Last updated: 22 May 2026
The short version: We collect only what we need to run Salūs. We don't sell your data. We use cookie-free Plausible analytics to understand site traffic, and optional Google Analytics / Google AdSense cookies only after consent. With your permission, the Salūs mobile apps can read your sleep data from Apple Health or Health Connect — this stays on your device and is never uploaded, sold, or shared. You can delete your account and all associated data at any time. The full policy below explains everything in detail.
Salūs Rooms, also known as Salus Rooms, ("we", "us", "our") is the data controller responsible for your personal data. Salūs Rooms is operated as a sole trader.
Data protection contact: [email protected]
We have not appointed a Data Protection Officer as we are a small organisation that does not carry out large-scale processing of special category data. The data protection contact above handles all data protection enquiries.
We collect the following categories of personal data:
The Salūs website does not access any health data. We do not collect special category data such as racial or ethnic origin, political opinions, or religious beliefs. The Salūs mobile apps, with your explicit permission, read sleep data from Apple Health or Health Connect — sleep data is special category health data, and how we access and use it is set out in full in Section 6.
Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we process your personal data on the following lawful bases:
We use your information to:
We do not sell, rent, or trade your personal data. We may display non-intrusive advertisements via Google AdSense to help fund the project (see Section 5). Google may use cookies to serve ads based on your prior visits to this or other websites. You can opt out of personalised advertising at Google Ad Settings. We never use health data for advertising (see Section 6).
We use the following third-party services to operate Salūs. Each processes data in accordance with their own privacy policies:
_ga, _ga_*) to distinguish unique users and sessions. Data is processed in accordance with Google's privacy policy. You can opt out using the Google Analytics Opt-out Browser Add-on.Health (sleep) data accessed by our mobile apps is not shared with any of the third-party services listed above, or with any other third party. See Section 6.
This section applies only to the Salūs mobile apps for iOS and Android. The Salūs website does not access, collect, or process any health data.
What we access. With your explicit permission, the Salūs app reads sleep data — the sleep periods and sleep stages recorded by your device. On iPhone and iPad this data comes from Apple Health (HealthKit); on Android it comes from Health Connect. This sleep data is recorded by your phone, smartwatch, or a connected sleep tracker — Salūs does not measure or generate it. This is the only category of health data the app accesses. We do not access steps, heart rate, workouts, mindful minutes, or any other health or fitness data type.
Read-only. Salūs only reads sleep data. The app never writes, edits, or deletes any data in Apple Health or Health Connect.
How we use it. Sleep samples are used solely to display your recent nights and sleep trends within the app, so you can see your own sleep over time. We do not use health data for advertising, marketing, profiling, or any form of automated decision-making.
Where it goes. Health data is processed on your device only. It is not uploaded to Salūs servers, not stored in our database, not sold, and not shared with any third party. It does not leave your phone.
Your consent and control. The app accesses sleep data only after you grant permission through your operating system's health permission screen. You can review or withdraw this permission at any time in Apple Health → Sharing → Apps (iOS) or Health Connect → App permissions (Android). Withdrawing permission stops Salūs reading sleep data immediately and does not affect any other part of the app. You can also decline the permission entirely when first asked — the rest of the app works normally without it.
Lawful basis. Sleep data is special category data under UK GDPR. We process it on the basis of your explicit consent (Article 9(2)(a)), given through your device's health permission screen, alongside our contractual basis under Article 6(1)(b). Because health data never reaches our servers, the rights in Section 11 that depend on data held by us (such as access, rectification, and portability) do not apply to it — the data remains under your control in Apple Health or Health Connect at all times.
Several of our third-party service providers are based in the United States. Where your data is transferred outside the UK, we rely on the following safeguards in accordance with UK GDPR:
Health (sleep) data is not transferred internationally because it is processed only on your device and never sent to Salūs servers.
Plausible Analytics is cookie-free. We use cookies set by Google Analytics and Google AdSense only after consent (see Section 5). We also use your browser's local storage and session storage for the following purposes:
salus_vid) — an anonymous UUID that persists across sessions to help us understand return visits. Contains no personal information.salus_sid) — identifies the current browsing session. Deleted when you close the tab or browser.salus_notrack) — if you opt out of analytics, this flag is stored to remember your preference.Third-party services (Cloudflare, PayPal, Apple, Google Play) may set their own cookies or use their own identifiers when you interact with their services. These are governed by their respective privacy policies listed in Section 5.
You can clear all Salūs local storage data at any time via your browser settings. You can also opt out of all analytics by visiting any page on our site with ?salus_notrack appended to the URL (e.g. salus-rooms.com/?salus_notrack).
Your data is stored securely using industry-standard encryption in transit (TLS) and at rest. We use secure servers and follow best practices to protect your personal information from unauthorised access, alteration, or destruction. Access to personal data is limited to those who need it to operate the service. In the event of a personal data breach, we will notify the Information Commissioner's Office within 72 hours where required by law, and will notify affected individuals without undue delay where the breach is likely to result in a high risk to their rights and freedoms.
We retain your personal data only for as long as necessary:
Under the UK GDPR, you have the following rights:
To exercise any of these rights, contact us at [email protected]. We will respond within one month. If your request is complex or we receive a large number of requests, we may extend this period by a further two months, in which case we will inform you within the first month. Where requests are manifestly unfounded or excessive, particularly due to their repetitive character, we may charge a reasonable fee or refuse to act on the request, in accordance with UK GDPR Article 12(5).
To reset your anonymous visitor identity, clear your browser's local storage for salus-rooms.com, or use the opt-out method described in Section 8.
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint or call 0303 123 1113.
Salūs is not directed at children under 13. Under the Data Protection Act 2018, the age of consent for data processing in the UK is 13. We do not knowingly collect personal data from children under 13. If you believe we have inadvertently collected data from a child under 13, please contact us at [email protected] and we will delete it promptly.
We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on you.
Some of our audio content uses AI narration technology. All scripts are written and reviewed by our team. No personal data is used in generating this content.
We may update this privacy policy from time to time. For significant changes that affect how we process your personal data, we will notify you via email (if you have an account) or by displaying a prominent notice on the website, with reasonable advance notice before the changes take effect. The "last updated" date at the top of this page indicates when the policy was last revised.
If you have any questions about this privacy policy or how we handle your data, please email [email protected] or get in touch via our contact page.