Privacy Policy

1. Information We Collect

When you create an account, we collect your email address and, if you sign in with Google, your Google profile information (name and profile photo). When you use the Service, we collect the content you upload (photos, documents, and text) and metadata Soma derives from that content (dates, people, locations, topics).

We also collect standard usage data such as log files, IP addresses, browser type, and pages visited, to operate and improve the Service.

2. How We Use Your Information

We use your information solely to provide and improve the Service. Specifically, your uploaded content is processed by AI services (OpenAI) to extract meaning, build your timeline, enable search, and generate biography summaries. Your email address is used to send you account-related notifications, reminders, and anniversary alerts you have opted into.

We do not sell your personal information or User Content to any third party.

3. Data Storage

Your files (photos, documents) are stored securely on Cloudflare R2 object storage. Your account data and derived metadata are stored in a PostgreSQL database hosted on Neon. All data is encrypted in transit using TLS.

4. Third-Party Services

Soma uses the following third-party services to operate:

OpenAI: Used for AI-based content extraction, embedding generation, and biography creation. Your content is sent to OpenAI's API for processing.

Google OAuth: Used for sign-in, and optionally to connect Google Drive and Google Calendar if you choose to do so.

Stripe: Used to process subscription payments. Soma does not store your payment card details.

Each of these services has its own privacy policy governing how they handle data sent to them.

5. Your Rights and Data Deletion

You may delete your account at any time from your account settings. When you delete your account, your User Content and personal data are permanently removed from Soma's systems. Some anonymized aggregate data may be retained for service improvement purposes.

You may also contact us at nfroeschl6624@gmail.com to request access to, correction of, or deletion of your data.

6. Cookies

Soma uses session cookies to keep you logged in. We also use a lightweight analytics pixel to measure aggregate traffic. We do not use third-party advertising cookies or cross-site tracking.

7. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will notify you by email and update the effective date above. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.

8. Contact

If you have questions about this Privacy Policy, please contact us at nfroeschl6624@gmail.com.

For our Terms of Service, see soma-memory.polsia.app/terms.