Privacy Policy
Last updated: September 30, 2026
Consent version: 2026-05-v1
1. Introduction
Somaia ("we," "us," or "our"), operated by Somaia, respects your privacy and is committed to protecting your personal information.
2. Information We Collect
2.1 Information You Provide
- Account: Name, email address, password
- Quiz Responses: Constitution and wellness assessments
- Daily Logs: Mood, digestion, sleep, stress, and notes
- Preferences: Language and app settings
2.2 Automatically Collected Information
- Usage Data: Pages visited and features used
- Device Data: Browser, OS, IP address
- Cookies: See Cookie Policy
3. How We Use Information
- Provide personalized wellness guidance
- Generate assessments and recommendations
- Improve product quality and security
- Respond to support requests
4. Data Sharing
We do not sell personal data. We may share data with trusted processors to run the Service.
- Supabase for authentication and database storage
- Anthropic for AI processing
- Vercel for hosting and delivery
5. Data Security
We use industry-standard measures, including HTTPS, access controls, and secure authentication. No system is perfectly secure, but we continuously improve protections.
6. How Long We Keep Data
- Guest answers: if you take a quiz without an account, your answers are kept on an anonymous session and deleted after 30 days without activity. If you create an account, they move into it under the same consent.
- Your account: when you delete your account in Settings, it is permanently deleted after a 7-day grace period. You can cancel during those 7 days by signing in; after that it cannot be undone.
- Withdrawing consent: if you withdraw consent for your wellness data in Settings → Privacy, personalised features stop at once and your quizzes, check-ins, chat and concerns are deleted after 30 days, unless you resume before then.
- Crisis screen: if Somaia shows crisis resources, we keep a record of the type of event and when it happened, never the message itself, for 12 months.
- Analytics: if you accept analytics cookies, Google Analytics keeps usage data for 14 months. It receives page sections and a few product events, never your answers, concerns or chat.
- Purchases: references to purchases (order and subscription numbers) are kept for 5 years for tax and dispute records, without your name or wellness data. Stripe keeps its own payment records.
- Backups: our database plan does not include backups, so data we delete cannot be restored from a backup.
7. Your Rights
- Access your data
- Correct inaccurate data
- Delete your account and data
- Export your data
Use our contact form or email support@somaia.app for requests.
8. Children
Somaia is for adults. You must be 18 or older to create an account. If we learn a user is under 18 we will delete the account.
*Interim wording, pending legal review.*
9. Contact
For privacy questions, reach us through our contact form or email support@somaia.app.
Third-party processors
| Name | Purpose | Region |
|---|---|---|
| Supabase | Authentication, database, and stored account data | Project region |
| Anthropic | AI chat and recommendation text | United States |
| Voyage | Text embeddings for knowledge search | United States |
| Resend | Transactional and reminder email | United States (us-east-1, North Virginia) |
| Upstash | Rate limiting | United States (us-east-1, North Virginia) |
| Stripe | Payments, receipts and subscriptions | Brazil |
| Vercel Analytics | Product usage analytics | United States |
| Google Analytics | Site usage analytics when consent is given | United States |