Bamsori Privacy Policy
- Effective date: 2026-10-29
- Version: 2026-10-29
- Previous versions: none (first version)
Bamsori (the "app", for iPhone and Apple Watch) and its sync server (the "server") are operated by JIPLAB, a sole proprietorship in the Republic of Korea ("we", "us"). This policy explains what information we handle, where it lives, why, for how long, and the choices you have.
At a glance
| On-device first | Sound is analyzed on your iPhone. Every on-device feature works without an account. |
| Speech | Sound the app identifies as speech is silenced before anything is saved. Speech is never sent to us and never used to improve detection. |
| Standby buffer | Before you fall asleep, the app keeps only the last 10 minutes of sound, in memory. If you don't fall asleep, it is discarded without being saved. |
| What reaches our server | Only what you choose. Every optional consent is separate and off by default. |
| No ads, no selling | No advertising or third-party analytics SDKs. We do not sell your data or use it for targeted advertising. |
| Your data | Everyone, on every tier, can get a free copy of the data our server holds about them. |
| Age | 18 and older only. |
1. What we process, where, and why
1.1 Stays on your device (never sent to us)
| Data | What it is | Why | How long |
|---|---|---|---|
| Sleep sounds | Microphone audio, analyzed on device for snoring | Detect and record snoring; reports | See section 3 |
| Standby buffer | The most recent 10 minutes of sound before you fall asleep | So snoring just before sleep isn't lost | Memory only; discarded if you don't fall asleep |
| Snoring metrics | Share of sleep time with snoring, counts, relative loudness, sleep periods | Reports and trends | Until you delete them |
| HealthKit data (read) | Sleep stages, heart rate, heart rate variability, respiratory rate, blood oxygen, wrist temperature, breathing disturbances — only the types you allow | Refine when you fell asleep and woke up; show in reports | Read from the Health app when needed |
| Motion | iPhone motion, Apple Watch accelerometer | Estimate sleep and wake times | On device |
| Date of birth | Entered during onboarding | Confirm you are 18 or older | Stored on device only |
| Lifestyle tags | Tags you add (e.g., alcohol, tiredness) | Compare against your own records | On device |
- We do not identify speakers or create voiceprints.
1.2 Stored in your iCloud account
Only four app preferences (posture reminder on/off, posture reminder threshold in minutes, nap threshold, what to do when storage is full) sync between your devices through iCloud key-value storage. No health data, audio, or snoring metrics are stored in iCloud. Apple keeps this in your iCloud account; we cannot read it.
1.3 Sent to our server (optional)
| Data | When | Why |
|---|---|---|
| Account ID | If you sign in with Apple or Google | Identify your account; restore on a new device |
| Salted hash of your Apple or Google user identifier | If you sign in | Recognize the same account. We do not store the raw identifier, your name or your email. |
| Consent records | If you sign in | What you agreed to, when, and under which policy version — as proof of consent and to restore your choices on another device |
| Sleep and snoring metrics | Only if you turn on "Server sync" | Sync and restore between devices. Session times, sleep periods, and snoring episodes (time, length, relative loudness). No audio. |
| Premium status, expiry, App Store transaction data | If you subscribe to Premium and are signed in | Confirm your purchase and apply your storage plan. The server verifies Apple's signature and receives Apple's renewal, expiry and refund notices |
| Detection problem reports | Only when you send one from "Detection doesn't look right?", with consent for that report | Finding and fixing detection errors: that night's record (times, sleep periods, snoring episodes), your marks, that day's app diagnostic log (no sound or speech) and, if you choose, up to 10 short recordings of the problem (1 minute each at most, speech silenced). Deleted after a year, or immediately when you delete your account. Used for training only if you also turned on "Help improve detection" |
| Audio | Only with Premium and a separate "Store recordings on server" consent | Backing up Premium recordings and restoring them on a new device: the 5-minute recording files on your device (FLAC, speech already silenced) with their times and sizes |
| Detection-improvement data | Only if you turn on "Help improve detection" | Improving Bamsori's own snoring-detection model (product improvement) using pseudonymized metrics and snore sound clips. Never speech. We have no plans to publish this data; if we ever do, we will ask for your separate consent and obtain ethics review first. |
| Server access logs | Automatically when you use the server | Security, troubleshooting, abuse prevention. Our web server logs IP address, request time and requested address, and deletes them after 14 days |
- Raw HealthKit measurements (such as heart rate) are not sent to our server. Synced sleep periods may include sleep and wake times that were refined using HealthKit data.
- Saying no to any optional consent does not affect on-device detection, recording or reports. Whether you help improve detection does not affect Premium features or price.
1.4 Marketing
We do not send marketing messages. If that ever changes, we will ask for your consent first.
1.5 When you contact us
If you email us, we receive your email address and message and use them to respond and to keep a record of the request for 3 years.
2. Health information
We treat sleep, snoring and HealthKit data as sensitive health information. During onboarding the app asks for a separate consent to process health information, and asks separately — each off by default — for server sync, audio storage on the server, and helping improve detection. The app has no feature that shows your data to other users.
HealthKit data is not used for advertising or marketing, is not sold, and is not shared with third parties. It is used only to provide the app's features to you and, if you separately agree, to improve Bamsori's snoring detection as permitted by Apple's rules.
3. How long we keep data
| Data | Retention |
|---|---|
| Audio on device (free plan) | 3 days, then deleted automatically |
| Audio on device (Premium) | No time limit within 15 GB. When storage is full, the app follows your choice (remove the oldest full-night recordings first, or stop new recordings) and notifies you first |
| After Premium ends | A 30-day grace period with reminders and export, then the free plan's retention applies |
| Metrics on device | Until you delete them or the app |
| Audio on our server (Premium) | No time limit within 15 GB. When storage is full, we follow your choice (remove the oldest full-night recordings first, keeping snoring parts, or stop uploading new recordings). After a membership ends, 30 days of grace, then the Basic policy (3 days). Deleted immediately if you withdraw the "Store recordings on server" consent or delete your account; deleting a record also deletes its recordings. Audio is not included in backups |
| Metrics on our server | While your account exists and sync consent is on. Turning off sync deletes the server copy immediately. |
| Account, consent records, subscription status | Deleted immediately when you delete your account |
| Backups | Deleted data is removed from backups within 7 days (backups are kept for 7 days and then deleted automatically) |
| Detection-improvement data | Kept while your "Help improve detection" consent stands. If you withdraw or delete your account, the training clips and comparison numbers on our server are deleted immediately. Copies downloaded to the developer's own computer (Republic of Korea) for training are deleted once training is done, and that computer's storage is encrypted. A model already trained cannot have one person's sounds taken out of it. Detection reports are deleted after one year. |
| Standby buffer | Memory only; discarded immediately if you don't fall asleep |
4. Sharing
We do not sell personal information and do not share it for cross-context behavioral advertising. We do not disclose it to third parties except where required by law. If we ever want to provide detection-improvement data to an outside research partner, we will tell you who, why, what and for how long, and ask for your separate consent first.
Service providers
| Provider | Service | Location |
|---|---|---|
| Oracle Corporation (Oracle Cloud Infrastructure) | Infrastructure for our self-operated Ubuntu server; data storage | United States (Ashburn, Virginia) |
We operate the server ourselves; the hosting provider supplies infrastructure such as the virtual server and storage, and we manage the data on it. Any provider must protect your data at least as well as this policy describes.
Google provides Google sign-in under your own agreement with Google; we receive only the identifier needed to confirm the sign-in.
Apple provides Sign in with Apple, App Store payments and refunds, StoreKit signature verification, iCloud key-value storage and HealthKit under your own agreement with Apple. We never receive your card details.
5. Where data is processed
We are based in the Republic of Korea and our server is in the United States. If you use the app from another country, data you choose to sync is transferred there.
6. Your choices and rights
- Free copy of your data: Settings > Privacy > "Get a copy of my data" gives you the data our server holds (account, consent history, synced metrics, and a note on purposes, storage location and retention) in a machine-readable format (JSON). Self-service is available once every 30 days; email us if you need another copy sooner. This is free on every tier.
- Delete: Delete individual records in the app. Settings > Account > "Delete account" deletes your account and all server data. Settings > Privacy > "Delete all data on this device" clears on-device data.
- Withdraw consent: Turn off any optional consent in Settings > Privacy at any time.
- By email: xvwqen@gmail.com. We verify the request and respond within 10 days where possible, and always within the time required by law.
- Exporting audio files from the app is available on every plan; exporting analysis (CSV, PDF reports) is a Premium feature. This does not limit your legal right to a copy of your data.
We will not treat you differently for exercising these rights.
7. Security
- On-device analysis, speech silencing and a memory-only standby buffer keep collection to a minimum
- Encryption in transit (HTTPS)
- Apple and Google user identifiers stored only as salted hashes
- The server rejects uploads without sync consent
- The API server is not exposed directly; it is reached only through an HTTPS reverse proxy, and the database accepts no outside connections
- Server administration uses SSH keys only; password and direct root logins are disabled
- Administrative functions require a separate admin credential
- Cloud storage is encrypted by the provider by default; database backups are kept on the server for 7 days, then deleted
If a breach affects your information, we will notify you and the authorities as the law requires, including by in-app message.
8. No tracking
We do not use cookies, the advertising identifier (IDFA) or third-party analytics or ad SDKs, and we do not track you across other companies' apps or websites.
9. Children
The app is only for people aged 18 or older. It is not directed to children, and we do not knowingly collect personal information from children under 13 (or under the age set by local law). If we learn that we have, we will delete it.
10. People who share your room
Other people in the room may be heard. The app silences speech before saving and shows that it is recording. Please let the people who sleep near you know that the app records sound.
11. Not a medical device
Bamsori is a wellness app for understanding your sleep habits. It is not a medical device and does not diagnose or treat any condition.
12. Additional information by region
12.1 United States
Notice at collection. The tables in section 1 list the categories we collect and why. In terms used by state privacy laws:
| Category | Collected? | Purpose | Sold or shared? | Retention |
|---|---|---|---|---|
| Identifiers (account ID, salted hash of Apple or Google user ID) | Yes, if you sign in | Account, sync, restore | No | Until account deletion |
| Sensitive personal information — health (sleep and snoring metrics) | Only with sync consent | Sync between your devices | No | Until you turn off sync or delete your account |
| Audio recordings (speech silenced) | Only with a separate consent: Premium server storage, and snore clips for improving detection | Premium backup and restore; model improvement | No | Membership audio: within plan capacity, deleted on withdrawal or account deletion; detection improvement: kept while that consent stands, deleted on withdrawal or account deletion |
| Commercial information (subscription status, App Store transactions) | Yes, if you subscribe and sign in | Provide Premium | No | Until account deletion |
| Internet activity (server logs: IP address, request time and address) | Yes, when you use the server | Security | No | 14 days |
We use sensitive personal information only to provide the service you request and for purposes you have separately consented to.
State privacy rights. Depending on your state, you may have rights to know, access, correct, delete, and obtain a portable copy of your personal information, to opt out of sale, sharing, targeted advertising and profiling (we do none of these), and to appeal our decision. To use them, see section 6 or email xvwqen@gmail.com. You may use an authorized agent. If we deny your request, you can appeal by replying to our decision; we will answer within 45 days and, if we deny the appeal, tell you how to contact your state attorney general.
Consumer health data. Residents of Washington, Nevada and other states with consumer health data laws should read our separate Consumer Health Data Privacy Policy: https://bamsori.jip-lab.com/privacy/health-data.
Auto-renewing Premium subscription. Subscription terms, renewal and cancellation are described in our Terms of Use: https://bamsori.jip-lab.com/terms/en.
12.2 Japan
See the Japanese version of this policy for information required by the Act on the Protection of Personal Information, including information on South Korea's data protection system.
12.3 South Korea
See the Korean version of this policy, which is the governing version for users in South Korea.
12.4 Other regions
The app is currently offered in South Korea, Japan, the United States, Canada and Australia. We will update this policy before offering it in the EU or UK. It is not offered in mainland China.
13. Contact
JIPLAB (sole proprietorship, Republic of Korea)
Privacy contact: Jongin Park — xvwqen@gmail.com
Postal address and phone number available on request.
14. Changes
We will post changes in the app and on this page at least 7 days before they take effect (30 days for changes that are significant or less favorable to you). If we want to use your data for a new purpose, we will ask for your consent again.