Lezonder Privacy Policy
Last updated: June 11, 2026
1. Introduction
Lezonder ("Lezonder," "we," "our," or "us") motivates high-quality sleep through gamified cash-raffle rewards delivered via our website, iOS app, and related services (collectively, the "Service").
We value your privacy and are committed to protecting your personal information in accordance with California law, including the California Consumer Privacy Act ("CCPA"). By using the Service, you agree to the practices described below.
2. Scope
This Privacy Policy applies to personal information we collect from individuals in the United States (primarily California) when they access or use the Service. It does not apply to third-party websites or services that we do not control.
3. Information We Collect
| Category | What We Collect | Source |
|---|---|---|
| Personal Information | Email address; optional Telegram username (if you choose to provide one for community posts) | Provided directly by you (e.g., sign-up form, profile settings) |
| Sleep Data | Daily sleep metrics (Deep sleep, REM sleep, total sleep, bedtime) | Apple Health (read-only, with your explicit permission via the iOS Health permissions screen) and/or the Oura API (with your authorization). We never write to Apple Health, and Apple Health data is used only to calculate your sleep scores and tickets — never for advertising or shared for marketing. You can revoke access anytime in the Health app or by disconnecting Oura. |
| Payment & Subscription Data | Subscription periods, plan, renewal status, and transaction references. We never receive or store your card details. | Apple In-App Purchase (payment processing) and RevenueCat (subscription state), when you purchase a membership |
| Usage Data | Screens and pages visited, buttons tapped, session duration, referrer URL | Segment and Google Analytics 4 (GA4) |
| Device Data | Browser type, OS, device model, IP address, push notification token | Segment, GA4, and OneSignal |
4. How We Collect Information
- Direct interactions — When you create an account, join the raffle, purchase a membership, or contact us.
- Automated technologies — Cookies, pixel tags, Segment, and GA4 collect Usage and Device Data.
- Third-party integrations —
- Apple Health shares your sleep metrics with the app (read-only) once you grant permission in iOS.
- Oura API retrieves your sleep metrics once you grant permission.
- Apple In-App Purchase processes membership payments; RevenueCat processes the resulting subscription state on our behalf.
- Clerk provides account sign-in.
- OneSignal delivers push notifications.
- Loops.so sends transactional and marketing emails on our behalf.
5. How We Use Information
| Purpose | Legal/Business Basis |
|---|---|
| Provide, maintain, and improve the Service (e.g., calculate tickets, display dashboards) | Performance of our contract with you |
| Create and manage your account | Same as above |
| Operate your membership and the raffle (subscription periods, prize eligibility, winner payment) | Performance of our contract with you |
| Send push notifications about your sleep results and tickets (via OneSignal; controllable in notification settings) | Legitimate interest; optional and toggleable |
| Send service-related or marketing emails (via Loops.so) | Legitimate interest; optional marketing is opt-in |
| Analyze usage, measure engagement, and improve UX (via Segment and GA4) | Legitimate interest |
| Detect, investigate, or prevent fraud and security incidents | Legal obligation / legitimate interest |
| Comply with applicable laws and respond to lawful requests | Legal obligation |
6. Sharing & Disclosure
We do not sell your personal information. We share it only as follows:
| Recipient | Purpose |
|---|---|
| Service Providers (Supabase, Clerk, RevenueCat, OneSignal, Loops.so, Segment, GA4, Oura) | Hosting, sign-in, subscription management, push notifications, email delivery, analytics, sleep-data sync |
| Apple | Payment processing for memberships (Apple acts as the merchant for In-App Purchases) |
| Community visibility (optional) | If you provide a Telegram username, it may appear in community posts about your tickets; without one, only a masked version of your email (e.g., a***@gmail.com) is shown |
| Affiliates & Successors | Internal management or in connection with a merger, acquisition, or asset sale |
| Authorities | When required to comply with law, court order, or to protect rights, safety, or property |
7. Cookies & Tracking Technologies
We use both session and persistent cookies to:
- authenticate you,
- remember preferences, and
- analyze traffic via GA4.
You can disable non-essential cookies in our cookie banner or through your browser settings. GA4 currently retains event-level data for 14 months (Google's default). You may also install the GA Opt-out Browser Add-on.
8. Data Retention
We keep personal information only as long as necessary to:
- deliver the Service,
- comply with legal requirements (including records of raffle draws and prize payments), and
- resolve disputes.
Analytics data follows GA4's default retention; other records are retained until you delete your account or request erasure.
9. Security
We use industry-standard safeguards (encryption in transit, least-privilege access, and regular backups). No Internet transmission or storage system is 100% secure, so we cannot guarantee absolute security.
10. Your Privacy Rights (CCPA)
If you are a California resident, you may:
| Right | What It Means | How to Exercise |
|---|---|---|
| Know | Request the categories and specific pieces of personal information we have collected about you | Email ea@lezonder.com with subject "CCPA Request – Know" |
| Delete | Ask us to delete personal information we collected from you | Email ea@lezonder.com with subject "CCPA Request – Delete" |
| Opt-Out of Sale | We do not sell data, but you may still request confirmation | Same as above |
| Non-Discrimination | We will not deny goods/services, charge different prices, or provide different quality if you exercise your rights | Automatically honored |
We will verify your identity before fulfilling any request and respond within 45 days.
11. "Do Not Sell My Personal Information"
Lezonder does not sell personal information. We share usage data only with processors (e.g., Segment, GA4) to provide analytics and improve the Service.
12. Children's Privacy
The Service is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has provided data to us, please contact ea@lezonder.com so we can delete it. Participation in the raffle is limited to users 18 and older (see our Terms of Service).
13. International Data Transfers
All data processing and storage occur on servers located in the United States. We do not transfer personal information outside the U.S. at this time.
14. Changes to This Policy
We may update this Privacy Policy periodically. If material changes are made, we will:
- post the revised version here, and
- notify you by email or prominent in-app banner at least 7 days before changes take effect.
The "Last updated" date at the top reflects the latest revision.
15. Governing Law
This Privacy Policy is governed by the laws of the State of California, without regard to its conflict-of-law rules.
16. Contact Us
For questions, concerns, or to exercise your rights, please email: ea@lezonder.com
Thank you for trusting Lezonder with your data — and for prioritizing a good night's sleep!