Privacy Policy

Data Collection & Local Mode

CpapDash processes your CPAP therapy data entirely on your device when used in local mode. We do not collect, store, or transmit your health data to any external servers. All therapy sessions, metrics, and signal data remain stored locally on your device.

Cloud Accounts

When you use a cloud account, your therapy data is stored on our managed infrastructure, or on servers you control if you self-host. You keep full ownership of it. We process it to run the features you use: charts, reports, alerts and, on Pro, the AI features described below. We never sell your data and never use it for advertising. You can export or delete your cloud data at any time.

AI Features (Pro)

Pro's AI features, the Sleep Agent, chart explanations and AI summaries, send data to third-party AI providers so they can answer you. What is sent: your therapy metrics for the nights involved (such as AHI, events, pressure, leak, breathing and oxygen), the messages you type to the Sleep Agent and the earlier messages in that conversation, your equipment and device status, and, when you ask the Sleep Agent about your device, the most recent part of that device's logs. To look up reference information, the Sleep Agent may also send a web search query, which can include your own numbers.

What is not sent: your name, your email address, your account number or your device serial number.

The messages you type, and the Sleep Agent's answers, are also checked by an automated moderation service run by a third-party AI provider. If a message is flagged, a short excerpt is kept with your account.

We keep your Sleep Agent conversations until you delete them or your account, and your AI summaries until you delete your account. ML insights are computed on our own servers; they only reach an AI provider if you ask the Sleep Agent or a chart explanation about them.

Device Communication

With a WiFi SD card adapter on your local network, the app talks to it directly and nothing passes through our servers during that sync. The Mule & Miner works differently in cloud mode: it uploads your therapy data from the SD card to our servers on its own, which is how last night appears without opening the app.

Service Providers

We use these services to run CpapDash: Stripe for payments (it receives your email address and plan; we never see your card), Amazon Web Services for file storage, email delivery and content delivery, Apple and Google if you sign in with them, Firebase Cloud Messaging for push notifications, Shopify for hardware orders, Google Analytics on the website only, and SleepHQ only if you connect your SleepHQ account. We do not sell your data to anyone.

Apple Health

If you turn on Apple Health in the CpapDash app, the app writes your sleep, blood oxygen and heart rate readings into Apple Health on your iPhone. CpapDash never reads data from Apple Health, and nothing from Apple Health is sent to us or used for advertising.

Support Messages

If you contact us through the in-app support form, your email address and message are sent to our support system and used only to answer you. Email you send to our support address is first screened for spam and scams by an automated filter that uses a third-party AI provider; it sees the sender, the subject and the start of the message.

Analytics

Our website uses Google Analytics to understand general traffic patterns. The mobile app does not include any analytics, tracking, or advertising frameworks.

Data Deletion

You can delete all app data at any time using the "Clear All Data" option in Settings, or by uninstalling the app. For cloud accounts, use the "Delete Account" option to permanently remove all data from our servers, including your Sleep Agent conversations and AI summaries.

Contact

For privacy questions, email support@amatsolutions.com.