Privacy Policy

1. Scope and operator

This Policy applies to the SoulOrbit Android and iOS apps, this website, and related cloud services. The data controller is the legal developer or seller shown in the applicable Google Play or App Store listing. Questions and privacy requests may be sent to esthermhysuppor@gmail.com.

Operator: Chongqing Muheyu Technology Co., Ltd.

2. Data we process

The exact data depends on the features you use.

When you use Sign in with Apple, we process Apple's account identifier and the profile information you authorize. We exchange the authorization code and store the revocable token encrypted until unlinking or account deletion. Apple handles the native authorization process.

• Account data: name, email address, account ID, authentication and session metadata.
• Synced content: plans, daily check-ins, todos, focus sessions, mood records, versions, operation IDs, and conflict metadata.
• Optional media: photos you explicitly select for cloud synchronization, together with file type, size, and integrity checksums.
• Device and security data: random device IDs, signing public keys, app version, request IDs, timestamps, and security events.
• Optional diagnostics: app interactions, crash and performance metadata only after you enable diagnostics. Because uploads are authenticated, diagnostic records may be linked to your account, Profile, or random device ID. Raw mood notes, passwords, tokens, and Guide message bodies are prohibited from diagnostics.

3. How and why we use data

We process account and synchronized content to perform the service agreement; optional diagnostics and permission-based features with your consent; security and abuse-prevention data for our legitimate interests where permitted; and records needed to meet legal obligations. You may withdraw consent in Settings without affecting earlier lawful processing. SoulOrbit contains no advertising, subscription, or generative-AI service.

4. Local and cloud storage

SoulOrbit is local-first. Content is stored in the app's private device storage. When you sign in and use synchronization, required records are transmitted over HTTPS to SoulOrbit cloud services. Selected media is stored in a private object-storage bucket and is accessed only through short-lived authorization.

5. Providers and disclosure

Contracted cloud-infrastructure, private object-storage, security, and support providers process data only to operate the service, under our instructions and contractual duties requiring protection equivalent to this Policy. Apple and Google may process app-distribution, operating-system backup, and platform-service data under their own policies. We do not sell personal data, share it for cross-context behavioral advertising, or provide it to data brokers. We may disclose the minimum necessary data when legally required or to protect users and the service.

6. International processing

Data may be processed outside your country. Where applicable, we use contractual, access-control, encryption, and transfer safeguards required by local law. Availability in a country does not waive your statutory rights.

7. Retention

Account and synchronized content are retained while your account is active. A verified deletion request locks the account and revokes active sessions immediately; active-system deletion is targeted within 30 days. Encrypted rotating backups expire within 45 days. Limited security-event records may be retained for up to 13 months where necessary for fraud prevention, legal obligations, or dispute evidence.

8. Your choices and rights

You can disable optional diagnostics in Settings, remove individual cloud media, request access or export, correct account details, object to or restrict processing where applicable, and request account deletion. Use the in-app delete control, the public Delete account page, or contact support. We may verify identity before acting on a request.

9. Security

We use HTTPS, private storage, short-lived media credentials, password hashing, rotating sessions, device signing, least-privilege access, backups, and service monitoring. No system is completely secure; protect your password and report suspected unauthorized access promptly.

10. Adults only

You must be at least 18 and have reached the legal age of majority where you live. Guardian consent does not make a minor eligible. If we learn that a user is a minor under that law, the restriction and deletion process in the Privacy Policy applies.

SoulOrbit is intended only for people aged 18 or older who can legally enter into this agreement. People under 18 must not register or use the service, including with a guardian's permission. If you believe we have received personal data from someone under 18, contact support at esthermhysuppor@gmail.com. After appropriate verification, we will restrict the account and erase the data unless limited retention is required by law.

11. Health and safety

Mood and wellbeing entries may be sensitive. SoulOrbit handles them as private reflection and habit-management content, not medical records. SoulOrbit is not a medical provider, therapist, diagnostic tool, or emergency service.

12. Changes and contact

We may update this Policy when practices or law change. Material changes will be announced through the app or website where appropriate. Contact esthermhysuppor@gmail.com with privacy questions or requests.