Back to home

Privacy Policy

Last updated: September 30, 2026

Consent version: 2026-05-v1

1. Introduction

Somaia ("we," "us," or "our"), operated by Somaia, respects your privacy and is committed to protecting your personal information.

2. Information We Collect

2.1 Information You Provide

  • Account: Name, email address, password
  • Quiz Responses: Constitution and wellness assessments
  • Daily Logs: Mood, digestion, sleep, stress, and notes
  • Preferences: Language and app settings

2.2 Automatically Collected Information

  • Usage Data: Pages visited and features used
  • Device Data: Browser, OS, IP address
  • Cookies: See Cookie Policy

3. How We Use Information

  • Provide personalized wellness guidance
  • Generate assessments and recommendations
  • Improve product quality and security
  • Respond to support requests

4. Data Sharing

We do not sell personal data. We may share data with trusted processors to run the Service.

  • Supabase for authentication and database storage
  • Anthropic for AI processing
  • Vercel for hosting and delivery

5. Data Security

We use industry-standard measures, including HTTPS, access controls, and secure authentication. No system is perfectly secure, but we continuously improve protections.

6. How Long We Keep Data

  • Guest answers: if you take a quiz without an account, your answers are kept on an anonymous session and deleted after 30 days without activity. If you create an account, they move into it under the same consent.
  • Your account: when you delete your account in Settings, it is permanently deleted after a 7-day grace period. You can cancel during those 7 days by signing in; after that it cannot be undone.
  • Withdrawing consent: if you withdraw consent for your wellness data in Settings → Privacy, personalised features stop at once and your quizzes, check-ins, chat and concerns are deleted after 30 days, unless you resume before then.
  • Crisis screen: if Somaia shows crisis resources, we keep a record of the type of event and when it happened, never the message itself, for 12 months.
  • Analytics: if you accept analytics cookies, Google Analytics keeps usage data for 14 months. It receives page sections and a few product events, never your answers, concerns or chat.
  • Purchases: references to purchases (order and subscription numbers) are kept for 5 years for tax and dispute records, without your name or wellness data. Stripe keeps its own payment records.
  • Backups: our database plan does not include backups, so data we delete cannot be restored from a backup.

7. Your Rights

  • Access your data
  • Correct inaccurate data
  • Delete your account and data
  • Export your data

Use our contact form or email support@somaia.app for requests.

8. Children

Somaia is for adults. You must be 18 or older to create an account. If we learn a user is under 18 we will delete the account.

*Interim wording, pending legal review.*

9. Contact

For privacy questions, reach us through our contact form or email support@somaia.app.

Third-party processors

NamePurposeRegion
SupabaseAuthentication, database, and stored account dataProject region
AnthropicAI chat and recommendation textUnited States
VoyageText embeddings for knowledge searchUnited States
ResendTransactional and reminder emailUnited States (us-east-1, North Virginia)
UpstashRate limitingUnited States (us-east-1, North Virginia)
StripePayments, receipts and subscriptionsBrazil
Vercel AnalyticsProduct usage analyticsUnited States
Google AnalyticsSite usage analytics when consent is givenUnited States