SoulField Privacy Policy

1. A Note on Sensitive Information

SoulField is designed for personal reflection, so the text you write may be emotionally sensitive. It may describe your feelings, relationships, fears, and inner life. We treat this content with care and describe below exactly how it is used. Please share only what you are comfortable sharing. The Reflect journal in particular lets you keep entries private (see Section 4).

2. Information We Collect

We collect information that you provide directly:

Account information: your name and email address.

Onboarding vision text: the description of your hopes, goals, or vision that you write when you begin.

Daily responses: the answers and text you write in response to the daily content.

Reflect journal entries: private journal entries you write, handled as described in Section 4.

We may also collect limited technical information needed to run and secure the Service, such as authentication data and basic app and device information.

3. How We Use Your Information

We use your information to: create and operate your account; generate your personalized content from your own words; maintain an internal, evolving summary of your themes and language so the content can deepen over time (never shown to you, described in Section 5); operate the safety feature described in Section 7; communicate with you about the Service; and maintain the security and proper functioning of the Service and comply with law. We do not sell your personal information. We do not use your content to serve you third-party advertising.

4. Reflect Journal: Private by Default, Shared Only If You Choose

The Reflect journal is private by default. For each entry, you decide:

Private entries (the default): an entry you keep private is never read, processed, analyzed, or used by our AI to shape your content. It is stored for you to read, and that is all.

Shared entries (opt-in, per entry): only if you choose "share with my Future Self" on a specific entry, that entry is processed by AI so it can influence the content you receive. When you share an entry, it is summarized and paraphrased into the internal summary described in Section 6. Shared entries are never quoted back to you word for word.

You make this choice entry by entry. Choosing to share one entry does not share any other entry.

5. Third-Party AI Processing

SoulField generates your content using a third-party AI provider, Anthropic (the maker of the Claude models), through Anthropic's API. To generate your content, the relevant text you have provided (your vision, your daily responses, and any reflections you have chosen to share) is sent over the internet to Anthropic so the model can produce your personalized content. We want to be honest and clear about this:

Your text is transmitted to a third party. The content used to generate your experience leaves our systems and is processed on Anthropic's infrastructure.

It is protected in transit, but it is not anonymous to the processor. Transmission uses encryption in transit (HTTPS and TLS). The content of your text is readable by the AI service during processing, as it must be in order to generate a response.

Data minimization. We limit what is sent. Your most sensitive raw text is sent to the AI provider only at the once-daily refresh that updates your internal summary, not on every interaction. Unshared private Reflect entries are never sent.

For more on how Anthropic handles data submitted through its API, please see Anthropic's own privacy and commercial terms.

6. The Internal Summary

To let the content deepen over time, we keep an internal summary of your recurring themes and language, written from your own words. This summary is used only to generate your content. It is never shown to you and is never used to advertise to you.

7. How Your Information Is Stored and Secured

We take reasonable steps to protect your information, stated honestly:

Where it is stored. Your data is stored in a managed Postgres database (Supabase). The app is built on the Lovable platform.

Access controls. We use row-level security so that your records are accessible only to your authenticated account, not to other users.

Encryption at rest. Stored data is protected by encryption at rest at the database and storage layer. Deeper field-level encryption of individual sensitive fields is not yet implemented and is planned for a later stage.

Honest limitation. No method of transmission or storage is completely secure. We cannot guarantee absolute security, and you share information at your own risk. We will address security issues consistent with applicable law, including any breach-notification obligations.

8. The Safety Feature and Distress Logging

The Service includes an automated feature that scans the text you submit (your daily responses and any Reflect entries you choose to share) for language that may indicate distress or self-harm. When the feature is triggered, the Service pauses its usual content and shows crisis-resource information, and we record a limited internal safety flag (such as your account identifier, the day, the source, the severity level, and the time). This logging exists so the safety boundary is auditable. The feature is automated and is not a clinical service or an emergency service.

9. Sharing and Disclosure

We share information only as needed to run the Service: service providers that operate our infrastructure (Supabase and Lovable hosting and database, and Anthropic AI); legal and safety disclosures if required by law or to protect rights, safety, or property; and business transfers, if SoulField is involved in a merger, acquisition, or sale of assets. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

10. Data Retention

We keep your information for as long as your account is active and as needed to provide the Service, and afterward only as long as reasonably necessary for legitimate or legal purposes. When you delete your account, we will delete or de-identify your information within a reasonable period, except where retention is required by law.

11. Your Rights

Depending on where you live, you may have the right to access, correct, delete, or export your information, to object to or restrict certain processing, and to withdraw consent (for example by turning off sharing on a Reflect entry or deleting it). To exercise any of these rights, contact us at [CONTACT EMAIL]. We will respond within the time required by applicable law, and we may need to verify your identity.

12. Children (Adults Only)

SoulField is an adults-only service intended for users 18 and over. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a person under 18 has provided us information, contact us at [CONTACT EMAIL] and we will delete it and close the account.

13. Changes to This Policy

We may update this Policy from time to time. If we make material changes, we will update the effective date and provide reasonable notice through the Service or by email. Your continued use after the changes take effect means you accept the updated Policy.

14. Contact

For privacy questions or to exercise your rights, contact us at [CONTACT EMAIL].