Privacy & cookies.
Updated 29 September 2026. This notice covers Frank’s website, early list, enquiries and order services.
Who to contact
One Sleep Ltd, trading as Frank, is responsible for the information you share here. Contact tim@onesleep.ai to ask about your information, change your preferences, request a copy or ask for deletion. Our address is 2 Eden Mews, Kingston upon Thames, KT2 7FH, UK.
Joining the early list
We store your email, intended country of use, the page you joined from and the choices you made. We use these to send the launch update you requested. News and offers are a separate, optional choice. You can withdraw by contacting us. We retain an unfulfilled early-list request for up to twelve months and review records at launch.
Concierge enquiries
We use your email, service postcode and request to check availability and reply. Please do not include medical information or private conversation details. We do not share a postcode or the content of your request with advertising platforms.
Optional local Concierge pilot check
After confirmation, you can share the first part of the postcode where Frank will be used. We save it with your signup or order to shortlist areas for our local pilot, and prefill it in the optional survey. A delivery postcode is only a suggestion until you confirm it. Sharing an area does not enrol you or guarantee service coverage.
We email about the local pilot only if you separately opt in. You can change this choice on your confirmation page or contact us to withdraw it. It is separate from news, offers and general research testing permission. Authorised staff can view the area and contact choice even if you skip the survey. We keep these records for up to twelve months after your last update; Google Ads and Meta receive none of these answers, and consented PostHog events record only whether the check was saved or skipped.
Orders and payment
Stripe processes payment details. Frank receives the order, payment status, contact and delivery details needed to fulfil the purchase and support you. We do not store card numbers. Billing, fulfilment and verified device activation are separate records.
Buying a gift does not give the payer access to the recipient’s conversations or location. Recipient permissions must be given separately.
Optional customer research
After a signup, reservation or purchase, you can choose to share research answers about the intended user, everyday problems, useful services, broad age band, living situation, carrying preferences and barriers. Location is limited to a postcode outward code or town/city and country. Please do not include a street address, diagnoses or medical details in feedback.
We link answers to your signup or order and, where analytics is permitted, the acquisition information we already hold. Your answers are saved as you go in our protected customer research database for up to twelve months after your last update. Only authorised staff can read individual responses or contact details. You can stop, return later, or contact us to withdraw your research answers.
With your optional analytics permission, PostHog receives survey progress events and campaign context. It does not receive your feedback text, email, phone, demographic answers or precise location. Google Ads and Meta receive no survey answers. Research participation is separate from marketing permission. We contact you about early testing only if you explicitly opt in; your preferred email and optional phone are used for that purpose.
Country and currency
Cloudflare estimates your country from your internet connection so we can show relevant availability. Frank’s country detection uses no GPS, stores no raw IP address for this purpose and does not receive your exact location. VPNs and mobile networks can make the estimate wrong. You can change the country where Frank will be used and the display currency in the country selector. An explicit choice is saved in a preference cookie for six months; “Use automatic location” clears it. When cookies are blocked, the choice may last only for the current tab.
Choosing a shopping country does not change privacy permissions. U.S. launch prices are fixed in USD and do not depend on exchange rates. Other non-GBP displays are approximate conversions using European Central Bank reference data, fetched by our server without sending visitor details. If fresh rates are unavailable, we show GBP. UK checkout and receipts remain in GBP; other international launch prices are not confirmed. Joining the U.S. launch list does not take a payment.
Website measurement
Essential cookies support your cookie choices, secure checkout and staff login. Optional analytics records pseudonymous journeys and offer interactions. Advertising measurement connects permitted campaign clicks to verified purchases. Both are off until you choose them, and the site works if you refuse.
When permitted, we retain campaign identifiers, first known source, the last non-direct touch within thirty days and the first paid touch within ninety days. Order attribution is fixed at checkout. Advertising platforms may report different figures from our payment records.
We do not record sessions or send conversations, precise location, gift messages or private recipient details to analytics. Use “Privacy choices” in the footer to change your choice. We remember a cookie decision for six months. We show a short consent prompt in the UK and EEA, or when location is unknown. Elsewhere, including the US, there is no automatic prompt: optional analytics and advertising remain off unless you enable them through Privacy choices. A browser Global Privacy Control signal blocks advertising tracking, including previously permitted forwarding. Withdrawal stops future optional collection and forwarding; contact us about previously collected records.
Providers and protection
The website is hosted by ChatGPT Sites. Early-list records are stored in its managed database. The commerce setup uses Supabase for orders, Stripe for payments, Postmark for transactional email and PostHog’s EU service for consented analytics when connected. Google and Meta receive advertising signals only when configured and permitted by your choice.
Access to operational records is restricted to authorised staff. Providers may process information outside the UK or EEA under their applicable data-protection arrangements. We use information for the request or contract you initiate, essential service administration, fraud prevention and optional uses you consent to.
Your choices and rights
You can ask to access, correct, erase or restrict your information, object to relevant processing, and withdraw optional consent. Some order records may need to be retained to meet legal obligations. You can raise concerns with the UK Information Commissioner’s Office at ico.org.uk.