Legal
Privacy Policy
1. Who we are
SoulGita is operated by SourceStrongAI ('we', 'us'). For the purposes of the Indian Digital Personal Data Protection Act (DPDP) we are the Data Fiduciary; for the European GDPR we are the Data Controller. Reach us at [email protected].
2. What we collect
Account information — your name, email, profile photo, and a sign-in identifier from Apple, Google, or your phone provider, depending on which you used to sign in. Conversation content — the messages you send to the AI voices and the responses they generate. Preferences — your chosen language, font size, daily-verse time, and whether you have enabled notifications. Subscription state — whether you have an active subscription, and through which store. Diagnostic data — anonymous crash reports and product analytics events that tell us, for example, that a screen failed to load. Notification token — only if you opt in to daily reminders.
3. What we do not collect
We do not collect precise location, contacts, photos, microphone audio, or any biometric data. We do not embed third-party advertising or tracking pixels. We do not request your date of birth — only an age bracket, where required by law. We do not infer sensitive characteristics about you.
4. How we use what we collect
To run the Service — sign you in, send your messages to the AI, return the responses, sync your conversations across devices. To improve the Service — understand which features are used through aggregate, anonymous analytics. To meet legal obligations — keep records that the law requires us to keep. We do not use your data for advertising, and we do not sell it to anyone.
5. AI training
Your conversations are not used to train any AI model — not ours (we have none of our own) and not the underlying Gemini 3 Flash model accessed through Firebase AI Logic. Gemini, when accessed through Firebase AI Logic, processes your message for the duration of a single response and does not retain it for training.
6. Third parties we share with
We share data only with service providers we need to operate the Service: Firebase (Google) — authentication, storage, AI access. RevenueCat — subscription management on iOS and Android. PostHog — product analytics. Sentry — crash reporting. Each of these has its own privacy policy and processes data only on our instructions.
7. Where your data lives
Our primary database is hosted in the Mumbai (Asia South 1) region of Google Cloud. Some service providers (PostHog, Sentry) may process diagnostic data in the United States or the European Union; in those cases, we rely on the providers' standard data-transfer safeguards.
8. How long we keep it
Account and conversation data: until you delete your account, after which we delete it within thirty days, except where the law requires us to keep records longer. Analytics events: aggregated and retained for up to twelve months in identifiable form, then anonymised. Crash reports: ninety days.
9. Your rights
You can read your data, correct it, export it, and delete it from the Profile screen inside the app. Under DPDP, GDPR, and similar laws you also have the right to lodge a complaint with your local data-protection authority. Write to [email protected] if you cannot reach what you need inside the app.
10. Children
SoulGita is not directed at children under 13, and we do not knowingly collect data from them. In India, the EU, the UK, and the US, users aged 13–17 are placed in a limited mode until a parent or guardian confirms consent.
11. Security
We use industry-standard safeguards — encryption in transit (TLS) and at rest, scoped service-account permissions, and App Check on every API call from a client. No system is perfectly secure; we will notify you and the relevant authority within 72 hours of becoming aware of any breach that meaningfully affects your data, as DPDP requires.
12. Changes
We will tell you inside the app at least seven days before any material change. If you continue using SoulGita after a change takes effect, you accept the updated policy.
13. Contact
For any privacy question — to exercise a right, to file a complaint, or to learn more — write to [email protected]. A human reads every email.