, TelemetryDeck receives your device's IP address as part of the network connection used to submit analytics.

You can turn analytics off at any time in Pillowbird's settings. No additional analytics events will be submitted after you turn them off.

We use this information to understand general feature usage and improve app reliability, not to read your notes or build advertising profiles.

9. Purchases and Paid Access

Pillowbird offers paid access through Apple's App Store.

Available purchase types include:

• Subscriptions: Recurring purchases that provide access to eligible paid features, including cloud-based AI sorting.
• Lifetime purchase: A one-time purchase that unlocks eligible paid features without a recurring subscription. Cloud-based AI sorting is not included.

Cloud-based AI sorting is also available during your 3 free nights, subject to your consent and the daily usage limit. After the free period, cloud sorting requires an eligible subscription and is not included with Lifetime access.

Prices and purchase terms are displayed in the App Store and within Pillowbird before you make a purchase.

Apple processes payments. We do not directly receive or store your full payment card information.

Pillowbird receives purchase and entitlement status information needed to unlock paid features, restore purchases, and determine whether cloud sorting is available.

Apple's own privacy practices apply to information it processes for App Store purchases.

10. How We Use Information

We process information through Pillowbird only as necessary to:

• Provide and operate the app
• Save and organize your notes according to your choices
• Deliver optional AI sorting when you enable it
• Manage free uses and paid entitlements
• Enforce cloud sorting usage limits
• Maintain app security and reliability
• Improve the app through optional analytics
• Respond to support requests
• Comply with applicable legal obligations

We do not sell or rent your personal information.

We do not use your notes for targeted advertising or track you across third-party apps and websites for advertising purposes.

11. Third-Party Services and Data Sharing

Pillowbird uses a limited number of third-party services for specific functions.

Apple

Apple provides App Store purchases, on-device speech recognition, Apple Health integration, biometric authentication, local notifications, and device-level app security services.

Apple processes information under its own applicable privacy practices.

Google Firebase

We use Google Firebase services, including:

• Cloud Functions: To securely relay optional cloud sorting requests
• Firestore: To maintain hashed random installation identifiers and daily cloud sorting usage counts
• App Check: To protect cloud sorting requests using Apple App Attest

Google's cloud infrastructure receives network information, including IP addresses, when online requests are made.

Anthropic

Anthropic provides AI processing for optional cloud-based note sorting.

Only the text needed for sorting is submitted, and only after you enable the feature.

Anthropic processes submitted information under its applicable terms, including the retention conditions disclosed in Pillowbird's cloud sorting consent screen.

TelemetryDeck

TelemetryDeck provides optional usage analytics and aggregate diagnostic reporting.

Analytics are disabled by default. When enabled, TelemetryDeck receives the limited event data described in Section 8 and network information, including IP addresses.

We do not intentionally send your note content or voice recordings to TelemetryDeck.

We share information with these providers only as necessary for their respective functions. Their responsibilities and data handling are governed by applicable agreements and privacy terms.

We may also disclose information when required by applicable law.

12. Data Retention and Deletion

Pillowbird minimizes the amount of personal information stored outside your device.

Locally Stored Content

Your notes and other locally stored content remain on your device until you delete them or remove the app, subject to any copies retained in device backups or files you export.

Free-use records are stored locally. Certain Keychain records may persist after the app is removed.

Cloud Sorting

The submitted text is processed through our cloud proxy and forwarded to Anthropic.

Our application server does not retain the note text submitted for sorting.

Anthropic retains submitted content according to its applicable terms, including the retention periods and exceptions described when you enable cloud sorting.

Cloud sorting usage records contain a hashed random installation identifier and a request count. These records are stored in Firestore and automatically expire under a configured TTL policy.

Analytics

When optional analytics are enabled, TelemetryDeck processes the limited analytics information described in Section 8 according to its applicable data retention practices.

Disabling analytics prevents future analytics submissions but does not automatically erase information previously received by TelemetryDeck.

Support Communications

If you contact us, we retain your communication only as reasonably necessary to respond, resolve related issues, or satisfy applicable legal obligations.

You may request deletion of personal information held by 4nlab by contacting info@4nlab.com.

Because your notes are normally stored only on your device, we generally cannot retrieve or delete them remotely.

13. Children's Privacy

Pillowbird is intended for users aged 13 and older.

We do not knowingly collect personal information from children under 13.

If we become aware that such information has been collected, we will take appropriate steps to delete it.

14. Your Privacy Rights

Depending on where you live, you may have rights to access, correct, delete, or request a copy of personal information; withdraw consent; or object to or restrict certain processing.

You can manage much of your information directly within Pillowbird.

You can also:

• Delete or export your locally stored notes
• Disable optional cloud-based AI sorting
• Disable optional analytics
• Change microphone, notification, biometric, and Apple Health permissions through your device settings where applicable

For privacy requests, contact info@4nlab.com.

European Economic Area and United Kingdom

The data controller for Pillowbird is 4N LAB PTE LTD.

Where the GDPR or UK GDPR applies, our legal bases include, as applicable:

• Your consent for optional cloud sorting and analytics
• Performance of our contract with you to provide requested app features and paid access
• Our legitimate interests in maintaining security and preventing misuse
• Compliance with applicable legal obligations

Some providers may process information outside your country, including in the United States. Where legally required, international transfers are subject to appropriate safeguards.

You may also have the right to lodge a complaint with your relevant data protection authority.

15. Data Security

We use reasonable technical, administrative, and organizational safeguards to protect the information handled by Pillowbird.

These measures include:

• Keeping your notes on your device by default
• Using on-device speech recognition
• Encrypting network requests using secure connections such as HTTPS
• Limiting information submitted to third-party services
• Using app integrity verification to protect optional cloud sorting requests
• Providing controls for optional analytics and AI processing

No method of electronic storage or transmission can guarantee absolute security.

16. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to Pillowbird, its features, data practices, or applicable legal requirements.

We will update the "Last updated" date whenever changes are made.

If changes materially affect how personal information is handled, we will provide appropriate notice and obtain consent where required by law.

17. Contact Us

For privacy questions, requests, or concerns:

4nlab

Email: info@4nlab.com

Website: https://4nlab.com

General Privacy Policy: https://4nlab.com/privacy