Solia Privacy Policy
Version 1.0 — updated 2026-10-01. Status: DRAFT for test-cohort use; not approved for public launch while [OPERATOR LEGAL NAME] remains unresolved.
Operator: Solia ([OPERATOR LEGAL NAME]), Ontario, Canada. Contact: privacy@getsolia.com. We plan to incorporate; if the operator changes, we will update this policy and notify users as required.
Scope
Solia is a personal planning app for users age 16 and older. It provides scheduling, fitness and nutrition tracking, social and messaging features, and AI-generated coaching, scores, and rankings. We do not knowingly collect data from children under 16.
Data we collect
We collect data you provide in the app and data needed to operate and secure it. We do not buy data from brokers or track you across other apps or websites.
| Category | Examples | Purpose |
|---|---|---|
| Account | Email when provided, Google or Apple account identifier, username/display name, birthdate | Sign-in, account recovery, identity, age gate |
| Profile | Goals, constraints, coach notes, sleep pattern, weight, height, biology, fitness preferences | Personalization and coaching |
| Schedule | Planned and actual blocks, templates, recurring patterns, sleep times, day anchors | Core scheduling |
| To-dos and tasks | Your to-do lists, what you marked done, partly done or skipped and your notes about it, your tasks and their progress notes | Show your lists, record what happened, and let Pluto plan, carry over and grade your to-dos in coaching |
| Fitness and nutrition | Workouts, exercises, sets, loads, weigh-ins, meals, food searches, workout and meal photos | Tracking, history, estimates |
| Voice | Microphone audio, its transcription, and your conversation with Pluto when you use voice commands | Transcribe and execute the request. Speech is transcribed by Apple or Google speech recognition on your device, or by OpenAI on our servers when that is unavailable; Solia does not store the source audio. The transcript and Pluto’s replies are kept with your schedule (see Retention and deletion) |
| Location | Places you explicitly save using while-in-use permission | Attach places to blocks and estimate commutes; no background location |
| Social and communications | Follows, profile header, stories, direct/group/business messages, reactions, read receipts, memberships, shared photos/videos, avatars, and backgrounds | Social, messaging, group, and business features |
| Device and security | Random install ID, push token, platform, timezone, app version, IP address and authentication/action events | Sessions, notifications, rate limits, fraud and abuse prevention |
| Reports and scores | AI coaching reports, LifeScores, ranks, match results | Core product features |
| Support and moderation | Bug reports and content/account reports | Support, safety, and abuse review |
We do not collect contacts, advertising identifiers, browsing history, or analytics/crash telemetry. If those practices change, we will update this policy and the store declarations first.
How we use and disclose data
- Supabase hosts authentication, databases, file storage, and server functions in the United States.
- Anthropic processes the text of your voice commands and your conversation with Pluto (never the audio), together with the schedule, to-do lists, tasks, preferences, and goals needed to act on them, and serves as a backup provider for planning and coaching requests. Solia does not opt API data into model training.
- OpenAI processes voice audio for transcription when on-device recognition is unavailable, and selected commands, photos, schedule, to-do lists and tasks, fitness, nutrition, goals, and notes used to generate requested estimates and coaching. Solia does not opt API data into model training.
- Apple and Google speech recognition transcribes your voice on the device, or through the platform’s speech service according to your device settings, when you use live voice input.
- Google and Apple provide sign-in. We receive a provider identifier and, when supplied, an email address; we never receive the provider password. Apple’s Hide My Email may supply a relay address instead.
- Expo, Apple, and Google route push notifications.
- Apple Maps powers saved-place commute estimates and directions when used.
We use these processors to provide the listed services. We do not sell or rent personal data, use it for targeted advertising, or show ads. AI outputs are automated and are not professional, medical, nutritional, financial, or legal advice.
Visibility
- Other users can see your profile header. Public accounts accept followers automatically; private accounts approve them.
- Stories are shown to followers and leave the feed after 24 hours.
- Direct messages are visible to their two participants. Group and business content is visible to the relevant members.
- Leaderboards expose username, avatar, rank, tier, scores, match results, and AI-written summary drivers, not the underlying details of your day.
Retention and deletion
- Active account: data is kept while needed for the account, history, shared features, security, and the purposes above.
- Account deletion: the in-app Delete account flow removes the authentication record and account-owned profile, schedule, to-dos and tasks, fitness, nutrition, social, scores, coaching reports, and storage data. You can also contact privacy@getsolia.com; we may require identity verification.
- One-to-one messages: deleting either participant’s account deletes the entire private one-to-one thread and pair background for both participants, including messages the other participant sent in that thread.
- Shared groups and businesses: a group or business with remaining members survives. Ownership transfers to a remaining member; the departing user’s membership and account-linked content are removed, and exact account identifiers embedded in surviving records are cleared or scrubbed. A group or business with no remaining member may be deleted.
- Other-user and safety records: another user’s match-history row may remain without a live link to the deleted profile. A moderation report filed by another user may remain for safety review; the deleted account ID is removed and replaced with a random deletion-specific correlation key.
- Delayed cleanup and revocation: deleted direct or group-message media, pair backgrounds, and group avatars or backgrounds can leave a service-only cleanup item containing the storage path and retry metadata. Cleanup is delayed at least 24 hours and runs only after Solia’s current reference checks find no live product reference. Apple accounts can leave a service-only revocation item containing the former account ID, Apple refresh token, and retry metadata until Apple confirms revocation. These restricted work items are retained until successfully processed and are not available to app users.
- Voice transcripts and Pluto conversation: the text of your voice commands and Pluto’s replies is stored with your schedule and Weekly Structure while your account is active. Clear chat in the app removes the conversation, and account deletion removes it with the rest of your data. Solia never stores the audio. A per-request usage record (model, token counts, cost) is kept without the text for billing, limits, and abuse prevention.
- Backups: deleted data may remain in access-restricted backups for up to about 30 days before those backups expire.
Security and local storage
Data is encrypted in transit with HTTPS. Database and storage access use row-level security and explicit private, shared, or public scopes; operational deletion and revocation queues are service-only. Native apps store session material as encrypted data whose key is kept in the platform’s secure storage. The web app stores session material in ordinary browser storage, so users should sign out on shared browsers. No system is perfectly secure; we will provide breach notices when required by law.
Legal bases and transfers
Where a legal basis is required, we rely on contract to provide the requested service; consent for optional microphone, camera/photo, location, notification, and health-related features; and legitimate interests for security, abuse prevention, support, and service reliability. Users can withdraw optional permission consent in device settings or stop using the feature. Scores and coaching do not make decisions with legal or similarly significant effects.
We operate from Canada. Our processors may store or process data in the United States and other locations identified in their terms. Where required, transfers rely on applicable contractual or legal transfer mechanisms.
Your choices and rights
Depending on location, users may have rights to access, receive a portable copy, correct, delete, restrict, or object to processing, withdraw consent, and complain to a regulator. Use the in-app controls or contact privacy@getsolia.com. We respond within the period required by applicable law. We do not discriminate against users for exercising privacy rights.
Permissions
Microphone, camera/photo library, while-in-use location, and notification permissions are optional. Denying a permission disables only the feature that needs it.
Changes
We will identify material updates by version and date, publish them before activation, and request re-acceptance when required.