Legal

Privacy policy

This is a good-faith description of how Softa actually handles your data today, written in plain language — not a substitute for review by a lawyer licensed in your jurisdiction before commercial launch. Structure and disclosure practices are modeled on what established health apps (Flo, BetterMe) publish, and on the lessons of Flo's 2021 FTC settlement over undisclosed third-party health-data sharing — which is why every processor below is named individually rather than hidden behind "service providers."

1. Categories of personal data we collect

Account data: email and name. Health & wellness data you log: symptoms and severity, body-map entries, cycle and period dates, sleep and mood check-ins, journal notes, triggers and activities. Assessment answers from onboarding. Technical data: push notification token, app version, and crash/error reports if the app breaks. Subscription status (active, trialing, cancelled) — never your card number, which Apple or Google handles directly. If you connect a wearable or HealthKit in the future, only the data types you explicitly authorize. Email list: if you sign up for updates on softa.world, we store your email address, when and where you signed up, and your consent, and use it only to send the emails you asked for. You confirm by email first and can unsubscribe from any message. Website: we read your approximate country from your connection only to show local figures on the home page, and we don't store it. We collect what you tell Softa directly; we don't buy or import data about you from anywhere else.

2. Purposes and legal bases for processing

We process your account and usage data to provide the service — performance of our contract with you. We process health data specifically (a "special category" under GDPR Art. 9) only with your explicit, opt-in consent, given separately in Settings for each category (symptoms, cycle, sleep, mood); you can withdraw that consent at any time, which stops future collection. We send push notifications only if you've opted in. We use limited technical data (crash reports) on the basis of our legitimate interest in keeping the app working.

3. With whom we share your data

We do not sell data, ever, and there is no advertising or marketing SDK in Softa. We share data only with the specific processors below, only for the purpose stated: Anthropic (Claude AI) — only when generating your doctor-visit (Visit Pack) summary, we may send a short aggregate (e.g. "Hot flashes ×9" and whether you've felt dismissed by a doctor before) to help write it — never your name, email, or raw notes; some Visit Packs are instead built entirely from a local template with nothing sent anywhere. RevenueCat — your subscription/purchase status, to keep your plan in sync, not health data. Apple / Google — process payment directly; Softa never sees your card details. Sentry — technical crash reports (device type, app version, what broke) only if the app crashes, to help us fix bugs; not health data by design. Our cloud hosting provider — stores your account data, encrypted, under a data processing agreement. Resend — delivers our emails (confirmation and updates you signed up for); it receives your email address and the message. Expo — delivers push notifications; receives only your device token and a generic message like "Softa noticed something," never the specific finding (a push announces, it never reveals). We disclose new categories of sharing here before they start, not after.

4. How you can exercise your privacy rights

Access: export everything from Settings, any time. Rectification: edit your logs and account details directly in the app. Erasure: permanently delete your account and all associated data from Settings, any time — no support request needed, and deletion is immediate, not a soft-delete. Withdraw consent: turn off any health-data category in Settings; this stops future collection, and you can separately request deletion of what's already stored. Object, restrict, or request portability: contact us at the email below. You can also lodge a complaint with your local data protection authority.

5. Age limitations

Softa is built for adults navigating perimenopause and menopause and is intended for users 18 and older. We don't knowingly collect data from anyone under 18, and the app isn't directed at children.

6. International data transfers

Some processors named above (including Anthropic and our cloud hosting) may process data outside the EU/EEA, primarily in the United States. Where that happens today, we rely on those processors' own standard contractual clauses. Formalizing our own transfer safeguards is one of the items we'll complete with a lawyer before commercial EU launch, per the disclaimer above.

7. Data retention

We keep your data for as long as your account is active. If you delete your account, everything tied to it is deleted immediately and permanently — we don't retain a recoverable copy.

8. Security

Data is encrypted in transit, and access to the underlying database is restricted. No system is 100% secure, but we don't add anything that weakens these protections — no ad SDKs, no unnecessary third parties, and every processor above is there for a specific, named function.

9. Anonymous usage statistics

If you accept in the app (and only then), Softa counts which screens and buttons are used, for example that a symptom was logged, that a quiz step was reached, or that the subscription screen was viewed, so we can find and fix what is confusing. These counts are tied to a random identifier generated on your device, not to your account, email or advertising ID. They never include what you log (no symptoms, notes, dates or answers) and are not shared with advertising or analytics companies: they go to our own server. You can turn this off at any time in Settings, and nothing is sent if you decline.

10. Personal data controller

Softa is currently operated by an individual developer, not yet a registered company. Until formal incorporation, direct any data protection inquiry to the contact below and we'll respond personally. This section will be updated with a registered legal entity and address once incorporation is complete.

11. Contact us

For any privacy question, data request, or concern: privacy@softa.world.

12. Changes to this policy

We'll update the date below whenever this changes. For a material change — a new category of data, or a new third party — we'll surface it inside the app itself, not just update this page quietly.

Last updated: September 2026