Privacy Policy

This Privacy Policy explains what information Soma Practice (“Soma”, “we”, “us”) collects when you use the Soma Practice iOS app and the somapractice.io website (together, the “Service”), how we use it, and the choices you have. We built the Service to work with as little personal information as possible.

The short version

• You can use the app without creating an account. Signing in with Apple or Google is optional.
• We do not run advertising, we do not use third-party analytics or tracking SDKs in the app, and we do not sell or share your personal information.
• Payments are handled entirely by Apple. We never see your card details.
• You can delete your account and its data at any time, right in the app: Profile → Delete account.

1. Information we collect

Account and identifiers

• Anonymous account. When you first open the app, we create an anonymous account so the app can work before you sign in. It consists of a randomly generated account identifier and a random device identifier created by the app. It is not the hardware or advertising identifier of your device.
• Sign-in information (optional). If you choose to sign in with Apple or Google, we receive from that provider a unique account identifier, your email address, and your display name, if you share them. With Sign in with Apple you may choose to hide your email, in which case we receive a private relay address. We never receive your Apple or Google password.

Subscription information

If you purchase a subscription, Apple processes the payment. We receive from Apple, and store, the transaction identifiers, the product you purchased, the subscription status, trial status, renewal and expiry dates, and an app account token that links the purchase to your account. We do not receive or store your payment card details, billing address, or Apple ID.

Activity in the app

• The practices you start, your progress through their steps, and whether you completed them.
• The practices you save to Favorites.
• The answers you select when the app asks how you feel or what you would like to work on. These are sent to our server to pick suitable practices for you. We treat them as a search request and do not store them in your profile.

Technical information

When the app connects to our servers, we record the IP address and the user agent (app version, device model, and iOS version) associated with your session, together with the time the session was created and last used. Our servers also keep short-lived technical logs and aggregated performance metrics that do not identify you.

The website

The somapractice.io website does not use cookies or analytics. Our web server processes your IP address to deliver the page, as every web server does. The website loads fonts from Google Fonts, which means your browser sends a request, including your IP address, to Google.

What we do not collect

We do not collect your precise location, contacts, photos, microphone or camera data, health or fitness data from Apple Health, or any advertising identifier. We do not track you across other companies’ apps and websites.

2. How we use information

We use the information above to:

• provide the Service: show practices, remember your progress and favorites, and keep them available across sessions and devices;
• verify your subscription and unlock the content you paid for, including restoring purchases;
• keep you signed in and keep your account secure, including detecting and preventing abuse;
• diagnose problems and keep the Service reliable;
• respond to you when you contact us;
• comply with legal obligations.

We do not use your information for advertising or profiling, and we do not make automated decisions that have legal or similarly significant effects on you.

3. Legal bases (EEA, UK, and Switzerland)

If you are in the European Economic Area, the United Kingdom, or Switzerland, we process your information on the following legal bases: performance of our contract with you (providing the Service and your subscription); our legitimate interests in keeping the Service secure and reliable; compliance with legal obligations; and your consent, where we ask for it.

4. How we share information

We do not sell your personal information and do not share it for advertising. We disclose it only to:

• Apple — to process purchases and verify subscription status, and to sign you in if you use Sign in with Apple.
• Google — to sign you in if you use Google sign-in.
• Hosting providers — the companies that operate the servers our Service runs on, who process data only on our behalf.
• Authorities or other parties — when required by law, or when necessary to protect the rights, safety, or property of our users, the public, or us.
• A successor — if the Service is involved in a merger, acquisition, or sale of assets, in which case this Policy continues to apply to your information.

5. Where information is stored

Our production servers are located in the United States. If you use the Service from another country, your information will be transferred to and processed in the United States, where data protection laws may differ from those in your country. Where required, we rely on appropriate safeguards, such as standard contractual clauses, for these transfers.

6. How long we keep information

• Account, activity, and favorites data — for as long as your account exists.
• Session records (including IP address and user agent) — while the session is valid and for a limited period afterwards for security purposes.
• Subscription and transaction records — for as long as required for accounting, tax, and dispute-resolution purposes.
• Server logs — for a short period needed to operate and troubleshoot the Service.

When you delete your account, we delete your personal information right away. We keep the subscription transaction records we received from Apple, no longer linked to your account or to any information that identifies you, so that refunds and renewals are still handled correctly and for accounting purposes. If your subscription is still active, you can attach it to a new account with Restore Purchases.

7. Your choices and rights

• Deleting your account. In the app, open Profile and choose Delete account. This works whether or not you have signed in, and it immediately and permanently deletes your account, sign-in information, sessions, favorites, and practice history from our servers and from the app on your device. If you cannot use the app, email hello@somapractice.io and we will do it for you. Deleting the account does not cancel a subscription; you need to cancel it in your Apple ID settings.
• Signing out. You can sign out in the app’s Profile screen at any time.
• Managing your subscription. You manage and cancel subscriptions in your Apple ID settings.

Depending on where you live, you may also have the right to access, correct, export, or delete your personal information, to object to or restrict certain processing, and to withdraw consent. To exercise any of these rights, contact us at the address below. We will respond within the time required by applicable law. You also have the right to lodge a complaint with your local data protection authority.

California residents. We do not sell or share personal information as those terms are defined in the California Consumer Privacy Act, and we will not discriminate against you for exercising your privacy rights.

8. Security

We protect your information with encryption in transit (HTTPS), hashed session tokens, and restricted access to our servers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. Children

The Service is not directed to children under 13 (or under 16 in the EEA and UK), and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us and we will delete it.

10. Changes to this Policy

We may update this Policy from time to time. When we do, we will change the “Last updated” date above, and if the changes are significant we will give you additional notice in the app or on this website.

11. Contact

Questions or requests about this Policy or your information: hello@somapractice.io.