This Privacy Policy describes how Soulor ("we", "us", or "our") collects, uses, and protects your personal information when you use our service. We built Soulor to be a trusted companion — and that trust starts with being honest about how your data is handled.
Our Promise
Your conversations are personal. We treat them that way. We will not sell your personal data. We will not use your conversations to train third-party AI models without your explicit consent. We do use conversations to improve and train Soulor's own AI model, which runs on our own infrastructure; you can turn this off at any time in Settings → Privacy & Data, and from then on neither new messages nor your past chat history are included in training. We will be transparent about what we collect and why.
We will only share your information as described in this policy or where required by law. If that ever changes, we will notify you before it does.
1. Information We Collect
Account Information
When you create an account, we collect your email address or phone number (or a username) and a hashed password. We do not store your password in plain text. If you sign in with Google (or Apple, where offered), we receive your email address from that provider instead of a password. If you turn on two-step verification, we store the secret your authenticator app uses to generate codes.
Conversation Data
Messages you send to your AI companion, along with AI responses, are stored so your companion can maintain context across sessions. This includes text messages, voice note transcriptions, any images you share within the app, and the personas you create in Simulation Mode. Content you post in Community is visible to other Soulor users.
Usage Data
We collect basic usage information such as features used, session duration, and interaction patterns to improve the service. Our website and app use Microsoft Clarity, which records how pages are used (clicks, scrolling and session replays) to help us understand and improve the product.
Device & Technical Information
We may collect browser type, operating system, and IP address for security and service operation purposes. We use the country your IP address belongs to only to route requests to AI and media providers that work in your region (for example, in mainland China); it does not change where your account data is stored. Your language choice is kept on your device.
2. How We Use Your Information
- To provide and personalise your AI companion experience
- To maintain conversation memory and relationship continuity
- To authenticate your account and keep it secure
- To send service-related communications (e.g. password resets)
- To analyse usage patterns and improve the product
- To comply with legal obligations
3. AI & Your Conversations
Soulor routes your messages through AI providers (including Soulor's own fine-tuned model, based on the open-weight Qwen3-14B and hosted on Modal, and hosted models such as Google Gemini, Groq, and OpenRouter) to generate responses. Voice is generated by text-to-speech providers (ElevenLabs, Fish Audio or Microsoft Edge TTS), translation uses DeepL, and GIF search uses Giphy. These providers process your messages in real-time to produce a reply. We use privacy-preserving configurations where available and do not authorise these providers to use your data for their own training purposes.
AI-generated responses are not from a real person. Your companion is an artificial intelligence. While we design it to be empathetic and contextually aware, it is not a substitute for professional mental health, medical, or legal advice.
Memory: Soulor extracts facts and context from your conversations to build a memory profile for your companion. This memory is stored securely and is visible to you at any time in the companion's Profile screen. You can clear it whenever you want.
4. Data Storage & Security
Your account data, companions and conversation history are stored in Supabase (PostgreSQL), hosted on infrastructure in the United States, so they follow your account to any device; your browser also keeps a local copy so the app opens quickly. Conversation history, memory, your feed and your profile details are encrypted at rest.
We use industry-standard security practices including encrypted connections (HTTPS/TLS), hashed passwords (scrypt), optional two-step verification, and CSRF protection on all mutating API requests.
No system is perfectly secure. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.
5. Information Sharing
We do not sell, rent, or trade your personal information. We share information only in these limited circumstances:
- Service providers: the AI, voice, translation and GIF providers named above, and infrastructure services (Supabase, Vercel), payments (Stripe), SMS and WhatsApp verification codes (Twilio), CAPTCHA (Cloudflare Turnstile), email updates you opt in to (Brevo) and analytics (Microsoft Clarity), which process data on our behalf under contractual confidentiality obligations
- Legal requirements: When required by law, court order, or governmental authority
- Business transfers: In the event of a merger or acquisition, with notice provided to you beforehand
- With your consent: Any other sharing only with your explicit permission
6. Your Rights & Choices
Depending on your location, you may have the following rights:
- Access: Request a copy of your personal data via Settings → Export All Data
- Deletion: Delete your account and all associated data via Settings → My Account → Delete Account, or delete all your conversation data while keeping your account via Settings → Privacy & Data
- Correction: Update your profile information at any time in the app
- Portability: Export your data in JSON format at any time
- Opt-out: You may opt out of non-essential data collection by contacting us
To exercise any right, use the in-app tools or contact us at hello@soulor.app.
7. Data Retention
We retain your account data for as long as your account is active. Conversation history is retained to provide the memory features of the service. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law.
8. Children's Privacy
Soulor is not intended for individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected such information, we will delete it promptly.
9. Changes to This Policy
We may update this policy from time to time. When we make material changes, we will notify you via email or an in-app notice at least 14 days before the changes take effect. Continued use of the service after changes constitutes your acceptance of the updated policy.
10. Contact Us
If you have questions or concerns about this policy or your personal data, please contact us:
Email: hello@soulor.app
We aim to respond to all privacy-related enquiries within 5 business days.