Privacy Policy

We use information to provide and personalize check-ins, calibrate the gesture experience to your baseline, maintain your account and Journey, deliver statements and results between your phone and approved agents, operate optional context and voice features, secure and troubleshoot the service, understand feature performance, and respond to support requests.

SomaCheck does not sell personal information, use it for third-party advertising, or track you across other companies' apps or websites.

The current in-app baseline proposition generator sends OpenAI only a fixed, context-free instruction asking for a general first-person statement. It does not send your account information, photo summaries, linked-agent context, check-in history, or other private context to OpenAI. SomaCheck configures that API request with store: false; OpenAI's own service logs and retention practices remain governed by its terms. A generated statement and a bounded usage receipt are stored with your SomaCheck account.

When you approve an AI-agent connection, that agent can send bounded statements, share bounded context only after you enable context for that connection, and receive results for its requests. The connected agent and its provider handle information they receive under their own terms and privacy practices.

We use service providers to run SomaCheck. Current providers include Supabase for hosting, authentication, database, and server functions; Mixpanel for product analytics; Sentry for crash and performance diagnostics; ElevenLabs for optional live voice sessions; OpenAI for the context-free baseline proposition described above; and Apple for push-notification delivery and App Store services. These providers process information to perform services for SomaCheck under their terms and our configuration.

We may also disclose information when required by law, to protect users or the service, or as part of a business transaction with appropriate safeguards.

We retain information while needed to provide the service, meet security and legal obligations, resolve disputes, and enforce agreements. Context capsules have an active-use expiration, generally no more than seven days; expiration prevents active use but is not the same as immediate erasure. You can revoke a source and delete its derived data in Connect Context.

You can delete your SomaCheck account in Profile → Delete Account. When the request succeeds, SomaCheck deletes the authentication account and directly user-owned app records, then removes that account's local scoped data. Processor security logs, analytics events, voice-conversation records, and backup copies may follow separate limited retention and deletion schedules. Contact us from the account email if you want us to coordinate an access or deletion request with our processors. We do not claim that disconnecting an agent or deleting an account retroactively deletes information already received by an independent connected-agent provider.