Privacy Policy

Last Updated: April 2025

At RespireLabs, we respect and protect the privacy of our users. This Privacy Policy explains how we collect and use your personal information and data. Our website address is: https://www.respirelabs.com.

1. Types of data we collect

At RespireLabs, we collect different types of personal and non-personal data depending on how you interact with us. We only collect data that is necessary for the purpose. The purpose is communicated always when you are asked to share your data. Below is a breakdown of types of data we collect by form or interaction:

• Newsletter sign-up form
• Test user registration form
• Surveys and questionnaires
• Participation in breathing sounds collection
• Interaction via website

1.1 Newsletter sign-up

Purpose: To send you once a month an e-mail message with updates, news, and information related to RespireLabs, an invitation for an online live breathing session, and invitation for participation in community challenge related to building healthy habits.
Data collected: first name, email address and information about whether you practice mouth taping or not.
Legal basis: Consent under Art. 6(1)(a) GDPR.

1.2 Test user registration form

Purpose: to contact you regarding your participation in product testing, interviews, and surveys. Surveys are explicitly mentioned below as one of type of interaction because they will be used to collect some other information and some of the surveys are targeted to general audience.
Data collected: email address
Legal basis: Consent under Art. 6(1)(a) GDPR.

1.3 Surveys

Purpose: there might be different purpose behind each survey, which will be always clearly communicated during the interaction between you and RespireLabs. Here are the example of purposes:

to validate our product ideas
to collect feedback and improve our technology
to group the users
to learn who are you, who is interested in our efforts, ideas and products

Data collected: personal data like age and gender, sleep and breathing related information e.g. sleep quality, habits, struggles. We may ask you to share sensitive health information e.g. if you were diagnosed with sleep apnea or do you often have congested nose – in this case we will always ask you for explicit consent and we will clearly communicate the purpose of collecting this information.
Legal basis: explicit consent under Art. 9(2)(a) GDPR.

1.4 Breathing sounds data collection

Purpose: the audio recordings wll be used anonymously to research the topic of acoustic algorithms and to advance our understanding on how they can be used for detection of dysfunctional breathing patters. The data will be used for machine algorithm training, validation and testing. Furthemore, the algorithm may be used in our test products. Additionally you will be asked for explicit consent to let us use the recordings for development of commercial products.
Data collected: audio recordings of your breathing, associated metadata (e.g., date, context, notes), health related information (where relevant)
Legal basis: explicit consent under Art. 9(2)(a) GDPR

1.5 Mouth breathing face features data collection

Purpose: the facial images will be used anonymously to research the possibility of detecting the face features that correspond to mouth breathing. The data will be used for machine algorithm training, validation and testing. Furthemore, the algorithm may be used in our test products. Additionally you will be asked for explicit consent to let us use the recordings for development of commercial products.
Data collected: facial images, associated meta-data e.g., date, context, notes, subjective answer to the question how often the user breathe through the mouth
Legal basis: explicit consent under Art. 9(2)(a) GDPR

1.6 Website usage data

Purpose: to improve user experience and understand visitor behavior. We use Google Analytics to track the traffic on our website. This information helps us improve our services.
Data collected: IP addresses, device and browser type, pages visited and interaction behavior like clicks.
Legal basis: legitimate interest under Art. 6(1)(f) GDPR

2. Intended use

RespireLabs collects and processes personal and health-related data for the purpose of product research, development, and validation. Our efforts, tools and analysis aim to support better breathing and sleep awareness, promote healthy breathing and improve daily habits of our users. At this stage, our services are not intended for medical diagnosis or treatment and do not qualify as certified medical devices under current regulations.

The purposes for which we collect and process your data are described under each form and interaction in Chapter 1: Types of data we collect. We never use your data for purposes other than those explicitly stated and agreed upon. In summary, we use your data to:

Communicate with you via email e.g. monthly community updates
Conduct user research and gather feedback e.g. surveys, interviews
Develop and improve our products e.g. analyzing breathing sound recordings
Improve our website and user experience e.g. via analytics

3. Legal basis for processing

We process your personal data in accordance with the General Data Protection Regulation (GDPR). The specific legal basis depends on how you interact with us and what kind of data is involved.

When you sign up for our community list (newsletter) or register as a test user, we rely on your consent under Article 6(1)(a) of the GDPR. You give this consent by actively opting in — for example, by checking a box or submitting a form.

For surveys that include health-related questions, and for participation in breathing sound recordings or facial image collection, we rely on explicit consent under Article 9(2)(a) of the GDPR. This is because such data may be considered health or biometric data, which requires a higher level of protection.

When we use website analytics tools, such as Google Analytics, we may process certain usage data based on our legitimate interest in understanding how our website is used and improving the user experience. This is in line with Article 6(1)(f) of the GDPR. We ensure that this data is anonymized where possible and that no unnecessary personal data is collected.

We never process your personal or sensitive data without a clear legal basis and only for the purposes described in this policy.

4. Sharing of data

We DO NOT sell, trade, or otherwise transfer your personal information to third parties. This does not include trusted third parties who assist us in operating our website, conducting our business, or serving our users, so long as those parties agree to keep this information confidential – they are referred here as Trusted Service Providers. These parties would only receive the minimum data necessary for their function and must comply with GDPR or equivalent data protection standards. Trusted Service Providers whose services and tools we use:

MailerLite – for email delivery and mailing list management
Typeform, Google Forms – for conducting online surveys tools
Google Analytics – data analytics (e.g., )
Research collaboration (e.g., academic or medical institutions)

5. Data protection

We apply technical and organizational measures to keep your information secure.

We use SSL encryption for secure data transmission through our website.
Access to collected data is restricted to authorized team members or collaborators who need it for specific tasks.
We use secure storage solutions for all digital files, including backups.• We ensure any third-party services we work with comply with GDPR-level data protection standards.

While we do our best to safeguard your information, no method of transmission or storage is 100% secure. We cannot fully guarantee the absolute security of data shared with us via the internet or email.

6. Cookies

We use cookies to improve your experience and understand how our website is used. Cookies may collect non-personal usage data such as IP address, browser type, and visit duration. For more details and to manage your preferences, please see our Cookies Policy.

7. Third-party links

Our website may include links to third-party websites, services, or embedded content (such as YouTube videos, surveys, or social media). Please note:

These third-party websites have separate and independent privacy policies, which we do not control.
We encourage you to read their policies before interacting with their content or submitting any personal data.
We are not responsible for the content, practices, or privacy standards of third-party sites.

Examples of third-party content we may embed or link to:

YouTube videos (interviews, product demos)
Survey platforms (e.g., Google Forms, Typeform)
Social media posts or profiles
External articles or research

8. Embedded content from other websites

Articles or pages on our website may include embedded content, such as:

YouTube videos
Typeform forms
Social media posts

Embedded content from other websites behaves the same way as if you visited the other website directly.

This means that these third-party websites may collect data about you, such as:

Your IP address
Your interaction with the embedded content
Whether you’re logged into their platform
Technical data like browser or device type

These third-party platforms may also use cookies or additional tracking. We recommend checking their privacy policies to understand how they handle your data.

We embed content only to enhance your experience and provide helpful or informative materials. However, you always have the option to disable third-party content in your browser or cookie preferences.

9. Your rights

You have the following rights regarding your personal data:
Right to access your data: you can request confirmation of whether we process your personal data and receive a copy of that data.
Right to rectification: if your data is incorrect or incomplete, you can ask us to correct or complete it.
Right to erase: so called “Right to Be Forgotten”. You can ask us to delete your personal data, especially if:

It’s no longer needed for the purpose we collected it,
You withdraw your consent,
Or we processed it unlawfully.

Right to restriction of processing: you can request a temporary halt to processing your data (e.g., while correcting it or resolving an objection).
Right to data portability: you can request to receive your data in a machine-readable format and transfer it to another provider.
Right to object: you can object to our use of your data for direct marketing or if the processing is based on our “legitimate interests.”
Right to withdraw consent: if you have given us consent to process your data, you can withdraw it at any time. This will not affect the lawfulness of processing done before the withdrawal.

How to exercise your rights?

To make any of the above requests, just contact us via e-mail. We may need to verify your identity before fulfilling your request.

10. Data Retention

We keep your personal data only for as long as it is necessary to fulfill the purposes for which it was collected. This includes meeting legal, contractual, or research obligations, as well as ensuring the security and integrity of our systems.

Newsletter: if you sign up for our newsletter, we retain your contact information until you unsubscribe or ask us to delete it. For test user registration and communication, we store your email address for as long as we are actively inviting participants or conducting feedback activities — or until you withdraw your consent.

Survey responses, including health-related answers, are kept for a limited period — typically up to two years — to support product research and development. We may retain this data longer only if you have explicitly agreed to extended use, or if the data is anonymized for aggregate analysis.

Breathing sound recordings and facial images are also stored for a limited time — up to 5 years — unless a longer retention period has been clearly stated and explicitly accepted by you. These files are used strictly for algorithm development and are deleted as soon as they are no longer needed.

Basic website usage data collected through tools like Google Analytics is stored for up to 14 months and is anonymized to prevent identification.

We regularly review our data holdings and delete or anonymize data that is no longer necessary. If you exercise your right to erasure (see Chapter 9), we will remove your data unless we are legally required or allowed to retain it for a longer period.

11. Automated processing and profiling

Some of the data you provide may be processed using automated systems — for example, when we use algorithms to analyze breathing patterns or facial features.

11.1 What does it mean

Automated processing refers to data being handled by software or algorithms without human involvement in every step.
Profiling involves analyzing aspects of your behavior or physiology to draw conclusions — such as tracking mouth breathing during sleep.

11.2 Why do we do this

To develop and test our AI models for breathing analysis
To improve our understanding of sleep-related breathing issues
To validate our product’s ability to detect health-relevant patterns (in a research setting)

11.3 No automated decisions with legal effect

We do not use automated decision-making that produces legal effects or similarly significant impacts on you (as defined under GDPR Article 22).

In other words:

Our tools may analyze breathing sounds or facial features,
But no automated decisions are made about your health, eligibility, or treatment with or without human oversight.

12. Contact and Complaints

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, feel free to contact us directly. We aim to respond as quickly as possible and will do our best to address your request within the timeframes required by applicable law (usually within 30 days).