Health permissions are optional
Oura Ring, Apple Health and Android Health Connect access is used only after the user gives permission. SomnoRoute reads only the categories shown in the platform permission screen, such as sleep, heart rate, heart-rate variability, respiratory rate, oxygen saturation and weight, to add context to the user's report. Health data is not required for overnight microphone monitoring, is not sold or used for advertising, and is not written back to Apple Health or Health Connect.
Microphone and overnight monitoring
SomnoRoute asks for microphone permission to analyse overnight sound on the device and create snoring and environmental-sound metrics. Audio clips are retained only when the user enables clip recording. Starting monitoring records the user's prominent consent; monitoring can be stopped at any time. Data is sent to a linked SomnoRoute account or clinic only when the user enables the relevant sync or sharing feature.
Storage, security and control
Account credentials are protected using the device security storage provided by Apple or Android. Data sent to SomnoRoute services is encrypted in transit. Users can revoke microphone and connected-health permissions in device settings, disconnect optional sources, and request deletion from inside the app or through the public deletion page.
Account deletion
Signed-in users can request deletion from the app under Account, privacy & data. Users who cannot sign in can use the public account-deletion request page. Consumer data is deleted or de-identified where legally permitted; clinical, legal, security and consent records may be retained only for the applicable required period.
Reports should stay conservative
SomnoRoute can describe patterns, comparisons, and trends. It should not say that a pattern proves a condition, confirms a diagnosis, or explains a medical cause with certainty.
Support requests should avoid sensitive detail
When users contact support, the first message should focus on the device type, app version, and the issue itself. They should not be asked to send medical details in a public support or deletion email.
Public website analytics
Optional Google Analytics, Plausible and Microsoft Clarity analytics stay off unless a visitor accepts them. They are limited to public marketing pages. Form answers, free text, full URLs and inferred health interests are not sent as analytics events, and analytics is disabled on admin, user, patient, clinical, form and report routes. A visitor may reject optional analytics without losing access to the site.
When analytics is accepted, SomnoRoute also stores an anonymous signup-funnel event when a tester form is viewed, first interacted with, submitted, succeeds in the browser or returns an error. The record contains only the event type, an allowed site path, the form variant, the tracked route market from the page URL, and allow-listed campaign and content codes. It does not contain a name, email address, form answers, IP address, user agent, or a session or person identifier. These event records expire after 90 days. Confirmed signup records are stored separately under the consent described in the form.
On public video pages, accepted analytics can record whether a video was shown, started, paused or completed, plus the number of seconds and percentage watched. Video engagement is used to improve public education and the tester journey, not to infer a diagnosis or build a health profile.
Clinical privacy information
Where SomnoRoute information is deliberately shared into The Virtual Sleep Clinic pathway, McAnrua Diagnostics Limited is registered with the Information Commissioner's Office under reference ZC125216. Clinical records remain subject to the clinic privacy notice and clinical retention requirements; deleting a consumer app account does not automatically erase a clinical record that must lawfully be retained.
Do not enter medical details into public forms
The public early-access form is for launch interest only. Visitors should not submit symptoms, diagnoses, report contents, or other sensitive health information through public marketing forms.
