Privacy

Your debriefs, evening checklists, day logs, notes, protocol and scores are stored in a database on your phone. Dusk has no account and no sign-in. You can export everything as a file or delete it all in Settings.

If you connect Apple Health on iPhone, Dusk reads bed and wake times, resting heart rate, heart-rate variability, breathing rate and wrist temperature. If you connect Health Connect on Android, Dusk reads sleep sessions, resting heart rate, heart-rate variability and breathing rate. That data is used only on your phone, to compare each night with your own usual. It is never sent to Dusk’s servers, to an AI model, to advertisers or to iCloud, and Dusk never writes to Apple Health or Health Connect. You can disconnect in Settings, which also removes what was imported.

Dusk’s AI features are off until you allow them. During setup, and at any time in Settings › AI features, the app shows what would be sent, that it goes to Anthropic, and asks whether to allow it. If you don’t, nothing described in the next two sections is sent: explanations and tips are written on your phone, and what you type is read on your phone only. If you turn it off later, nothing more is sent from then on.

With AI features allowed, when the app shows an explanation or tips it sends the fields that sentence needs: how you felt, time asleep, how long it took to fall asleep, wakeups, the tags you chose, which protocol steps were missed, the parts of your score and the kinds of factors noted in that night’s journal (not its words). It never sends your name, notes, contacts, dates or any Apple Health or Health Connect data. Our servers pass those fields to Anthropic, which writes the sentence; the request is not used to identify you. If the service is unavailable, the app uses text written on the phone instead.

In the morning debrief, the evening checklist and the log you can type to Dusk instead of tapping answers. What you type is read on your phone first. With AI features allowed, the message is also sent so the AI can read it more accurately, together with what it needs to understand it: the question on screen, your usual wake time and the time now, the names and states of tonight’s steps, your drinks and supplements by name, today’s logs by kind and amount, and the kinds of factors already noted that night. The wording of your own morning questions is never sent. Messages are cut at 600 characters. Tapped answers are never sent.

Before a message reaches Anthropic, email addresses and phone numbers in it are masked, and it is checked for the health warning signs Dusk screens for. If a message suggests someone may be at risk, it is not sent to the AI at all and the app shows where to get help. The AI only turns your words into the app’s own answers, such as how long it took to fall asleep; it writes nothing back to you. Our servers don’t store or log the message, and Anthropic does not use it to train its models. No name, date, account or Apple Health data goes with it.

A conversation in progress is kept on your phone so you can pick it up later, and is deleted once the debrief is saved. Only the answers are kept, not the text you typed. If you’d rather nothing you write leaves your phone, use the tap answers or the form, which work the same way.

Pilot builds can share de-identified nights to test whether the routine works. Nothing is shared unless you agree on the consent screen, and you can stop at any time in Settings.

What is sent, once a day: a random pilot id created on your phone; for each debriefed night, the day number since you joined (not the date), which steps were done or skipped, adherence, and the parts of your sleep score; and your weekly answer on whether Dusk made you more or less worried about sleep. Notes, free text, dates, location and Apple Health data are never sent.

This counts as health data. Under the EU and UK GDPR we rely on your explicit consent (article 9(2)(a)). Under Washington’s My Health My Data Act and similar state laws, it is consumer health data, collected only with your consent and only for the pilot. It is never sold and never used for advertising.

Pilot rows are kept until the pilot ends and its results are written up, then deleted. You can erase yours sooner: turn off sharing in Settings and choose to erase uploads, or write to us with the pilot id shown in Settings.

Dusk Premium is bought through the App Store or Google Play, which handle payment. Dusk never sees your card or bank details, your name or your store account’s email. To know whether your plan is active, the app uses RevenueCat, which receives a random app user id created on your phone, the store’s record of your purchases (product, dates, price and currency, country, renewal status) and basic device details such as the operating system and app version. RevenueCat does not receive anything you log in Dusk. We use this only to unlock the app, restore purchases and count subscriptions; it is not used for advertising or sold.

If you join the waitlist, we keep your email address and preferred platform to tell you when Dusk launches. The address is stored with Resend, which we use to send that email. Each email has a way to unsubscribe, and you can ask us to delete the address.

Vercel hosts the website and API. A managed Postgres database stores pilot rows. Anthropic generates the AI text and reads messages typed to Dusk, only when you allow AI features. RevenueCat checks subscriptions, and Apple and Google process payments. Resend stores waitlist addresses and sends waitlist email. Each service provider acts on our instructions under a data processing agreement, may use the data only to provide its service to Dusk, and must protect it at least as well as this policy does. Anthropic does not use requests from Dusk to train its models. Our servers keep each request’s IP address briefly in memory to limit request rates; it is not stored.

You can ask to see, correct, export or delete data we hold about you, and withdraw consent at any time without affecting anything already done. Because Dusk holds no account for you, most of your data is only on your phone and fully under your control there. You can also complain to your local data protection authority.

Contact: duskprotocol.contact@proton.me

Dusk is not meant for anyone under 18, and the pilot is only open to adults.