Privacy Policy
Last updated: March 19, 2026
Soma ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website (collectively, the "Service").
1. Information We Collect
Information you provide directly
- Account information (name, email address)
- Health and fitness data (height, weight, fitness goals, workout logs)
- Food and nutrition logs, including photos of meals
- Payment information (processed securely through Apple App Store or Google Play — we do not store card details)
Information collected automatically
- Device information (device type, operating system, unique device identifiers)
- Usage data (features used, session duration, in-app events)
- Crash reports and performance data
- IP address and general location (country/region)
2. How We Use Your Information
- To provide, personalise, and improve the Service
- To generate AI-powered workout plans and nutrition recommendations
- To process transactions and manage subscriptions
- To send transactional and product-related communications
- To analyse usage patterns and improve app performance
- To comply with legal obligations
3. Third-Party Services
We work with the following third-party services that may receive or process your data:
- Firebase (Google) — authentication, database, and analytics
- RevenueCat — subscription management
- Superwall — paywall and monetisation analytics
- Mixpanel — product analytics
- Customer.io — email and push notification delivery
- Apple App Store / Google Play — payment processing
- Google Vertex AI / Gemini — AI-powered features
Each third party operates under its own privacy policy and data processing terms.
4. Data Retention
We retain your personal data for as long as your account is active or as needed to provide the Service. You may delete your account at any time from within the app, which will result in the deletion of your personal data within 30 days, except where we are required to retain it for legal purposes.
5. Your Rights
Depending on your location, you may have the following rights:
- Access — request a copy of the personal data we hold about you
- Correction — request correction of inaccurate data
- Deletion — request deletion of your personal data
- Portability — receive your data in a structured, machine-readable format
- Objection / Restriction — object to or restrict certain processing
- Opt-out of marketing — unsubscribe from marketing emails at any time
To exercise any of these rights, contact us at [email protected].
6. Children's Privacy
The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
7. Security
We implement industry-standard security measures to protect your data, including encryption in transit (TLS) and at rest. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or an in-app notification. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.
9. Contact Us
If you have any questions about this Privacy Policy, please contact us at: