Privacy Policy

1. Scope and operator

This Policy applies to the SoulOrbit Android and iOS apps, this website, and related cloud services. The operator identified below is the data controller responsible for deciding the purposes and means of processing. Questions and privacy requests may be sent to esthermhysuppor@gmail.com.

Operator: Chongqing Muheyu Technology Co., Ltd.

2. Data we process

The exact data depends on the features you use.

When you use Sign in with Apple, we process Apple's account identifier and the profile information you authorize. We exchange the authorization code and store the revocable token encrypted until unlinking or account deletion. Apple handles the native authorization process.

• Account data: name, email address, account ID, authentication and session metadata.
• Synced content: plans, daily check-ins, todos, focus sessions, mood records, versions, operation IDs, and conflict metadata.
• Optional media: photos you explicitly select for cloud synchronization, together with file type, size, and integrity checksums.
• Device and security data: random device IDs, signing public keys, app version, request IDs, timestamps, and security events.
• Optional diagnostics: app interactions, crash and performance metadata only after you enable diagnostics. Because uploads are authenticated, diagnostic records may be linked to your account, Profile, or random device ID. Raw mood notes, passwords, tokens, and Guide message bodies are prohibited from diagnostics.

3. How and why we use data

We process account and ordinary synchronized content to perform the service agreement; optional diagnostics with your consent; security and abuse-prevention data for our legitimate interests where permitted; and necessary records to meet legal obligations. Device permissions authorize access to device features and do not by themselves replace a legal basis for processing. Sensitive information is subject to section 11. You can disable diagnostics in Settings and contact our DPO to withdraw other consent without affecting earlier lawful processing.

4. Local and cloud storage

SoulOrbit is local-first. Content is stored in the app's private device storage. When you sign in and use synchronization, required records are transmitted over HTTPS to SoulOrbit cloud services. Selected media is stored in a private object-storage bucket and is accessed only through short-lived authorization.

5. Providers and disclosure

Contracted cloud-infrastructure, private object-storage, security, and support providers process data only to operate the service, under our instructions and contractual duties requiring protection equivalent to this Policy. Apple and Google may process app-distribution, operating-system backup, and platform-service data under their own policies. We do not sell personal data, share it for cross-context behavioral advertising, or provide it to data brokers. We may disclose the minimum necessary data when legally required or to protect users and the service.

6. International processing

The overseas service uses Alibaba Cloud infrastructure in Silicon Valley, United States (US West), for its application servers, database, private object storage, backups and service logs. Account data, synchronized content and selected cloud media may therefore be processed outside your country. Apple sign-in and support email also involve the relevant platform providers and their processing locations.

The legal requirements depend on the parties, destination, access and purpose of each transfer. Where a transfer requires safeguards, a specific notice or consent, these requirements must be met before that transfer. Appropriate mechanisms may include recognized adequacy decisions, approved contractual safeguards and supplementary measures, or an applicable statutory exception. This Policy does not represent that a particular contract or certification has already been obtained. You may ask our DPO about the recipients, destinations and safeguards applicable to your data and how to obtain a copy. Accepting these Terms or using the app is not blanket consent to international transfers.

7. Retention

Account and synchronized content are retained while your account is active. A verified deletion request locks the account and revokes active sessions immediately; active-system deletion is targeted within 30 days. Encrypted rotating backups expire within 45 days. Limited security-event records may be retained for up to 13 months where necessary for fraud prevention, legal obligations, or dispute evidence.

8. Your choices and rights

You can disable optional diagnostics in Settings, remove individual cloud media, request access or export, correct account details, object to or restrict processing where applicable, and request account deletion. Use the in-app delete control, the public Delete account page, or contact support. We may verify identity before acting on a request.

9. Security

We use HTTPS, private storage, short-lived media credentials, password hashing, rotating sessions, device signing, least-privilege access, backups, and service monitoring. No system is completely secure; protect your password and report suspected unauthorized access promptly.

10. Adults only

You must be at least 18 and have reached the legal age of majority where you live. Guardian consent does not make a minor eligible. If we learn that a user is a minor under that law, the restriction and deletion process in the Privacy Policy applies.

SoulOrbit is intended only for people aged 18 or older who can legally enter into this agreement. People under 18 must not register or use the service, including with a guardian's permission. If you believe we have received personal data from someone under 18, contact support at esthermhysuppor@gmail.com. After appropriate verification, we will restrict the account and erase the data unless limited retention is required by law.

11. Sensitive information and health

Mood notes and images can reveal health or other sensitive personal information. Their legal protection depends on their content, even though SoulOrbit is not a medical provider, therapist, diagnostic tool or emergency service. Do not upload another person's sensitive data without a lawful basis.

Where applicable law requires explicit or separate consent or another additional legal condition for processing sensitive data, that condition must be met. Agreement to a general privacy policy, an operating-system permission or Apple sign-in does not by itself satisfy it. You may keep records locally, turn off cloud synchronization and ask the DPO to restrict or erase previously synchronized data. Turning off synchronization alone does not erase data already uploaded. Where consent is withdrawn, processing that relies on it must stop, subject to any other lawful retention requirement.

12. Changes and contact

We may update this Policy when practices or law change. Material changes will be announced through the app or website where appropriate. Contact esthermhysuppor@gmail.com with privacy questions or requests.