Privacy Policy

SoulSnap ("we", "us", "our") is a voice journaling app that lets you record your thoughts, get AI-powered transcriptions and titles, organise your recordings with labels, and chat with an AI assistant about your entries. This Privacy Policy explains what data we collect, how we use it, and how you can control it.

By using SoulSnap, you agree to the collection and use of information as described in this policy.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Email address — used as your username and for account verification
• Full name (optional) — displayed in your profile
• Password — securely hashed and stored by AWS Cognito; we never store or have access to your plaintext password

1.2 Voice Recordings & Transcriptions

When you create a "Soul Vibe" (journal entry), we collect:

• Audio recordings — stored as WAV files
• Transcribed text — generated from your recordings via automated speech recognition
• Word-level timestamps — timing information for each spoken word
• AI-generated titles — a short title created by AI based on your transcript
• Recording duration and creation timestamp

1.3 Labels & Organisation

You may create custom labels (with names and colours) to organise your journal entries. These are stored alongside your account data.

1.4 Chat Messages

If you use the AI chat feature (requires a subscription), we store your messages and the AI assistant's responses, along with session identifiers and timestamps.

1.5 Subscription & Payment Information

If you subscribe to AI Features:

• Payment card details are collected and processed exclusively by Stripe — we never see, store, or have access to your card numbers
• We store only your Stripe customer ID, subscription ID, and subscription status (active, cancelled, etc.)

1.6 Automatically Collected Information

We do not use analytics, tracking, advertising SDKs, or crash reporting services. We do not collect device identifiers, IP addresses, location data, or browsing behaviour for profiling purposes.

Standard AWS infrastructure logs (e.g. CloudWatch) may temporarily record technical metadata such as IP addresses for operational and security purposes. These logs are not used for tracking or profiling.

2. How We Use Your Information

Purpose	Data Used
Account creation & authentication	Email, password, name
Voice journaling	Audio recordings, transcriptions, timestamps
AI title generation	Transcript text (processed by AI, not stored separately)
AI chat conversations	Chat messages, recent journal entries for context
Subscription billing	Stripe customer/subscription IDs
Account deletion & verification	Email address (to send verification codes)
Service operation & security	Technical logs

We do not sell, rent, or share your personal data with third parties for advertising or marketing purposes.

3. Third-Party Service Providers

We use the following third-party services as data processors to operate SoulSnap:

Provider	Purpose	Data Processed
Amazon Web Services (AWS)	Cloud infrastructure, authentication, storage, email	All application data
AWS Cognito	User authentication & identity management	Email, password (hashed), name
Amazon Transcribe	Speech-to-text transcription	Audio recordings
Amazon Bedrock (Claude)	AI title generation & chat	Transcript text, chat messages
Amazon SES	Sending verification emails	Email address
Stripe	Payment processing	Payment card details (handled by Stripe directly)

All AWS services are hosted in the EU (Ireland, eu-west-1) region. Your data is processed and stored within the European Union.

4. Data Storage & Security

4.1 Where Your Data Is Stored

• Account data, journal entries, labels, and chat history — Amazon DynamoDB (encrypted at rest)
• Audio recordings — Amazon S3 (encrypted with S3-managed encryption, public access blocked)
• Authentication credentials — AWS Cognito (passwords hashed, tokens encrypted)

4.2 Security Measures

• All data transmitted over HTTPS/TLS encryption
• Encryption at rest for all stored data
• Authentication tokens stored in encrypted device storage
• AWS IAM-based access controls on all services
• Rate limiting on sensitive operations (account deletion, verification)
• S3 bucket access restricted via CloudFront Origin Access Control

4.3 Local Data on Your Device

The SoulSnap app stores the following locally on your device:

• Authentication tokens — securely encrypted via Android Keystore / iOS Keychain
• Temporary audio files — stored in the app's private cache directory during recording, uploaded to the cloud, then removed

All local data is removed when you sign out or uninstall the app.

5. Data Retention

• Account data, journal entries, labels, and chat history — retained until you delete your account
• Audio recordings — retained until you delete the individual entry or your account
• Verification codes — automatically deleted after 10 minutes
• Rate limiting records — automatically deleted after 15 minutes
• Infrastructure logs — retained per AWS CloudWatch default retention policies

6. Your Rights

You have the following rights regarding your personal data:

6.1 Access & Portability

All your data (journal entries, recordings, labels, chat history) is accessible through the app at any time.

6.2 Deletion

You can delete your account and all associated data at any time via our account deletion page. This permanently deletes:

• All journal entries and metadata
• All audio recordings
• All labels and chat history
• Your Stripe subscription (cancelled automatically)
• Your profile data

Your Cognito authentication record is disabled (not deleted) to allow account reactivation. If you reactivate, you start with a fresh account — your previously deleted data cannot be recovered.

6.3 Rectification

You can update your profile information through the app at any time.

6.4 Objection & Restriction

Since we do not process your data for marketing, profiling, or automated decision-making, these rights are generally not applicable. If you have concerns about how your data is processed, please contact us.

7. Children's Privacy

SoulSnap is not intended for children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

8. International Data Transfers

All data is processed and stored within the European Union (Ireland). We do not transfer your personal data outside the EU/EEA, except where required by our third-party processors (e.g. Stripe) under appropriate safeguards such as Standard Contractual Clauses.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this page. Continued use of SoulSnap after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or your personal data, please contact us at:

← Back to SoulSnap