sheeps
Get the app
Privacy
Last updated · 6 September 2026
The short version
Sheeps has no accounts and asks for no email address. Your phone generates a random identifier the first time you open the app, and that is who you are to us. Everything else we hold is either something you chose — your comfort themes, your avoid list, your voice — or something that was made from it: your stories, their audio, their cover art.
There is no advertising in Sheeps, no analytics SDK, and no third-party tracker. Nothing about you is sold, rented or shared for marketing, and nothing about you is used to train anybody’s model. This website sets no cookies and loads nothing from another domain — the fonts are served from here.
Who is responsible
The controller within the meaning of Art. 4(7) GDPR is the operator named in the Imprint. Questions about your data, and any request to exercise the rights below, go to the address given there.
What we store
- Who your phone is
- A random device identifier generated on first launch, and a hash of a secret held on the device. No name, no email address, no phone number, no advertising identifier. If you write to support and give us an email address, we hold it for that conversation and nothing else.
- Your ingredients
- Comfort themes, avoid-list terms, chosen voice, weirdness level, story length, story language, your usual bedtime and your time zone.
- What was made from them
- Story titles, the text of each scene, the generated audio, the cover image, and how long the finished story runs.
- How the night went
- When a playback session started, when you last touched the screen, when it stopped, and an estimate — derived from those three — of how long it took you to drift off. It is an estimate about a session, not a measurement of you: Sheeps reads no sensors and no health data.
- Purchases and credits
- Whether a subscription is active, your credit balance, and an append-only ledger of every credit that was granted or spent. Apple is the merchant for every purchase; we never see your card, your Apple Account or your billing address.
A word about the avoid list. It is the one field where you might type something revealing — a phobia, an illness, a place you do not want to be reminded of. It exists for exactly one purpose: to keep those words and their synonyms out of your stories. It is never used to profile you, never shared, and you can clear it at any time under Ingredients. To the extent an entry says something about your health, you are providing it voluntarily and explicitly for that purpose (Art. 9(2)(a) GDPR), and withdrawing it is a matter of deleting the term.
Why we are allowed to
- Art. 6(1)(b) GDPR — performing the contract. Generating a story, rendering its audio, delivering it to your phone, and keeping your credit balance honest all require the data above.
- Art. 6(1)(f) GDPR — legitimate interests, namely keeping the service running and unabused: rate limiting, fraud prevention on purchases, and error logs that are kept short.
- Art. 9(2)(a) GDPR — your explicit consent, for any avoid-list term that reveals something about your health.
Who else touches it
Writing a story means sending your ingredients to a language model, and turning it into a voice means sending the resulting text to a speech provider. Each of the following acts as a processor under Art. 28 GDPR, under a written agreement, and only on our instructions.
| Processor | What it does | Where |
|---|---|---|
| Railway Corp. | Application hosting and the PostgreSQL database | USA |
| Amazon Web Services (S3) | Storage of generated audio and cover images | EU / USA |
| Anthropic PBC | Generating the text of a story from your ingredients | USA |
| Fish Audio · ElevenLabs | Turning that text into a narrated voice | USA |
| fal.ai | Generating the cover image for a story | USA |
| RevenueCat, Inc. | Subscription and credit entitlement state | USA |
| Apple Inc. | App distribution and all payment processing | Ireland / USA |
| Vercel Inc. | Hosting of this website | USA |
Nothing that identifies you personally is sent to a model provider — a generation request carries your ingredients and the story so far, not your device identifier. Where a processor sits outside the EU, the transfer rests on the European Commission’s Standard Contractual Clauses (Art. 46(2)(c) GDPR).
How long it stays
Your stories and their audio stay until you delete them or until you ask us to delete everything. Playback sessions are kept for twelve months and then removed. The credit ledger is kept for as long as it is needed to settle a billing dispute and for as long as tax law requires us to keep records of a purchase. When you ask for erasure, everything tied to your device identifier goes with it, and the ledger rows that must survive are stripped of anything that points back to you.
What you can ask for
Under Art. 15–21 GDPR you may ask for a copy of your data, have it corrected, have it deleted, have its processing restricted, receive it in a portable form, and object to processing based on legitimate interests. Where processing rests on consent, you can withdraw it at any time without affecting what was lawful before.
Because there is no account, the quickest route is inside the app: Settings → Delete everything removes your device record and all of it. Otherwise write to us with the device identifier shown under Settings → About — without it we have no way to find you, which is the same property that keeps you anonymous.
You may also complain to a supervisory authority (Art. 77 GDPR), in the EU member state where you live or work.
This website
No cookies, no local storage, no analytics, no embedded video from anywhere else, and no fonts from a third-party CDN. Our host, Vercel, records the usual server access data — IP address, time, requested path, user agent — to serve the page and defend against abuse (Art. 6(1)(f) GDPR). Those logs are short-lived and are not joined to anything from the app.
Children
Sheeps is not directed at children and is not designed for them. We do not knowingly hold data from anyone under sixteen. If you believe a child has used the app, write to us and we will delete the device record.
Changes
If this notice changes in a way that matters, the date at the top changes with it and the app tells you the next time you open it. Older versions are in the repository’s history.