Your quiet stays yours.

drift off · Updated 18 October 2026

No account required

Your settings, favourites and journal stay on your iPhone. Night summaries are stored locally in a protected file. Removing the app removes its local records. Health query results are held in memory. Deleting Drift records does not delete Apple Health records.

Microphone and alarms

Saving an alarm does not start the microphone. Start sleep tracking explicitly enables experimental sound-level monitoring. Raw audio and sound measurements are never saved to our service. Stop tracking keeps your latest-time alarm. End night cancels the first and early-wake alarms after confirmation. An optional independent backup stays armed until separately cancelled or stopped. iOS provides its own Stop control. Smart wake cannot identify light, deep or REM sleep.

Optional product diagnostics

Free and Plus can be used without sharing. Only after explicit consent, Drift sends app/iOS versions, coarse iPhone device family, monitoring start/stop/interruption events, alarm scheduling, ringing events actually observed by the app and fixed-choice morning feedback you choose to send. Events include the server receipt time. These data can reveal sleep-tracking use. No Health records, sleep stages, journal text, raw audio, sound levels, advertising identifier or precise location are uploaded.

A random participant identifier links your events. It is pseudonymous, not guaranteed anonymous. You do not provide a name or email. Consent scope/version/time and withdrawal history are recorded. Your device stores separate upload and deletion credentials in its Keychain. A private recovery code allows withdrawal and deletion on a replacement installation. Keep it private; without the Keychain or code we cannot link your identity to the records.

Where data is stored

YOLO HOUSE LIMITED controls the data. Cloudflare processes it through Workers and D1. The D1 database is restricted to the European Union. Workers requests may be processed globally; this is not a promise of UK-only or EU-only network processing. Cloudflare processes ordinary network information, including IP addresses, to provide and secure its services. Our service does not persist raw IP addresses or enable Worker request/body logging. Short-lived, keyed rate-limit identifiers are deleted within two hours.

Retention, withdrawal and deletion

Diagnostic events expire after 90 days, with hourly cleanup. Consent records are retained while sharing is active and for up to 90 days after withdrawal. Stop sharing immediately stops new uploads on your iPhone; if offline, server withdrawal retries on reopening online. Previously sent events remain until expiry or deletion. Delete shared data removes your participant, consent records and events from the live database. Provider recovery backups can retain earlier data for up to 30 days, depending on the Cloudflare plan. We do not restore deleted participants as active data. Privacy controls are in Sleep & wake → Patterns → Privacy.

Apple Health and purchases

Health is optional. Reading selected categories and saving time in bed are separate choices. You can review tracking times before saving, or opt into automatic saving for future completed tracking intervals, off by default. Saving requires Sleep write permission. Alarm-only nights and unclosed tracking intervals are not automatically saved. Optional Phone sleep analysis stores minute-level sound-activity counts only in protected local night history, excluded from backup. Its unvalidated quiet-period heuristic proposes possible sleep for morning review. Quiet wakefulness, other people and noise can mislead it. After you edit and confirm periods you believe were sleep, drift off can save them as user-entered unspecified sleep. Sleep estimates are never exported automatically and no Core, REM or Deep stages are inferred or written. Deleting night history removes these local counts. No counts or sleep estimates are sent to our servers. You choose categories in Apple's permission sheet; no Health records are sent to us. Disconnect stops queries and automatic saving and clears displayed results. Existing Health records remain until you delete them in Apple Health. Revoke system permission in Health → profile → Apps → Drift. Apple handles subscription billing and purchase restoration. Trial duration and renewal price are shown before purchase. Cancelling renewal leaves access until Apple's entitlement expires. Existing alarms and local records are preserved.

Research and advertising

No clinical or sleep-stage research study is active. A future study would require separate information, consent and applicable ethics review. Ordinary product feedback is not clinical ground truth. There are no ads, sale of Health data, marketing emails or third-party advertising identifiers. Neural story recordings are bundled, with no voice-provider requests during playback.

Your rights and contact

Contact hello@designstudio13.com about access, correction, deletion, withdrawal or other privacy rights. Use your private recovery code to identify your diagnostic records, and contact us before sending credentials by email. You may also complain to the UK Information Commissioner's Office. Optional diagnostic processing relies on your consent; you may withdraw without losing app access.