Eight Sleep, Inc.

Privacy Notice

Last Updated: December 11, 2025

This Privacy Notice describes how Eight Sleep, Inc. ("Eight Sleep", "we", "us", "our") collects, uses and discloses information about you when you use our website (https://www.eightsleep.com/) (the "Website"), mobile application (the "App"), the Pod, another Eight Sleep device, or any other services, tools and features offered by us, or when you otherwise interact with us (collectively, the "Services"). For the purposes of this Privacy Notice, "you" and "your" means you as the user of the Services.

Please read this Privacy Notice carefully. By using any of the Services, you agree to the collection, use, and disclosure of your information as described in this Privacy Notice. If you do not understand or agree to this Privacy Notice, please do not use or access the Services.

1. CHANGES TO THIS PRIVACY NOTICE

We may modify this Privacy Notice from time to time, in which case we will update the "Last Updated" date at the top of this Privacy Notice. If we make material changes to how we use or disclose information we collect, we will use reasonable efforts to notify you (such as by emailing you at the last email address you provided us, by posting notice of such changes on the Services or by other means consistent with applicable law) and will take additional steps as required by applicable law. If you do not agree to any updates to this Privacy Notice, please do not continue using or accessing the Services.

2. COLLECTION AND USE OF INFORMATION

When you use or access the Services, we collect certain categories of information about you from a variety of sources. In addition to the specific uses discussed below, we may use this information to provide and improve the Services, to conduct research and development and to maintain our business relationship, in our legitimate interests, including to enhance the safety and security of our Services, providing customer support, complying with applicable legal obligations, enforcing any applicable terms of service, and protecting our rights and the rights of our employees, users or other individuals.

Information You Provide to Us

Some features of the Services, such as creating an account, setting up your device(s), and enabling functionality of your device(s), may require you to directly provide certain information, including information about yourself. You may elect not to provide this information, but as this information is required to enable us to provide you with the Services, choosing not to provide this information may prevent you from using, or accessing features of, the Services.

Information that you directly submit through our Services includes:

• Basic contact details, such as name, address, phone number, and email. We use this information to create and maintain your account and provide the Services, as required to perform our contract with you, and because it is in our legitimate interest to communicate with you (including, with your consent where required, to tell you about certain promotions, products or services that may be of interest to you).
• Account information, such as username and password. We use this information to provide the Services, as required to perform our contract with you, and because it is in our legitimate interest to maintain and secure your account with us. If you choose to register an account, you are responsible for keeping your account credentials safe. We recommend you do not share your access details with anyone else. If you believe your account has been compromised, please contact us immediately.
• Payment and transaction information, such as credit card information and billing address, which we collect using a third-party payment processor, and information about your purchases. We use this information to process your payment and provide the Services, as required to perform our contract with you.
• Health and wellness information, such as information you choose to provide about your health and wellness when setting up your account in the App. We use this information with your consent, to the extent consent is required by applicable privacy law. If you reside in the US, please refer to the Eight Sleep Consumer Health Data Privacy Policy for more information.
• Any information you choose to input into our AI-powered tools ("Input"), which we use to generate and output new information or content ("Output") as a part of the Services, including to personalize insights, assist in our provision of customer support and otherwise provide the Services.
• Applicant details, such as information included in your resume or CV and job history. We use applicant details to process your application for employment and because it is in our legitimate interest to evaluate your candidacy.
• Any other information you choose to include in communications with us, for example, when sending a message through the Services, because it is in our legitimate interest to be responsive to you.

Information Collected Automatically

If you use the Pod or other Eight Sleep device(s), the device(s) will automatically collect a variety of metrics to provide the Services, such as to personalize your sleep statistics and sleep recommendations and to provide health statistics in the App, as required to perform our contract with you and with your consent, to the extent consent is required by applicable privacy law. If you are a US resident, please refer to the Eight Sleep Consumer Health Data Privacy Policy for more information about our processing of certain data collected through the device(s). When your device syncs with your App, data recorded on your device is transferred from your device(s) to our servers.

We and third parties may also use cookies, pixels, or other tracking technologies ("Tracking Technologies") on the Website and your App to automatically collect certain information about your interactions with the Services. This information is collected and used either with your consent (where consent is required by applicable law) to personalize the Services for you, and to target, deliver and measure interest-based advertising, or because it is in our legitimate interests to tailor your experience with the Services, provide you with offers or promotions, run analytics, better understand user interactions with the Services. Such information includes:

• Device information and online identifiers, such as device type, operating system, unique device identifier, internet protocol (IP) address, cookie ID and other online identifiers.
• Location information, such as approximate location based on IP address and, if you choose to provide it, precise geolocation.
• Other information regarding your interaction with the Services, such as browser type, log data, date and time stamps, scroll-to-page interactions, session statistics, clickstream data, purchase history and related information, ad views and impressions, and interactions with marketing emails and SMS messages.

Most browsers accept cookies automatically, but you may be able to control the way in which your devices permit the use of cookies. If you so choose, you may block or delete certain of our cookies from your browser; however, blocking or deleting cookies may cause some of the Services, including any portal features and general functionality, to work incorrectly. You may also opt-out of the collection and use of information for interest-based advertising by advertisers that are part of certain industry alliances, including through tools offered by the National Advertising Initiative, the Digital Advertising Alliance or the European Interactive Digital Advertising Alliance, by clicking the links provided.

Your browser settings may also allow you to transmit a "Do Not Track" signal when you visit various websites. Like many websites, our website is not designed to respond to "Do Not Track" signals received from browsers.

For more information on how we use cookies, please see our Cookies Policy.

Information Collected From Other Sources

We may obtain information about you from outside sources, including information that we collect directly from third parties and information from third parties that you choose to share with us. Such information includes:

• Information we receive from third-party apps and accounts, such as Apple Health and Google Health Connect, which we use with your consent and in order to perform our contract to provide the Services.
• Information we receive from consumer marketing databases or other data enrichment companies, which we use in our legitimate interests to better customize advertising and marketing to you.
• Information we receive when you choose to link any social media platforms to your account, such as Facebook or X, which we use in our legitimate interests to maintain your account and login information.

Any information we receive from outside sources will be treated in accordance with this Privacy Notice. We are not responsible for the accuracy of the information provided to us by third parties and are not responsible for any third party's policies or practices. For more information, see the section below, Third-Party Websites and Links.

Deidentified Information

Finally, we may deidentify or anonymize your information such that it cannot reasonably be used to infer information about you or otherwise be linked to you (or we may collect information that has already been deidentified/anonymized), and we may use such deidentified/anonymized information to improve our Services and better understand our users, share such deidentified/anonymized information with third parties, and for any other purpose in accordance with applicable law.

3. DISCLOSURE OF YOUR INFORMATION

We may disclose your information for legitimate purposes subject to this Privacy Notice, including the following categories of third parties:

• Our affiliates or others within our corporate group, as a matter of our legitimate interests to efficiently provide the Services.
• Vendors or other service providers who help us provide the Services, including for system administration, cloud storage, security, customer relationship management, marketing communications, web analytics, payment networks, and payment processing, in our legitimate interests to ensure the reliable and safe operation of the Services.
• Third parties to whom you request or direct us to disclose information, such as through your use of social media widgets or connecting with third party applications or integrations such as Apple Health and Google Health Connect, with your consent or to perform our contract with you.
• Professional advisors, such as auditors, law firms, or accounting firms, as a matter of our legitimate interests to assess, protect, enforce and defend our rights and to comply with our legal and regulatory obligations.
• Third parties in connection with or in anticipation of an asset sale, merger, bankruptcy, or other business transaction, as a matter of our legitimate interests to run a successful and efficient business.

We may also disclose your information as needed to comply with applicable law or any obligations thereunder or in our legitimate interests to cooperate with law enforcement, judicial orders, and regulatory inquiries, to enforce any applicable terms of service, and to ensure the safety and security of our business, employees, and users.

We do not disclose your personal information to third parties for the third parties' direct marketing purposes, unless you have affirmatively opted in to such sharing.

4. SOCIAL FEATURES

Certain features of the Services allow you to initiate interactions between the Services and third-party services or platforms, such as social networks ("Social Features"). Social Features may include features that allow you to access our pages on third-party platforms, and from there to "like" or "share" our content. Use of Social Features may allow a third party to collect and/or use your information. If you use Social Features, information you post or make accessible may be publicly displayed by the third-party service. Both we and the third party may have access to information about you and your use of both the Services and the third-party service. For more information, see the section below, Third-Party Websites and Links.

5. THIRD-PARTY WEBSITES AND LINKS

We may provide links to third-party websites or platforms. If you follow links to sites or platforms that we do not control and are not affiliated with us, you should review the applicable privacy notice, policies and other terms. We are not responsible for the privacy or security of, or information found on, these sites or platforms. Information you provide on public or semi-public venues, such as third-party social networking platforms, may also be viewable by other users of the Services and/or users of those third-party platforms without limitation as to its use. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators.

6. CHILDREN'S PRIVACY

Our Services are not intended for children, and we do not seek or knowingly collect any personal information about children. If we become aware that we have unknowingly collected information about a child, we will make commercially reasonable efforts to delete such information from our database. If you are the parent or guardian of a child who has provided us with their personal information, you may contact us using the details set out in Section 11 to request that it be deleted.

7. DATA SECURITY AND RETENTION

Despite our reasonable efforts to protect your information, no security measures are impenetrable, and we cannot guarantee "perfect security." Any information you send to us electronically, while using the Services or otherwise interacting with us, may not be secure while in transit. We recommend that you do not use unsecure channels to send us sensitive or confidential information.

We retain your information for as long as is reasonably necessary for the purposes specified in this Privacy Notice. When determining the length of time to retain your information, we consider various criteria, including whether we need the information to continue to provide you the Services, resolve a dispute, enforce our contractual agreements, prevent harm, promote safety, security and integrity, or protect ourselves, including our rights, property or products.

8. DATA TRANSFERS

The information we collect from you may be stored and processed in countries outside the country in which you live. We transfer personal information, subject to European and UK privacy laws (e.g., the GDPR), to countries outside the EEA and/or UK, such as the United States, subject to the European Commission's standard contractual clauses for the transfer of personal data to third countries; specifically, module one (controller to controller transfer) and/or module two (controller to processor transfer), as relevant, or the UK Information Commissioner's international data transfer addendum to the EU standard contractual clauses, as relevant, unless the data transfer is to a country that has been determined by the European Commission and/or the relevant UK authorities, as applicable, to provide an adequate level of protection for individuals' rights and freedoms for their personal data. Please contact us using the details set out in Section 11 should you like further information on this.

9. PRIVACY RIGHTS

Depending on where you live, you may have certain rights in relation to your personal information. However, please note that a number of these rights only apply in certain circumstances, and these rights may be limited by law.

• Access / Know: You may have the right to request access to the personal information we hold about you, and to obtain details about how we use and share your information, and with whom we share or have shared it in the past.
• Deletion / Erasure: You may have the right to request that we delete personal information we hold about you.
• Correction: You may have the right to request that we correct inaccurate personal information we hold about you.
• Portability: You may have the right to receive a copy of the personal information we hold about you and to request that we transfer it to a third party.
• Restriction of Processing: You may have the right to require us to stop, suspend or restrict our processing of personal information we hold about you, other than for storage purposes.
• Objection: You may have the right to object to our processing of your personal information.
• Opt-Out of Marketing: You may opt out of marketing, including from SMS messages, by using the unsubscribe / opt-out instructions provided in our communications to you. If you opt out, we may still send you transactional or administrative messages.
• Withdrawal of Consent: Where we rely on consent to process your personal information, you may have the right to withdraw this consent at any time.
• Right to Complain: You may have the right to complain to us and/or your local data protection authority about how we process your personal information.
• Right to Opt Out of Sale, Sharing, or Targeted Advertising: You may have a right to direct us not to "sell" or "share" your personal information (as those terms are defined in applicable laws) or process your personal information for targeted advertising. To exercise this right, please click on the "Cookie Settings" link in the cookie banner, and use the toggle switch next to "Sale of Personal Data" so that it is off (and the color is grey instead of green). For information on how we process opt-out preference signals, see the section above, Cookies and Other Tracking Technologies.

Submitting a Request

To make a request described in this Section, please email us at privacy@eightsleep.com. We will not discriminate against you for exercising any of these rights. Further information may be needed to verify your identity before exercising these rights. You may designate, in writing or through a power of attorney document, an authorized agent to make requests on your behalf to exercise your rights. Before accepting such a request from an agent, we will require that the agent provide proof you have authorized them to act on your behalf, and we may need you to verify your identity directly with us. If we deny your request, you may appeal our decision by contacting us through the methods described in Section 11. We will not require you or your authorized agent to pay a fee for the verification of your request or appeal.

10. U.S. RESIDENTS

This Section 10 applies to you if you are a resident of California or another U.S. state that has passed a privacy law similar to the California Consumer Privacy Act ("CCPA") and require specific privacy notice disclosures. For purposes of this section, references to "personal information" shall include "sensitive personal information," as these terms are defined under such laws.

Processing of Personal Information

In the preceding 12 months, we collected and (where indicated below) disclosed for a business purpose the following categories of personal information and sensitive personal information (denoted by *):

The specific business or commercial purposes for which we collect and disclose your personal information and the categories of sources from which we collect your personal information are described in the sections above, Collection of Your Information, Use of Your Information, and Disclosure of Your Information. We only use and disclose sensitive personal information for purposes specified in the CCPA or otherwise in line with your consent. The criteria we use to determine how long to retain your personal information is described in the section above, Retention of Your Information.

Selling or Sharing of Personal Information

We do not have actual knowledge that we "sell" or "share" (as those terms are defined under applicable law) personal information of individuals under 16 years of age. However, we do sell and share certain categories of personal information and, in the preceding 12 months, we have sold and shared the following categories of personal information about individuals for marketing, advertising, and analytics purposes:

11. HOW TO CONTACT US

Should you have any questions about our privacy practices or this Privacy Notice, please contact us at privacy@eightsleep.com.