SOMNI.FIT · OMNIGUILD LLC
Consumer Health Data Privacy Policy
Effective · somni-privacy-2026-10-28-r1
Sleep information deserves a clear boundary.
This separate policy describes consumer health data handled by Somni.fit, an Omniguild LLC service. It applies to health-related information connected or reasonably linkable to a person, including inferences. We treat discomfort and pressure-map information as sensitive even though Somni is a shopping service.
What we collect and where it comes from
When you request the relevant feature, categories may include body measurements and proportions; sleep positions and comfort or temperature concerns; shoulder, hip, back or other discomfort; desired adjustable-base features (such as head or leg elevation); pressure-map readings, coordinates and fitting estimates; and related recommendations or feedback. The current quiz does not request diagnoses, medications or medical history. Broad comfort answers can be declined; height and shape controls are optional illustration details. Older saved records or unsolicited conversations may contain additional health-related information. Contact or account identifiers become associated with these records only in features that save or share a profile.
Sources are your answers and edits, your authorized AI-conversation import, the estimates Somni derives from those inputs, and an authorized retailer’s pressure-map export or feedback. Information for a second sleeper requires that person’s authorization. Catalog specifications are not a customer health record. We do not collect precise GPS, use healthcare-location geofences or use the avatar to identify you.
Purposes and your choices
We process this information to provide the fitting, saved history, AI conversation, store assessment or handoff you specifically request. The click quiz can stay on your device. Optional private bed check-ins record comfort and product experience only after your specific save choice. Device notes remain local; protected store-session feedback is visible to that authorized store team and requires the store’s data release. It is separate from a public review. Voice and server saves have notices before you choose them. You can decline optional AI or saving and continue with click answers.
We obtain specific consent where required before collection or processing, and separate authorization for optional sharing with a retailer. A request to provide the service is limited to the information necessary for that service; it is not blanket permission for other uses. General terms, optional analytics or receipt of a verification email do not authorize health-data sharing.
We do not sell consumer health data, use it for targeted advertising, or join private fit snapshots to browsing measurement. We do not use it to determine eligibility for insurance, employment, housing or credit. We do not use private health disclosures to train a Somni model in this release.
Data shared, recipients and affiliates
Hosting and storage processors (Sites/Cloudflare) handle the encrypted profile or assessment records needed to provide the requested feature. If you choose AI or voice, OpenAI processes the selected sleep answers, comfort concerns and audio needed for that interaction. Somni does not store raw quiz audio or captions on its server; provider retention is governed separately. These processors are service providers, not recipients of permission to advertise to you.
If you expressly authorize a retailer handoff, the named retailer and its authorized associates receive only the fitting summary and fields you approve for that handoff. This may include fitting needs, selected preferences or measurements and recommendations. Store assessments uploaded by a retailer are available to that retailer’s authorized staff. A catalog connection alone does not share a shopper’s health information. Messaging providers receive delivery information for requested messages; do not place medical details in a message.
Somni has no affiliate recipient of consumer health data for separate marketing. Another Omniguild project, including myPOET, is not authorized to use a Somni health profile for its own purposes. A legal disclosure or business transfer must satisfy applicable legal requirements. If a new health-data category, purpose or recipient requires additional consent, we obtain it before that use.
Your health-data rights
You can request access, a copy, correction or deletion of your information, withdraw consent, or appeal a decision. Write to privacy@somni.fit. Start with the request type and the email used with Somni; do not send medical records, passwords, payment details or identity documents.
We verify requests proportionately, using the original account or browser when possible. If we need more information, we explain why. An authorized agent may contact us with evidence of permission. We respond within the period required by applicable law, explain any lawful limitation or extension, and explain how to appeal. To appeal, reply with “Privacy appeal” and the request reference; we provide a reasoned response and the relevant regulator’s contact where required. We do not penalize you for exercising privacy rights.
For browser analytics, use Privacy choices below. Private server history has its own delete button. Removing a device profile, deleting a server record and revoking a retailer share are separate actions. If a feature does not provide the deletion control you need, contact us. If a retailer independently holds a copy, we help identify the right business and notify recipients as required by law.
Withdrawal, deletion and copies
End voice to stop sending new microphone audio. Use profile deletion, share revocation and private-history deletion controls where available, or contact the privacy address above to withdraw consent, confirm processing, request access and a copy, request deletion or obtain the recipient information available under applicable law. Withdrawal does not undo processing already completed lawfully. We verify ownership without demanding unnecessary health information and communicate with processors and recipients as required.
Device drafts expire after 24 hours and device saves after 30 days without a new save, with cleanup when read. Private server fit snapshots expire within 30 days; synchronized voice drafts within 24 hours, with batch cleanup during service use. Saved consultations normally have 30-day access. Store assessment XML, related operational records and recovery copies have separate lifecycles; expiring a link does not delete every copy. A deletion request covers applicable live records, processors and recovery copies as required by law, subject only to applicable exceptions. We explain limitations rather than promising that every external retailer copy disappears when a link is revoked.