Stella Sleep Privacy Policy

Updated May 11 2023

We care very much about your privacy. All information (such as your name, email address etc) submitted to Stella is kept strictly private and is stored securely. We do not sell your information to anyone.

The purpose of this Privacy Policy is to set out the terms and conditions regarding the usage of the information and data shared by natural and/or legal person (the "User") visiting www.stellasleep.com (the "Website") or downloading Stella application (“Application”) and/or using the Website or the Application services (the “Services”, including Company social media channels) to Saga sleeping technologies AB company (the "Company") registered at the address Triangeln 11, 272 38 Brantevik, Sweden.

This Privacy Policy is an annex and an inseparable part of the User Agreement executed with the User upon download or use of the Application.

As of the 25th May 2018, European data protection laws known as the General Data Protection Regulation (GDPR) have come into effect. The Company is fully compliant with GDPR, and this Privacy Policy informs you how we store, use and share the Personal Information that we collect from you and also how you can manage your consent, as well as action your rights. Please read this carefully. The legal basis for the Company's collection and processing of the User's personal data as set out below is the Art. 6(1)(f) of the GDPR (“the balancing of interest test”). Saga sleeping technologies AB's legitimate interests is to conduct data analysis to create, develop and optimise the Company's product, audience and targeting, as well as fraud/misuse prevention.

Saga sleeping technologies AB is a Swedish company. Users hereby agree to share certain information ("Personal Data") with us including data that enables us to define the User when they download the Application and/or use the Website, the Company's social media, and/or join Company contests, promotions or surveys. When the User uses any of the Company’s services, the User is agreeing to this Privacy Policy. By using the tools laid out in this policy, the User can manage their consent at any time. In terms of responsibility, the Company is the ‘Data controller’.

What information does the company collect about me?

The User, by visiting the Website and/or the Application, accepts the automatic collection of its IP address, session ID or app ID, login information, subscription information, location information, browser type and version, browser plugin types and versions, operating system and platform, URL address strings accessed through the Internet Site, visit information, use of Company apps, visits to Company sites, activity on Company Services, including traffic data and cookie information (Log Information), reviews or downloads, download errors, visits to certain pages and page interaction times ("Automatically Collected Data") through various technologies such as “Cookies". Services may use location information transmitted from the User’s device (where the User has set the device settings to allow this) (Location Information).

When the User interacts with the Company social media channels (Facebook, Instagram, YouTube and others), the Company may collect and process aggregated personal data about the User, i.e. age, sex, country and interests, provided that the User makes these types of personal data publicly visible on their own social media profiles (“Information Obtained from Other Sources”). The Company also collects and processes information that the User voluntarily provides the Company with in posts on social media channels or messages the User sends us via these channels.
If the User purchases something directly from the Company, the Company will collect address and payment information.

Users also acknowledge that the Company may obtain information ("Information Obtained from Other Sources") through relationships established by the Company with Third Parties (business partners, technical, payment and delivery service subcontractors, advertising networks, analytics providers, search information providers, credit reference agencies etc.).

The Company may collect information that is submitted by the User (Submitted Information). Submitted Information is collected when the User registers an account with the Company, logs into the Services, fills in forms or surveys, contact the Company by email, provides feedback and enters Company competitions or promotions. Submitted Information may include: name, email address, the User’s child’s/children’s first name, the User’s child’s/children’s date of birth, the number of children in the User’s household, telephone number, address, user name, and location. By submitting information to the Company about minors/children, the User confirms that they are the legal guardians of said children/minors and that the information submitted about the children/minors may be used for the purposes outlined in this Privacy Policy.

Further regarding Personal Information about children, the Application and Website are designed for adults/parents and do not automatically collect directly identifiable personal information, but may collect indirect identifiers. If the User is younger than the age of majority in their domicile, the User must get consent from the User’s parents or legal guardians before any Personal Information is provided to the Company. If you believe the Company may have personal information about a child under the age of majority that was not provided with parental consent, please contact us at info@stellasleep.com.

How does the company use my Personal Data?

User information will be stored in the Company database for a period of 1 (one) year following the User's deletion of the Application or termination of membership to expedite the process and for user satisfaction if the User who was a member of the Application subsequently wishes to re-join.

The User's data may be anonymized and separately analyzed, and may become subject to research and be used for the User's sake, for product development and quality control, and/or for scientific and statistical studies. User accepts, represents and warrants that the Company may use the data given by the User anonymously for these purposes without taking any consent or approval.

The Application makes interpretations by analyzing the User's actions and preferences. Such statistical data that does not include personal information may be shared with business partners of the Company to enable the Users to have a more deep and exclusive experience. The User hereby agrees its personal information and data to be shared with third parties whom the Company has business partnership of some kind in order for the structuring of special promotions and for marketing and advertising purposes.

Personal Data provided by the User, Automatically Collected Data, Submitted Information and Information Obtained from Other Sources may be used to enable the purchases through the Web Site and/or Application, for management or troubleshooting purposes, for product development, and/or marketing (including, but not limited to, direct marketing, events and other communication tools). In addition, the User gives consent to the usage of the combination of the information obtained from its social media accounts as permitted by the law and other information which the Company collected to gain more information about the User's preferences, to improve the user experiences on the Internet Site and Application and to prepare information, content or offer in line with the needs of the User.

Personal data collected via social media channels may be used by the Company, on its own or combined with data from other sources, for the purpose of profiling, i.e. understanding the audience’s demographic, preferences and interests, and being able to provide the audience with more relevant information and news via the Company's communication channels. The data may also be used for the purpose of audience optimisation and targeting.

In addition to the above; by use of cookies, social media channels may collect information about the User's interests and behaviour. The Company may use this data obtained via cookies to provide targeted advertisements to the User. If the User would like to understand and control how the respective social media channels use data to show specific ads, the User should refer to the documentation provided by the social media channel.

The Company may use the Personal Data provided by the User, Automatically Collected Data, Submitted Information and Information Obtained from Other Sources to improve the Services and provide the User with the the best possible experience. Examples of how information may be used are, but not limited to:

Submitted Information:

• customise the Services the User chooses to receive
• allow the Users to connect with other users on the social networks that the User has chosen to connect through
• The Company carrying out it’s obligations to the User, such as delivering any Services or physical products that the User has purchased
• manage the User’s account
• respond to the User’s queries
• contact the User with important service announcements

Device Information:

• optimise and present the Services in the most effective manner for the User’s device and operating system
• carry out research and analysis
• carry out training and quality assurance
• Log Information:
• maintain, protect and improve our Services
• carry out research and analysis
• Carry out training and quality assurance

Location Information:

• Location information is only used when necessary to provide the Services and deliver the products that the User has purchased or requested. If the User has not allowed location information to be sent, then location information will not be collected.
• The Company may also use any of this information to meet legal and regulatory obligations and protect any legitimate interests.

To whom does the company disclose my personal information?

The Company works with several trusted business partners to perform tasks on our behalf, and the Company may need to disclose your Personal Information for them to provide our services or deliver products to you. Our business partner are bound by contractual confidentiality obligations, and do not have any independent right to use your Personal Information beyond what is necessary to assist the Company. In terms of responsibility, these service providers are ‘Data Processors’.

The User hereby gives consent to sharing of his/her information with third parties by the Company, for the purposes set forth in this Privacy Policy and in the User Agreement. In addition, User accepts and undertakes that its information may be shared with third parties in circumstances set forth below:

• when the Company requires a third-party service provider in order to deliver its services;
• when requested or approved by the User;
• when there is a court order or required by law;
• When the Company needs to enforce it’s User Agreement, investigate fraud, reduce credit risk, exercise the Company’s legal rights or defend against legal claims;
• in connection with the sale or transfer of an operation;
• to ensure the safety of the Users and third parties, or to protect the rights and property of the Company, other Users and third parties, when obtaining prior consent is difficult.
• For identification and resolution of technical issues related to the system, the Company may have to identify and use the IP address of the User, if necessary. IP addresses can also be used to identify users in a general sense and to collect comprehensive demographic information.

If there is a change in the ownership of the Company or any of its assets, Personal Data may be disclosed to the new or prospective investor. If this is the case, the Company will notify the User before the Personal Data becomes subject to a different privacy policy.

The Company has right to transfer the data relating to the purposes stated herein to the servers (the servers may belong to itself, its affiliates or sub-contractors) located anywhere in the world and outside the country of the User's domicile.

The User provides consent to that the Company may contact the User about other Services and products from the Company. The User provides consent for the Company to contact the User with advertising from other partner businesses.

The Website may contain links to other sites and applications and the Company does not bear any responsibility for the privacy practices and contents of those sites and applications.

How does the company protect my Personal Data?

Saga sleeping technologies AB uses a secure server to store the User’s Personal Information. To this end, Saga sleeping technologies AB uses industry-standard organisational and technical security measures to protect the User’s data against unauthorised disclosure or processing.
Where the User is required to choose a password for the User’s account, the User is responsible for keeping that password confidential. If the User suspects that someone has unauthorized access to the Users password or account, please inform the Company immediately at info@stellasleep.com.
Saga sleeping technologies AB is not responsible for the misuse of account or information where the User has not kept the password confidential or not reported a breach of security.

The Company may change the provisions of this Privacy Policy by publishing it on the Site at any time. The Company's amended Privacy Policy provisions become effective on the date when they are posted on the Site.

You have a right to access, view, edit and request the deletion of your personal data.

If a User wishes to delete an account, this can be done by following instructions within the relevant Service, and/or by contacting info@stellasleep.com. If the User wishes to delete their Personal Information that the Company holds, they may do so by contacting the Company at info@stellasleep.com. A deletion request will result in the deactivation of any accounts that the User holds and deletion or anonymisation of relevant Personal Information, unless the Company has to retain it for legal reasons.

The User has the right to object to certain purposes for processing, in particular to data processed for direct marketing purposes and to data processed for certain reasons based on the Company’s legitimate interests. The User also has the right to have their personal information erased (the “right to be forgotten”). The User may do so by contacting the Company at info@stellasleep.com

Information regarding recordings of your voice

Stella offers the opportunity for you to record your own – or anyone else’s voice. The purpose is simply that your child can choose to listen your own voice, instead of any of the pre-recorded voices in the app, of the stories.

This recording is saved both locally on the device you are using, and on our corporate cloud server. The copy we store at our corporate cloud makes it possible for multiple users of your account to access the audio file, to not be dependent of using the specific single device where you made the recording initially. The cloud is encrypted, and it is currently Google Cloud.

The voice material, that is encrypted and available only to you and your account, can be used in the future, as a basis to train a machine, in order for you to synthesize your own voice, for the purpose of narrating sleep stories in the app. This will only happen with your additional consent.

Stella will not try to sell or in any other way offer your individual voice externally. Your voice (or any other voices you record) is your property, now and forever.

Stella does not allow any deceptive uses of our technology.

Stella does not provide any public API for creating or sharing these recordings.



Information for Users in California
If the User is a California resident, the Company is required to provide additional information regarding how “personal information” is collected, used, and shared (as defined in the California Consumer Privacy Act (“CCPA”)).

Categories of personal information collected. 
Detailed above in Privacy Policy are the specific details regarding the Personal Data the Company collects from and about Users.
identifiers (such as name, address, and email address);
commercial information (such as the User’s app purchases with us);
general geolocation information (e.g., the User’s city and state based on IP address or precise location, with the User’s consent);
and other information that identifies or can be reasonably associated with the User.

How the Company uses these categories of personal information
The Company and its service providers may use the categories of personal information collected from and about the User for the following business and commercial purposes (as those terms are defined in applicable law):
The Company’s or its service provider’s operational purposes;
Auditing consumer interactions on the Website or in the Application;
Detecting, protecting against, and prosecuting security incidents and fraudulent or illegal activity;
Bug detection and error reporting;
Customising content that the Company or its service providers display on the Services (e.g., contextual ads);
Providing the Services, including account servicing and maintenance, customer service, advertising and marketing, analytics, and communication about the Services;
Improving the existing Services and developing new services (e.g., by conducting research to develop new products or features).

Other uses about which the Company will notify the User.
Examples of these types of uses are discussed in the main Privacy Policy. The Company may also use the categories of personal information for compliance with applicable laws and regulations, and the Company may combine the information collected (“aggregate”) or remove pieces of information (“de-identify”) to limit or prevent identification of any particular user or device.

Categories of personal information the Company discloses for business purposes
As explained in detail in this Privacy Policy, the Company may disclose the following categories of information about the User or the User’s use of our services for business purposes (as defined by applicable law) or as required by applicable law:
Identifiers (such as name, address, email address); commercial information (such as transaction data);internet or other network or device activity (such as browsing history or app usage); geolocation information; biometric information; sensory information (such as audio or visual information); and other information that identifies or can reasonably associated with the User.

Sale of Personal Information
California residents may opt out of the “sale” of their personal information. California law broadly defines sale such that it may include allowing third parties to receive certain information, such as cookies, IP address, and/or browsing behavior for the Company’s marketing and analytics purposes. Depending how the User uses the Services, the Company may have “sold” (as defined by California law) the following categories of personal information about th User in the last 12 months to the Company’s analytics and marketing partners: internet and network or device activity.

If the User is a California resident and would like to opt out of the sale of personal information from the User’s use of our Website, they may do so as outlined under the following page: Do Not Sell My Personal Information. If the User would like to opt out of the sale of data related to the Application, this is changed in the privacy settings of the app.

The User’s California Privacy Rights
California law may permit the User to request that the Company:
Provide the User with the categories of personal information the Company has collected or disclosed about the User in the last twelve months; the categories of sources of such information; the business or commercial purpose for collecting or selling the User’s personal information; and the categories of third parties with whom the Company shared personal information.
Provide access to and/or a copy of certain information the Company holds about the User.
Delete certain information the Company has about the User.
Where applicable, opt-out of any sales of the User’s personal information.
The User can also opt-out of analytics within the Application’s settings.
The User may have the right to receive information about the financial incentives that the Company offers to the User (if any). The User also has the right to not be discriminated against (as provided for in applicable law) for exercising certain of the User’s rights. Certain information may be exempt from such requests under applicable law. For example, the Company required certain types of information so that the Company can provide the Services to the User and for compliance with applicable laws. If the User asks the Company to delete certain information, the User may no longer be able to access or use the Services.
If the User would like to exercise any of these rights, please email the Company at info@stellasleep.com. The User will be required to verify their identity before the Company fulfils the request. To do so, the User will need to provide information about thier account or a form of ID.
The User can also designate an authorized agent to make a request on their behalf. To do so, the User must provide the Company with written authorization or a power of attorney, signed by the User, for the agent to act on the User’s behalf. The User will still need to verify their identity directly with the Company.

Please send questions, opinions, and recommendations regarding privacy and any other issue to info@stellasleep.com.