Privacy Policy

This policy describes what SOMA Next collects, why, and the controls you have. Because the Service models your physiology, it processes sensitive health data — we treat that as its defining design constraint.

1. What We Collect

• Account data — email, display name, hashed password, subscription tier.
• Health profile — demographics (age, sex, weight, height, body fat, activity level), health conditions, genetic markers you enter, calibrated model parameters.
• Usage data you create — substance stacks, simulations, meals (including meal photos you upload for analysis), and notification preferences.
• Sensor data — readings you upload or connect (CGM, heart rate, blood pressure, blood panels).
• Technical data — API request logs (endpoint, timing, status) for rate limiting and reliability; device push tokens if you enable notifications.

2. How We Use It

Exclusively to operate the Service: running the simulations and analyses you request, calibrating models to your data, sending notifications you've opted into, enforcing tier limits, and securing the platform. We do not sell your personal data and we do not use your health data for advertising.

3. Meal Photos

Photos submitted for meal analysis are processed to extract nutritional estimates. Processing may involve a third-party AI provider acting as our processor; photos are not used to train third-party models under our agreements.

4. Sharing

We share data only with: (a) infrastructure and processing providers under data-processing agreements; (b) authorities when legally compelled; (c) a successor entity in a merger or acquisition, under this policy's protections. No third party receives your health data for its own purposes.

5. Security

Passwords are hashed (bcrypt); API keys are stored as keyed hashes; transport is encrypted (TLS); access is restricted and logged. No system is perfectly secure — report concerns to security@somanext.com.

6. Retention

Account and health data are retained while your account exists. Simulation history retention varies by tier. Deleting your account permanently removes your profile, health data, stacks, simulations, sensor readings, meals, keys, and tokens.

7. Your Rights

From your profile you can: edit your data, export sensor and simulation data, and delete your account and all associated data (effective immediately, no grace period). Depending on your jurisdiction (GDPR, CCPA, and similar), you may have additional rights — contact privacy@somanext.com.

8. Children

The Service is not directed to anyone under 18, and we do not knowingly collect data from minors.

9. Changes

Material changes will be announced in-app with an updated version date; continued use after the effective date constitutes acceptance.

This document is a draft pending review by qualified legal counsel and may change before public launch.