Lezonder Privacy Policy
Last updated: October 6, 2026
1. Introduction
Lezonder ("Lezonder," "we," "our," or "us") motivates high-quality sleep through gamified cash-raffle rewards delivered via our website, iOS app, and related services (collectively, the "Service").
We value your privacy and are committed to protecting your personal information in accordance with California law, including the California Consumer Privacy Act ("CCPA"). By using the Service, you agree to the practices described below.
2. Scope
This Privacy Policy applies to personal information we collect from individuals in the United States (primarily California) when they access or use the Service. It does not apply to third-party websites or services that we do not control.
If you connect Lezonder to ChatGPT or Codex, read our connection privacy notice. This requires separate sharing permission; tracker or Apple Health synchronization consent does not authorize sharing with OpenAI.
3. Information We Collect
| Category | What We Collect | Source |
|---|---|---|
| Personal Information | Email address; optional Telegram username (if you choose to provide one for community posts) | Provided directly by you (e.g., sign-up form, profile settings) |
| Sleep Data | Daily sleep metrics (Deep sleep, REM sleep, total sleep, bedtime) | Apple Health (read-only, with your explicit permission via the iOS Health permissions screen), the Oura API, and/or the WHOOP API (with your authorization). We never write to Apple Health, and Apple Health data is used only to calculate your sleep scores and tickets — never for advertising or shared for marketing. You can revoke access anytime in the Health app or by disconnecting Oura or WHOOP. |
| Payment & Subscription Data | Subscription periods, plan, renewal status, and transaction references. We never receive or store your card details. | Apple In-App Purchase (payment processing) and RevenueCat (subscription state), when you purchase a membership |
| Usage Data | Screens and pages visited, buttons tapped, session duration, referrer URL | Segment, Mixpanel, Amplitude, and Google Analytics 4 (GA4) |
| Device Data | Browser type, OS, device model, IP address, push notification token | Segment, Mixpanel, Amplitude, GA4, and OneSignal |
4. How We Collect Information
- Direct interactions — When you create an account, join the raffle, purchase a membership, or contact us.
- Automated technologies — Cookies, pixel tags, Segment, Mixpanel, Amplitude, and GA4 collect Usage and Device Data.
- Third-party integrations —
- Apple Health shares your sleep metrics with the app (read-only) once you grant permission in iOS.
- Oura API retrieves your sleep metrics once you grant permission.
- WHOOP API retrieves your sleep metrics once you grant permission.
- Apple In-App Purchase processes membership payments; RevenueCat processes the resulting subscription state on our behalf.
- Clerk provides account sign-in.
- OneSignal delivers push notifications and email.
5. How We Use Information
| Purpose | Legal/Business Basis |
|---|---|
| Provide, maintain, and improve the Service (e.g., calculate tickets, display dashboards) | Performance of our contract with you |
| Create and manage your account | Same as above |
| Operate your membership and the raffle (subscription periods, prize eligibility, winner payment) | Performance of our contract with you |
| Send push notifications about your sleep results and tickets (via OneSignal; controllable in notification settings) | Legitimate interest; optional and toggleable |
| Send service-related or marketing emails (via OneSignal) | Legitimate interest; optional marketing is opt-in |
| Analyze usage, measure engagement, and improve UX (via Segment, Mixpanel, Amplitude, and GA4) | Legitimate interest |
| Detect, investigate, or prevent fraud and security incidents | Legal obligation / legitimate interest |
| Comply with applicable laws and respond to lawful requests | Legal obligation |
6. Sharing & Disclosure
We do not sell your personal information. We share it only as follows:
| Recipient | Purpose |
|---|---|
| Service Providers (Supabase, Clerk, RevenueCat, OneSignal, Segment, Mixpanel, Amplitude, GA4, Oura, WHOOP) | Hosting, sign-in, subscription management, push notifications, email delivery, analytics, sleep-data sync |
| Apple | Payment processing for memberships (Apple acts as the merchant for In-App Purchases) |
| OpenAI (ChatGPT and Codex, if you connect) | With your separate sharing permission, answer questions about your Lezonder results: only dated Lezonder Sleep Scores (latest result and up to seven local days). Missing or hidden dates are omitted. Unverified data-source sharing permission returns an error without results; scores remain unchanged. The two tools do not share tickets, ticket reasons, draw status, prize probabilities, raw tracker or Apple Health records. During OAuth account linking, Clerk may also provide your account ID, email and verification status, name, and profile image, depending on the permissions you grant. Identity and refresh permissions grant no additional Lezonder data access. See the connection privacy notice. |
| Community visibility (optional) | If you provide a Telegram username, it may appear in community posts about your tickets; without one, we use your Clerk username or persisted sleep pseudonym. Email addresses, including masked versions, are never shown on a public surface |
| Affiliates & Successors | Internal management or in connection with a merger, acquisition, or asset sale |
| Authorities | When required to comply with law, court order, or to protect rights, safety, or property |
7. Cookies & Tracking Technologies
We use both session and persistent cookies and similar technologies to:
- authenticate you,
- remember preferences, and
- understand how our website is used (analytics).
Product analytics. We use Segment to measure page views and clicks on our website and to pass that usage data to our analytics providers, Mixpanel and Amplitude. They process it on our behalf. We do not sell this data or use it for advertising.
Your choices depend on where you visit from. If you are in the European Economic Area, the United Kingdom, or Switzerland, or we cannot determine your country, product analytics stay off unless you accept them in our cookie notice. Everywhere else, including the United States, product analytics are on by default and you can turn them off at any time by choosing Decline in the cookie notice or through the Cookie Settings button on any page. If your browser sends a Global Privacy Control signal, we keep product analytics off unless you choose to accept them.
Google Analytics. GA4 loads only after you choose Accept in the cookie notice, wherever you are. GA4 currently retains event-level data for 14 months (Google's default). You may also install the GA Opt-out Browser Add-on.
You can also block or delete cookies through your browser settings.
8. Data Retention
We keep personal information only as long as necessary to:
- deliver the Service,
- comply with legal requirements (including records of raffle draws and prize payments), and
- resolve disputes.
Analytics data is kept for each analytics provider's standard retention period (14 months for GA4); other records are retained until you delete your account or request erasure.
For the ChatGPT/Codex connection, Lezonder does not keep conversation transcripts or additional copies of tool responses. Underlying Lezonder records follow the retention rules above. OpenAI handles connected-app data according to your ChatGPT plan or workspace, applicable Data Controls, and its terms. Lezonder does not require you to disable model improvement. Review OpenAI’s Privacy Policy and Data Controls.
Revoking the connection’s authorization stops future Lezonder access. Disconnecting a tracker does not revoke the connection. Revocation does not automatically delete copies already received by OpenAI; those follow applicable OpenAI retention and Data Controls. Use OpenAI’s conversation-deletion or privacy-request controls for those copies. For help revoking access or deleting Lezonder-held records, email ea@lezonder.com; we verify ownership and apply the retention exceptions above.
9. Security
We use industry-standard safeguards (encryption in transit, least-privilege access, and regular backups). No Internet transmission or storage system is 100% secure, so we cannot guarantee absolute security.
10. Your Privacy Rights (CCPA)
If you are a California resident, you may:
| Right | What It Means | How to Exercise |
|---|---|---|
| Know | Request the categories and specific pieces of personal information we have collected about you | Email ea@lezonder.com with subject "CCPA Request – Know" |
| Delete | Ask us to delete personal information we collected from you | Email ea@lezonder.com with subject "CCPA Request – Delete" |
| Opt-Out of Sale | We do not sell data, but you may still request confirmation | Same as above |
| Non-Discrimination | We will not deny goods/services, charge different prices, or provide different quality if you exercise your rights | Automatically honored |
We will verify your identity before fulfilling any request and respond within 45 days.
11. "Do Not Sell My Personal Information"
Lezonder does not sell personal information. We share usage data only with processors (e.g., Segment, Mixpanel, Amplitude, GA4) to provide analytics and improve the Service.
12. Children's Privacy
The Service is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has provided data to us, please contact ea@lezonder.com so we can delete it. Participation in the raffle is limited to users 18 and older (see our Terms of Service).
13. International Data Transfers
Lezonder’s own data processing and storage occur on servers located in the United States. For information you choose to share with OpenAI, recipient processing locations follow OpenAI’s terms and privacy policy.
14. Changes to This Policy
We may update this Privacy Policy periodically. If material changes are made, we will:
- post the revised version here, and
- notify you by email or prominent in-app banner at least 7 days before changes take effect.
The "Last updated" date at the top reflects the latest revision.
15. Governing Law
This Privacy Policy is governed by the laws of the State of California, without regard to its conflict-of-law rules.
16. Contact Us
For questions, concerns, or to exercise your rights, please email: ea@lezonder.com
Thank you for trusting Lezonder with your data — and for prioritizing a good night's sleep!