Privacy Policy

Who is responsible for your data

Soira is the controller of the personal information processed through the Service. For any privacy request or question, or to reach the person responsible for data protection, contact us at hello@soira.ai.

Information we collect

• Account information: your name, email address, and a salted, one-way hash of your password (we never store your password in plain text). If you sign in with Apple or Google, we receive a unique identifier and the email/name you authorise that provider to share. We also store your preferred language and subscription tier.
• Child profile information: the child's name, birth date, gender (if you provide it), your relationship to them, diagnosis status if you choose to record it, and any notes you add.
• Diary entries: the content, category (for example mood, behaviour, sleep, food, medication, therapy, milestones), and date of the entries you write.
• Care Record information: if you use the optional Care Record: appointments you add (such as a title, date, location, and the practitioner), notes from visits, and the medications, therapies, or strategies recorded for your child (including the name, dosage or instructions, the reason, status, and who recommended them), together with any goals and the practice or dose entries you log against them. When a Care Circle member adds a note or recommendation, it is recorded under their name. If you dictate a note by voice, we process the audio recording to transcribe it (see “Voice notes and AI summaries” below).
• Care Circle information: the email addresses, names, roles, and relationships of people you invite to a child's Care Circle.
• Lumi AI conversations: the messages you send to our AI guide and its replies. See “How Lumi, our AI guide, works” below.
• Subscription and payment information: your subscription status and billing history. Payments are handled by our payment processors; we do not collect or store your full card number or equivalent payment credentials.
• Technical, device, and security data: limited logs and a security audit trail (for example sign-in events and rate-limit triggers), error diagnostics, and a small number of essential cookies and identifiers (a sign-in session cookie and, for signed-out visitors who use Lumi, an anonymous device cookie used only to apply free-usage limits).
• Analytics data: with your consent, we use Google Analytics to understand how Soira is used so we can improve it. This sets analytics cookies and identifiers on your device. Analytics stays off until you accept, and you can decline or change your choice at any time. We never send your diary entries, your child's information, or your Care Circle information to analytics, and IP addresses are not retained by our analytics provider. We do not use advertising cookies or share your data with advertisers.

How we use your information and our legal bases

We use your information to provide and protect the Service: to operate your account, store and display your diary and child profiles back to you and the Care Circle members you authorise, generate AI responses when you use Lumi, process subscriptions, send transactional emails (verification, password reset, invitations, and important service notices), and detect and prevent abuse.

Depending on your location, the lawful bases we rely on are: the performance of our agreement with you (operating your account and the features you use); your consent (which you give for sensitive child information and for using Lumi, and which you can withdraw at any time); our legitimate interests in keeping the Service secure and working; and compliance with legal obligations.

We do not sell your personal data, we do not share it with advertisers, and we do not use your diary content or your child's information to train AI models.

How Lumi, our AI guide, works

Lumi is an AI guide powered by a third-party AI provider. When you chat with Lumi, your messages are sent to that provider to generate a reply. If you open Lumi while a specific child is selected, we also send a small, bounded context to help ground the suggestions: a few profile facts (such as approximate age, gender, and diagnosis status) and a short digest of that child's diary entries from roughly the last 30 days. We never send the child's name to the AI provider.

We use a paid AI service. Under that provider's terms for the service, the provider does not use your prompts or the AI's responses to train its models; data may be processed transiently and retained for a limited period only for security, abuse prevention, and legal compliance. Before your first chat, Lumi shows a consent notice explaining that it is an AI guide and not a clinician. AI responses are generated automatically and can be inaccurate or incomplete; Lumi does not make any decision that produces a legal or similarly significant effect about you or your child.

Voice notes and AI summaries

Some optional features use AI to work with your own entries:

• Voice diary and voice visit notes: when you record a voice entry or a spoken visit note, the audio is sent to our AI provider to transcribe and summarise it into text, which you review and edit before it is saved.
• Pre-visit summaries: when you generate a summary for an upcoming appointment, we send a bounded digest of that child's recent diary and care-record entries to our AI provider to produce the summary. We do not send the child's name.

As with Lumi, our AI provider does not use this content to train its models, and we never use your content to train AI. These summaries are generated automatically, can be inaccurate or incomplete, and are not medical advice.

How we protect your data

Sensitive fields, child names, notes, date of birth, and diagnosis status; diary entry content; care-record notes and recommendations and the names of people credited in them; and Lumi message content, are encrypted at rest using strong, industry-standard encryption (AES-256), so they are not readable directly in the database. Traffic is served over HTTPS (TLS). Access is rate-limited, and security-relevant actions are recorded in an audit log.

Children's information

Soira is intended for use by parents and caregivers who are adults, not by children, and it is not directed to children. The information about a child in Soira is provided by the adult who owns the account. Information about a child's health and development can be sensitive personal information under applicable data-protection laws; we process it on the basis of your explicit consent and the controls you set. Please only record information you are entitled to share, and use the Care Circle controls to limit who can see it. If you believe a child's data has been added without authority, contact us at hello@soira.ai and we will act promptly.

Care Circle sharing

When you invite someone to a child's Care Circle, they can see that child's information and diary at the permission level you set (for example, viewer or editor). Sharing is per-category: you choose which kinds of information a member can see, including whether they can see the care record (visits and notes) and the recommendations. You control these invitations and can change a member's permissions or remove them at any time.

Service providers we share data with

We use a small number of providers (processors) to run Soira. They process data only on our instructions and under their own security and data-protection obligations:

• An AI provider: generates Lumi's responses, as described above.
• Cloud hosting and database providers: run the Soira application and store its data.
• A content delivery and security provider: delivers the service reliably and helps protect it.
• An email provider: sends transactional email (it sees the recipient address and email content).
• An error-monitoring provider: helps us detect and diagnose technical issues.
• Analytics providers: Google Analytics (only with your consent, and never with your diary, child, or Care Circle information) and a privacy-focused, cookieless analytics provider on our public pages, help us understand how Soira is used so we can improve it.
• Subscription and payment providers: manage subscriptions and process payments. In-app purchases on mobile are also handled by the Apple App Store or Google Play.
• Apple and Google: only if you choose to sign in with them.

International data transfers

Some of our providers process data in countries other than the one you live in. Wherever your personal data is processed, we rely on appropriate safeguards, such as standard contractual clauses and data-processing agreements, to protect it consistent with this policy and applicable law.

Data retention and deletion

We keep your information for as long as your account is active. You can delete your account and all associated data at any time from Settings. When you delete your account it enters a 30-day grace period during which signing back in cancels the deletion; after the grace period the data is permanently and irreversibly removed, except limited records we must keep to meet legal, tax, or accounting obligations (for example, transaction records), which we retain only for as long as required and then delete. In addition:

• Free-tier Lumi conversations are purged after about 7 days.
• Accounts with no sign-in for 24 months may be flagged for deletion after notice.
• Security audit-log entries are kept for up to 1 year.
• We retain irreversibly anonymised, aggregate statistics that cannot identify you or your child; because they are no longer personal data, they are not subject to deletion.

Your rights

Depending on where you live, you may have the right to access, correct, export (data portability), or delete your personal data, to object to or restrict certain processing, and to withdraw consent at any time without affecting processing already carried out. You can delete your account directly in Settings, and you can download a machine-readable export of your data from your account. For any other request, email us at hello@soira.ai and we will respond within the time required by applicable law. You also have the right to lodge a complaint with your local data-protection authority.

A single global standard

Wherever you live, we apply one high standard of protection and honour the data-protection rights available to you under the laws that apply to you. These commonly include the rights described in “Your rights” above. We do not sell your personal information, and we do not share it for advertising. Where local law grants you additional rights, we honour those as well.

Data breaches

If a personal-data breach occurs that is likely to affect you, we will notify the relevant data-protection authority and, where required, affected users without undue delay and in line with applicable law.

Changes to this policy

We may update this policy as Soira evolves. When we make material changes, we will update the effective date above and, where appropriate, notify you.

Contact

For any privacy question or request, contact us at hello@soira.ai.