SoulDay, Inc. (“SoulDay,” “we,” “us”) operates the SoulDay app and the website at soulday.ai. This policy explains what we collect, why, who else touches it, and what you can do about it.
SoulDay is a place where you record how you feel. That makes almost everything in this policy information about your emotional life. We have tried to write it plainly rather than defensively.
1. The short version
- We do not sell your information. We do not share it for advertising. There are no ads in SoulDay, and nothing about you is used to target advertising anywhere, by us or by anyone else. We use one product-analytics tool to see how the app is used — which screens people reach and where they get stuck. It never receives your check-ins, your feelings, or anything SoulDay writes about you. Section 3.3.
- No one is permitted to train AI models on your content.
- Your check-ins, your history, and the writing SoulDay generates for you are sensitive information about your health, and we treat them that way in every state.
- To write your daily message and essay, we send a personal profile about you — your name, your emotional history, your city and the weather, your goal — to Google’s Gemini AI service, every day. Section 6 sets out exactly what is in it.
- Anyone you connect with as a soul-mate can see how you feel and your emotional history, for as long as you stay connected, and they will remember it afterward. Section 7.
- SoulDay is not therapy and not a medical service. No clinician reviews anything. We do not monitor for crises and we will not respond to one. If you are in danger, call or text 988, the Suicide & Crisis Lifeline, or call 911.
- You must be 18 or older. SoulDay is currently offered only in the United States.
- If you stop checking in for a long time, we may stop writing for you. Nothing is deleted, and a single check-in brings it back. Opening the app is not the same as checking in. Section 3.2.
- You can delete your account, and everything in it, at any time. Section 12.
This summary is not a substitute for the rest of the policy.
2. Who can use SoulDay
SoulDay is for adults. You must be at least 18 years old to create an account.
We ask when you were born before your account is created. We do not store your date of birth. The date is used once, to work out whether you are 18, and then discarded — we keep only whether you were eligible, when you told us, and how we established it. Where your phone can tell us your age range directly, we ask it rather than asking you.
If you are under 18, no account is created and nothing about you is stored beyond that fact.
SoulDay is currently offered only to people in the United States. We determine your country from your network connection when you sign up, and we do not store your IP address. We work this out on our own servers, using a public country database, without sending your connection details to anyone.
3. Information we collect
3.1 Information you give us
| What | How | Notes |
|---|---|---|
| Your name | You type it during onboarding | Free text. Many people enter a real first name. It is sent to our AI provider — see §6. |
| Your daily check-in | You pick one state and one feeling from fixed lists | The core of the product |
| Your growth objective | You choose from a fixed list | Predefined options only; never free text |
| Saved and pinned messages, and your “I did it” confirmations | In-app taps | |
| Trace gestures | You draw with your finger when sending a soul-mate a “Trace” | Stored as up to 100 points |
| A soul-mate’s email address | You type it when you invite someone | See §3.4 |
| Notification and language preferences | Settings |
There is no free-text journal in SoulDay, no voice or audio, no photos, and no camera access.
3.2 Information we create about you
- Your soul. A visual state derived from your check-ins.
- A daily record. While you are checking in, SoulDay keeps one entry per day, every day, including days you never open the app — on those days it carries your last state forward or lets it drift, so your timeline reflects your life rather than only the days you showed up. If you stop checking in for a long time, we may stop adding to it, rather than keep recording a feeling you never reported. Nothing already in your timeline is deleted, and a single check-in starts it up again. Opening the app is not the same as checking in — your record follows what you tell us, because your check-ins are what it is made from. See §11 and Section 14.3 of our Terms.
- Weekly and monthly summaries of that record.
- Your daily message and daily essay — writing generated by AI about your emotional state, and a count of how many times you affirmed each message.
- A log of every AI generation we ran for you, recording which model and how much text was processed. It does not store the writing itself.
3.3 Information we collect automatically
| What | When | Detail |
|---|---|---|
| Account identifiers | Sign-in | Whether you used Google or Apple, that provider’s ID for you, your email address, and whether it is verified. We never receive or store a password. |
| Session records | Sign-in | A session ID, when it was created and last used, and your device’s browser and OS identification string |
| Time zone | Every request | Sent by your device; determines when your day starts and ends |
| Language | Device setting or your choice | |
| Approximate location | When you open the app, only if you grant permission | See §8.1 |
| Calendar activity | When you open the app, only if you grant permission | Numbers only — never what your events say. See §8.2 |
| Local weather | Daily | Shared across everyone in the same ~11 km area; carries no identifier |
| Device push token | If you enable notifications | |
| Product usage events | As you move around the app | How the app is used, never how you feel. See §3.3.1 |
We do not use cookies, pixels, advertising identifiers, or any advertising technology. Our hosting providers keep ordinary server logs, which include IP addresses, for security and operations; we do not log IP addresses ourselves or connect them to your account.
3.3.1 Product analytics
We use Google Analytics for Firebase — the same Firebase project that already delivers our notifications — to understand how SoulDay is used. We use it to find where the app confuses people, which screens they leave on, and whether the things we build are reached at all. Our other product metrics are computed from our own database.
The line we draw is between how the app is used and what you felt. The second never leaves our systems.
| We collect | We never collect |
|---|---|
| Which screen or scene you opened, including how far into onboarding you got | Your state, your feeling, or anything about how you feel |
| Which tab you opened, and moving between parts of the app | Your daily message or essay, or any writing SoulDay generates |
| Whether an essay was scrolled to the end | Anything you typed, including your name |
| That a message was saved or acted on — the action, never the message | Place names, addresses, or coordinates |
| That a gesture was sent or received | Anything from your calendar |
| That a permission card was shown, granted, or dismissed | Your soul-mates’ names, or who they are |
| That an invitation was sent or accepted | Any free-text field of any kind |
| Error screens and the failure code behind them | |
| App version, platform, language, and a pseudonymous identifier |
This is structural, not a promise about our intentions. The events we send have no field capable of carrying free text, so there is nowhere to put your writing even by mistake.
None of this is used for advertising. Advertising-identifier collection, Google Signals, and ads personalisation are switched off in our configuration, and our analytics is not connected to any advertising account. Google processes these events on our behalf and is not permitted to use them for its own purposes.
Analytics events are keyed to a pseudonymous identifier rather than to your name or email address, and are deleted on the schedule in §11.
3.4 Information about people who are not SoulDay users
When you invite someone to be a soul-mate, you give us their email address, and we send them an email on your behalf containing your name and accept/decline links.
We keep that address and a record of whether the email was sent, delivered, opened, bounced, accepted, declined, or expired, so we can operate the invitation and prevent abuse. Invitations expire after 7 days, and the records are deleted after 12 months.
If you received an invitation: you can decline without creating an account, and that ends it. We do not add you to any mailing list, we do not tell the sender whether you already have a SoulDay account, and we will delete your address on request — write to privacy@soulday.ai.
You may only invite people who you reasonably believe want to hear from you. Our Terms make that your responsibility.
4. This is sensitive information, and we treat it that way
A day-by-day record of how a named person says they feel — including states like Barely surviving and feelings like Despair — is information about your health. Under California law it is “sensitive personal information.” Several other states classify it as consumer health data and give it additional protection.
We treat your check-ins, your soul, your timeline, your summaries, and the messages and essays written about you as sensitive information in all fifty states, whether or not a given state requires it.
We use sensitive information only to provide SoulDay to you — to generate your daily writing, render your soul, build your timeline, and show your state to soul-mates you have connected with. We do not use it to infer characteristics about you for any other purpose, and we do not disclose it to anyone except the service providers listed in §9 and the soul-mates you choose.
None of it is ever sent to our analytics tool. Our product analytics records that you checked in, never what you said. See §3.3.1.
Health information is the only category of sensitive personal information we collect. We do not collect precise geolocation (§8.1), biometric information, or account credentials.
5. How we use your information
- To create your account and sign you in
- To generate your daily message and daily essay, personalized to you
- To render your soul and build your emotional timeline
- To connect you with soul-mates and deliver gestures between you
- To send the notifications you have turned on
- To operate your subscription, if you buy one
- To understand how SoulDay is used, so we can find what confuses people and fix it (§3.3.1)
- To keep the service running, debug it, and protect it from abuse
- To comply with the law
We do not use your information to advertise to you, to profile you for anyone else, or to make decisions about you that produce legal or similarly significant effects.
6. AI: what we send to Google, every day
This is the most significant disclosure in this policy.
SoulDay’s daily message and essay are written by Google’s Gemini AI service. Once a day, overnight, we send Google a profile assembled from your account. It contains:
- your name, as you typed it;
- your current state and feeling, and how long since your last check-in;
- your aggregate emotional state for this week, last week, and this month;
- the text of messages you saved, and how many times you acted on each;
- the text of the last several messages and essays you were shown, so the model does not repeat itself;
- your growth objective;
- the general area you are in, the local weather, whether you are away from home and roughly how far, and the distinct areas you have been in over the last 7 days — only if you have granted location permission (§8.1);
- the shape of the day ahead — whether it is busy or open, whether that is unusual for you, whether it holds any free stretches, and the hours your commitments fall in. Never what any of them are. Only if you have granted calendar permission (§8.2);
- the language to write in.
Google returns the day’s writing. We store it and show it to you the next morning.
No human being at SoulDay or at Google reads what is written for you. There is no editorial review and no additional safety review of our own. If Google’s safety filters block a request, you simply receive nothing that day.
Our agreement with Google prohibits using your content to train or improve their AI models.
Google keeps a copy for 55 days. Google retains prompts, output, and related information for up to 55 days to detect and prevent abuse of its service, and then deletes it. This is Google’s window, not ours, and we cannot shorten or clear it. It means that for up to 55 days after you delete your SoulDay account, prompts describing how you felt may still exist in Google’s systems, even though they are gone from ours.
If we stop generating for you because you have not checked in for a long time (§3.2), we stop sending this profile as well. Nothing about you goes to Google on a day we write nothing.
7. What your soul-mates can see
You can connect with up to five people as soul-mates. Connecting is your decision, and it is a real disclosure of sensitive information to another private person.
A soul-mate can see:
- your current state and feeling, live;
- your emotional history — your timeline at day, week, and month scale;
- what you are working toward, and how long you have been at it;
- gestures you send them, including the state and feeling you were in when you sent one;
- a reflection on your connection that may name the emotional states you were in when gestures passed between you.
Before you connect, understand:
- Disclosure cannot be undone. Once a soul-mate has seen how you feel, they have seen it. We cannot retrieve it, and we have no control over what they remember, screenshot, or repeat.
- Disconnecting ends the gestures between you. The ones you already exchanged stop being reachable by either of you, and reconnecting later starts a new bond rather than restoring the old one. If you delete your account, the state you were in is removed from the gestures the other person received, and what is left of them is theirs — except that a gesture you sent which they never opened is deleted rather than emptied out.
- We do not police what a soul-mate does with what they see. Choose carefully.
You can disconnect at any time, from Settings or from their page. They immediately stop seeing your state and your history, and they receive a gentle notification that you have stepped away.
We ask your permission to share once, the first time you send an invitation and the first time you accept one. That permission then covers every soul-mate you connect with afterwards, so we do not interrupt you each time. You are always the one who chooses whom to invite and whom to accept, and disconnecting stops the sharing.
8. Location and calendar
8.1 Location
If — and only if — you grant location permission, SoulDay reads your device’s position when you open the app. It never reads your location in the background. You can decline, and you can revoke permission in your device settings at any time. The app works without it.
We never store your precise location. Your device’s reading is rounded to roughly a 2 km area the moment it reaches our servers, before anything is written down. The exact position your device reported is discarded — never saved, never logged, never sent anywhere. If you return somewhere you have been before, we reuse the area we already have rather than recording a new point.
What we keep is a list of distinct areas, not a movement trail. Each entry holds the rounded area, a place label like “San Carlos, CA, US,” and when we first and last saw you there. Entries are deleted 12 months after you stop visiting a place.
What it is for: telling the AI roughly where you are, what the weather is like, whether you are away from home, and where you have been this week, so that your daily writing knows something about your life. It is not used for advertising, it is not sold, and it is not shown to soul-mates.
To turn an area into a name, we send the rounded coordinates to OpenStreetMap’s Nominatim service, a public geocoding service, when your location changes.
8.2 Calendar
If — and only if — you grant calendar permission, SoulDay reads the shape of your days from your device calendar when you open the app. It never reads your calendar in the background. You can decline, and you can revoke permission at any time in your device settings. The app works without it. This is available only in the iPhone and Android apps.
We never read what your events say. Not the title, not the notes, not the location, not who is invited, not the meeting link. We do not read them, transmit them, or store them, and our systems have nowhere to put them.
What we keep, for each day, is a set of numbers: how many timed events it holds, how many minutes they occupy, when the first begins and the last ends, the longest gap between them, and how many all-day events there are. Nothing else. We read roughly a week either side of today, and each day is deleted 60 days after it passes.
What it is for: telling the AI whether the day ahead is unusually full or unusually open for you, so your daily writing can meet the day you are actually about to have. Because “busy” means different things to different people, the comparison is always against your own history and never anyone else’s.
If you revoke calendar permission, we delete what we have collected.
9. Who else handles your information
We use service providers to run SoulDay. They may use your information only to provide their service to us, and are contractually prohibited from using it for their own purposes.
| Provider | What they do | What reaches them |
|---|---|---|
| Supabase | Our database | Everything in §3, stored in the United States |
| Railway | Our application servers | All data in transit; application logs |
| Vercel | Our website hosting | The web app; standard request logs |
| Google (Gemini) | Generates your daily writing | The profile described in §6 |
| Google / Apple | Sign-in | Your identity from the sign-in exchange |
| Google Firebase / Apple | Delivers push notifications | Your device token and the notification text, which may include a soul-mate’s name |
| Google Firebase | Product analytics | The usage events in §3.3.1 — never your check-ins, your feelings, or your writing |
| Resend | Sends invitation emails | The invitee’s email address and your name |
| OpenStreetMap Nominatim | Turns coordinates into place names | Rounded coordinates, when your location changes |
| Open-Meteo | Weather | Coarse area coordinates only — no identifier |
| Apple / Google / RevenueCat | Subscription billing — when SoulDay+ launches; not in use today | Your purchase and subscription status. We never receive your payment card. |
We may also disclose information where the law requires it, to protect someone’s safety or rights, or in connection with a merger, financing, or sale of the business — in which case your information stays subject to this policy, or you will be told before it does not.
Some companies we rely on never receive anything about you. For example, we download a public country database published by MaxMind to our own servers each day and use it there; MaxMind receives nothing from you and nothing about you.
10. What we do not do
- We do not sell your personal information, and have not in the preceding 12 months.
- We do not share your personal information for cross-context behavioral advertising, and have not in the preceding 12 months.
- We do not show ads.
- We do not use advertising identifiers, advertising SDKs, cookies, or pixels, and our analytics is not connected to any advertising account.
- We do not send your check-ins, your timeline, or anything written about you to any analytics tool.
- We do not permit training of AI models on your content.
- We do not use your emotional data to make automated decisions about you other than choosing what your soul looks like and what your daily writing says.
Because we do not sell or share personal information, there is nothing to opt out of. If your browser sends a Global Privacy Control signal, there is nothing for it to opt you out of.
11. How long we keep things
Your emotional record is the product, so we keep it for as long as you keep your account. Nothing else is kept longer than it needs to be.
| Category | Retention |
|---|---|
| Check-ins, timeline, weekly and monthly summaries | For as long as your account is open |
| Messages and essays | For as long as your account is open |
| Account identity (name, email, provider ID) | For as long as your account is open |
| Soul-mate connections | For as long as your account is open |
| Gestures exchanged | Kept while the connection lasts. They end with a disconnection. If you delete your account, your side is removed from the ones the other person opened, and unopened ones are deleted |
| Location entries | 12 months after you last visit a place |
| Calendar activity | 60 days after the day passes |
| Invitation records | 12 months |
| Sessions | 90 days from last use |
| Server and security logs | 90 days |
| Product analytics events (§3.3.1) | 14 months |
| AI generation records (which model, how much text — never the writing) | 24 months |
| Records of the permissions you gave us | 3 years after your account closes |
| Billing and tax records | 7 years, as tax law requires — from when SoulDay+ launches |
When you delete your account, we remove your information from our live systems within 30 days, and it ages out of our encrypted backups within 90 days. Records of how much text our AI processed for you are kept for the period above but are stripped of any link to you when you delete your account, as are the records of the permissions you gave us. Product analytics events are not linked to your name or email address and age out on the schedule above. Google’s separate 55-day window is described in §6.
We keep information longer than the above only where the law requires it, or where we need it to resolve a dispute or enforce our Terms.
12. Your choices and controls
In the app you can:
- Delete my data — clears your check-ins, messages, essays, timeline, location entries, and invitations, and returns you to the default objective. Your account stays open and you start fresh, so the permissions you gave us remain in place.
- Delete account — closes your account and deletes your personal information, including your name and email, and withdraws the permissions you gave us. Gestures the other person opened stay with them, without your emotional state; ones they never opened are deleted. This cannot be undone.
- Disconnect a soul-mate, or revoke an invitation you sent
- Change or turn off notifications
- Sign out of all devices
- Change your language
On your device you can turn location, calendar, and notification permissions on or off at any time.
Cancelling a subscription is done through your Apple or Google account. Refunds are governed by Apple’s and Google’s policies, not ours.
13. Your privacy rights
Depending on where you live, you may have the right to:
- Know what we have collected about you, where it came from, why we have it, and who we have disclosed it to
- Access a copy in a portable format
- Correct it if it is wrong
- Delete it
- Opt out of sale, sharing for targeted advertising, or profiling — none of which we do
- Limit our use of sensitive personal information — see §4
- Not be discriminated against for exercising any of these rights. We will not degrade SoulDay, change your price, or close your account because you asked.
To exercise any of these rights, email privacy@soulday.ai or use the controls in Settings. We verify your identity through your registered email before acting, and respond within 45 days, or tell you why we need up to 45 more. You may use an authorized agent; we will ask for proof of their authority.
If we deny your request, you may appeal by replying to our response. We will decide within 45 days and tell you why. If we deny the appeal, we will tell you how to complain to your state attorney general.
13.1 Consumer health data
Our Consumer Health Data Privacy Policy applies to everyone using SoulDay in the United States. If you live in Washington, Nevada, or Connecticut, state law gives your emotional data specific additional protections, including the right to withdraw consent and to have that data deleted.
14. Security
We protect your information with encryption in transit, database access controls that prevent any client from reading the database directly, and server-side session management with immediate revocation. Access to production data is limited to people who need it.
No service is perfectly secure. If a breach affects your information, we will notify you and the appropriate authorities as the law requires.
15. Where your information is stored
SoulDay’s database and servers are located in the United States.
16. Children
SoulDay is not for anyone under 18. We do not knowingly collect information from minors. If you believe a minor has created an account, write to privacy@soulday.ai and we will close it.
17. Changes to this policy
If we change this policy materially — particularly if we begin collecting a new category of information, such as health-app data — we will tell you in the app before the change takes effect, and where the law requires it, we will ask for your consent. The “last updated” date at the top always reflects the current version. Every past version stays available at its own permanent address.
18. Contact
SoulDay, Inc., a Delaware corporation
privacy@soulday.ai
Appendix — California categories collected
| Statutory category | Collected | Examples |
|---|---|---|
| Identifiers | Yes | Name, email, account ID, device push token, pseudonymous analytics identifier |
| Customer records (§1798.80) | Yes | Name, email, calendar activity |
| Protected classifications | No | — |
| Commercial information | Yes | Subscription status and purchase history, when SoulDay+ launches |
| Biometric information | No | — |
| Internet or network activity | Yes | App usage and product analytics events, session records, browser and OS string |
| Geolocation data | Yes | Approximate area history at ~2 km resolution. Not precise geolocation as defined by §1798.140(w) |
| Audio, visual, olfactory | No | — |
| Employment information | No | — |
| Education information | No | — |
| Inferences | Yes | Your soul’s state; the emotional profile assembled for AI generation; how busy a day is for you, measured against your own history |
| Sensitive personal information | Yes — one category only | Information concerning your health: your check-ins, your timeline, and the writing generated about you |
Sources: you, your device, and your Google or Apple sign-in.
Purposes: §5. Recipients: §9. Sale or sharing: none.