Privacy Policy

Last updated: 24 September 2026

Who we are

Máni is provided by Nordic Helsekonsult AS (org. no. 923 884 009), Oscars gate 72A, 0256 Oslo, Norway ("we", "us"). We are the data controller for the personal data processed in Máni. Contact: contact@manisleep.com.

What we collect

• Account data: email address and login details.
• Coaching conversations: what you tell Máni about your sleep, routines, health and daily life.
• Wearable data (only if you choose to connect a device): sleep duration, sleep stages, heart rate, HRV and similar metrics.
• Membership and payment data: subscription status and transaction references. We do not store card details; payments are handled by Stripe.
• Technical data: device type, browser, log data needed to run and secure the service.

Health data

Information about your sleep and health is a special category of personal data under GDPR Article 9. We process it only with your explicit consent, which you give when you create your account. You can withdraw consent at any time by deleting your account; this does not affect processing carried out before withdrawal.

Why we process your data, and on what basis

• To provide personalised sleep coaching and remember your progress: your explicit consent (Art. 6(1)(a) and 9(2)(a)) and our contract with you (Art. 6(1)(b)).
• To manage your membership and payments: contract (Art. 6(1)(b)) and legal obligations such as bookkeeping (Art. 6(1)(c)).
• To keep the service secure and fix errors: our legitimate interest (Art. 6(1)(f)).
• To improve Máni: only anonymised or aggregated data. We do not use identifiable conversations to train AI models.

We do not sell your data, and we do not use it for advertising.

Who processes data on our behalf

We use carefully selected processors bound by data processing agreements:

• Athlera: AI assistant platform that runs Máni's coaching.
• OpenAI, Anthropic, Google, Mistral and Meta: language models used to generate responses.
• Lovable / Supabase: hosting, database and login.
• Stripe: payments. Some of these may process data outside the EU/EEA. In those cases, transfers are protected by the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.

How long we keep data

We keep your account and coaching history for as long as you have an account, so Máni can pick up where you left off. When you delete your account, we delete your data within 30 days, except where the law requires us to keep it longer (for example accounting records, 5 years).

Your rights

You have the right to access, rectify, delete and port your data, to restrict or object to processing, and to withdraw consent. Contact contact@manisleep.com. You can also complain to the Norwegian Data Protection Authority (Datatilsynet, datatilsynet.no).

Age

Máni is intended for users aged 18 and over.

Security

Data is encrypted in transit and stored with access controls. Only authorised personnel have access, and only when necessary.

Changes

We will notify you of material changes by email or in the app.