WhileSleeping.ai

Privacy Policy

In plain language: what we collect, why we collect it, and how to make us delete it.

Last updated: 8 June 2026

What we collect

• Your email address. Used to send you the digest. That's it.
• Your topic. The free-text answer to "what do you want to stay on top of?"
• What you told us about yourself. The optional "tell us about yourself" field. We use this to personalize the tone and angle of your digest. Heads up: this is a free-text box, so you might choose to tell us things that count as sensitive — health conditions, religion, sexual orientation, political views. We don't ask for any of that, but if you write it down, you're consenting (by checking the box at signup) for us to use it to personalize your digest.
• Your country and timezone. We resolve this once at signup from your IP address, then immediately discard the raw IP. We keep only "country: IL" and "timezone: Asia/Jerusalem" (or whatever yours is). We use timezone to send the digest at the right local hour and country to surface locally relevant stories.
• Countries you mention. If your "about you" text says you live in Tel Aviv or follow Brazilian politics, we extract those country codes so the digest can include locally relevant angles.
• How you interact with the digest. Whether each email was delivered, opened, bounced, or marked as spam — reported back to us by our email provider. We use this to monitor deliverability and stop sending to addresses that hard-bounce.
• Your subscription preferences. Cadence (daily or weekly), which day of the week, whether the subscription is active.

What we don't collect

• No password — you sign in by replying to an email.
• No tracking cookies, no analytics scripts, no third-party tags on the site.
• No payment information (no paid tier yet).
• No raw IP address — resolved to country/timezone at signup and thrown away.

Who we share it with

We're a small operation. We use a few essential service providers to deliver the product. Each one only sees the slice they need:

• Resend — delivers the email. Sees your email address and the digest content.
• Anthropic — runs the AI that writes the digest. Receives your topic and your "about you" text as part of the prompt that generates your personalized digest. Anthropic's terms prohibit training on this data.
• Railway — runs the backend servers. Holds the database where your subscription lives.
• Cloudflare — serves this website and routes inbound email replies.
• ip-api.com — receives your IP at signup, returns country and timezone. We don't store anything they return except the resolved country and timezone.

We don't sell your data. We don't share it with advertisers. We don't have advertisers.

How long we keep it

• Your account and subscription: until you ask us to delete it.
• Digests we sent you: kept indefinitely as your archive — they're in your inbox anyway.
• Raw articles we scraped to write digests: 14 days, then deleted.
• Per-topic cached summaries (shared across subscribers on the same topic): roughly a day, then re-fetched.

Your rights

You can ask us to do any of these things by replying to any digest, or by emailing privacy@whilesleeping.ai:

• Pause — reply PAUSE. Stops the digests; your account stays.
• Resume — reply RESUME.
• Change cadence — reply DAILY or WEEKLY.
• Change topic — reply CHANGE: [new topic].
• Unsubscribe — reply STOP, or use the unsubscribe link in any digest footer. Deactivates the subscription; row stays in the database.
• Delete everything — email us. We will permanently delete your user record, every subscription, and every digest we sent you, and we'll confirm by email when it's done. Usually within a day. (We're working on a STOP DELETE reply command that does this automatically.)
• See your data — email us and we'll send you a JSON dump of everything we have on you.

Legal basis (for the EU/UK readers)

We process your email, topic, and subscription preferences under Article 6(1)(b) — performing the contract you signed up for (which is: we send you the digest you asked for).

We process your "about you" text — including anything sensitive you choose to put in it — under Article 9(2)(a), explicit consent. The checkbox at signup is that consent. You can withdraw it at any time by emailing us and asking us to delete the text or your account.

Children

The service is not intended for children under 16. If you're under 16, please don't sign up.

Changes

If we change this policy in a meaningful way, we'll email everyone subscribed before the change took effect, with the new policy and a summary of what changed. Cosmetic changes (typos, restructuring) won't trigger a notification.

Contact

The person responsible for your data is Lior Avidar, operator of WhileSleeping.ai. Reach me at privacy@whilesleeping.ai.