SoulMatch.ai - Privacy Policy

Effective date: June 15, 2026 · Version 1.0

Data controller: SoulMatch.ai (legal entity to be finalized) · Contact: support@mysoulmatch.ai

1. Who this applies to

Explains how SoulMatch.ai ("we", "us") collects, uses, shares, and protects your personal data when you use our website and app (the "Service"). The Service is for adults aged 18+.

2. The data we collect

You give us directly: Account data (email and password, stored only as salted hashes by our authentication provider; or, for social login, the identifier from Apple or Google). Profile and birth data (your name(s) including full/legal name, given name, family name, patronymic, and any chosen/current name; date of birth; time of birth; place of birth; gender identity - we convert your birth place into coordinates, country, and time zone to compute readings). Optional wellness data (if you enable cycle-awareness features, such as last period date and cycle length - this is health-related and optional). Your content (journal entries, dream notes, messages to other members, and conversations with the "Sophia" AI guide; and, when you use Sophia's voice input, a short audio recording of your speech that we capture solely to transcribe it into text). We generate about you: derived insights (your Soul Map, numerology, astrology, Human Design, Gene Keys and other readings, compatibility scores, and legacy match records held for existing web accounts). We collect automatically: technical and usage data (IP address, device/browser info, activity needed to operate, secure, and rate-limit the Service); cookies/local storage (essential storage to keep you signed in and remember choices like Terms acceptance). Payment data: subscriptions are processed by Stripe and Lava; we receive subscription status and limited metadata and do NOT store your full card number.

3. How and why we use your data

To create/manage your account and provide the Service; generate your readings and run Sophia (which requires sending relevant profile/birth inputs to our AI provider for processing); compute compatibility for the tools you use; process subscriptions/payments; secure the Service and prevent abuse/fraud and enforce rate limits; communicate with you (transactional and, where permitted, optional notifications you control); and comply with legal obligations.

4. Legal bases (EEA/UK users)

Performance of a contract (to provide the Service); consent (for optional features like cycle-awareness data and optional notifications, and where otherwise required - withdrawable anytime); legitimate interests (to secure and improve the Service, prevent abuse); and legal obligation. For special-category data (such as health/cycle information), we rely on your explicit consent.

5. AI processing

Readings and Sophia are generated using AI provided by our AI processor (Anthropic). Relevant profile-derived inputs are sent solely to generate your content; we instruct providers not to use your data to train their models except as permitted by our agreements. When you use Sophia's voice input, your audio recording is sent to our speech-to-text provider (ElevenLabs) solely to transcribe it into text; the audio is not retained after transcription. AI output may be inaccurate and is for self-reflection, not professional advice (see Terms).

6. Who we share data with

We do not sell your personal data. We share it only with processors that help run the Service under protective contracts: Hosting/database/auth (Supabase / Lovable Cloud); AI generation (Anthropic); Speech-to-text / voice transcription (ElevenLabs); Payments (Stripe, Lava); Geocoding of birth place ([geocoding provider]); Content delivery/edge security (Cloudflare); Social login if used (Apple, Google); Other members (only on legacy web accounts where a connection already exists; limited profile and compatibility info is shared with that member). We may disclose data if required by law or to protect users and the Service.

7. International transfers

Your data may be processed in other countries, including by the providers above; where required we use appropriate safeguards (such as Standard Contractual Clauses).

8. Retention and deletion

We keep your data while your account is active and as needed to provide the Service. You can delete your account at any time in the app; deletion removes your profile, readings, journals, dreams, Sophia conversations, settings, generation history, and any stored match or message records, including any you are part of, are removed. Limited records may be retained where required for legal, accounting, or fraud-prevention purposes, and backups cycle out on a rolling basis.

9. Cookies and local storage

We use only essential cookies/local storage needed to operate the Service (e.g., keeping you logged in and remembering Terms acceptance). We do not use third-party advertising cookies.

10. Your rights

Depending on where you live, you may have the right to access, correct, delete, object to or restrict processing, withdraw consent, and receive a portable copy of your data. Contact support@mysoulmatch.ai to exercise these rights. You may also complain to your local data-protection authority.

11. Security

We protect your data with measures including encryption in transit, access controls, row-level database security, and restricted server-side handling of sensitive fields. No safeguard is perfectly secure, but we work to protect your information.

12. Children

The Service is not intended for anyone under 18 and we do not knowingly collect minors' data. If you believe a minor has used the Service, contact us and we will delete the account.

13. Changes

We may update this Policy; for material changes we will take reasonable steps to notify you. The effective date shows when it was last updated.

14. Contact

Privacy questions or requests: support@mysoulmatch.ai