Privacy Policy

This policy explains how Solesia handles personal data through the Solesia iPhone app and the website at https://solesia.app (together, the “Service”). Solesia is a pregnancy companion, so much of what you tell it is health information. We have written this policy to be read, not skimmed, and to say plainly what we do and do not do with what you share.

The data controller is identified in full in Section 15. If you are in Washington, Nevada or Connecticut, Section 9 is the Consumer Health Data Privacy Policy those states require.

1. A few definitions

• Personal data is any information that relates to you as an identifiable person.
• Consumer health data is personal data that identifies your past, present or future physical or mental health status, including pregnancy.
• Processing is anything done with personal data: collecting, storing, using, sharing, deleting.
• Processor or subprocessor is a company that handles data on our behalf and under our instructions.

2. What we collect

Everything below is either what you enter, what the app needs to work, or what a phone sends by default. There is no hidden collection: no contacts, no location, no photos, no advertising identifiers.

2.1 Account

• Your email address and a unique user id, provided by Sign in with Apple or Google through our authentication provider.
• Your first name, only if you choose to share it on your first Apple sign-in, and only used to offer it on the name screen.
• Which sign-in provider you used, and when the account was created.

2.2 Profile and preferences

• The name you asked to be called in the app, if you gave one. A first name is enough.
• Your time zone, so reminders arrive at the time you chose.
• A push notification token for your device, if you allowed notifications, and your reminder settings (on or off, and the time of the daily check-in).

2.3 Your pregnancy

• Your due date, and whether it was given to you or estimated from your last period.
• Whether this is your first pregnancy, if you answered.
• What you asked the app to help with (the goals you ticked during setup).

2.4 Daily log

• For each day you log: your mood, the symptoms you selected, and, if you entered them, your blood pressure and weight.

2.5 Movement counts

• Each counting session: the number of movements, how long it took, and when.

2.6 Appointments and visit questions

• Appointment date, time, type, and how far in advance you want a reminder.
• The questions you save to ask at your next visit, in your words, up to 300 characters each.

2.7 Questions you ask in the app (“Ask”)

• For a guided question: the category you chose, the answers you picked, the pregnancy week you were in, and the outcome the app showed you.
• For a written question: the text you typed, up to 500 characters, and the answer you received. See Section 4 for how written questions are processed.

2.8 Subscription

• Whether your Solesia Pro subscription or free trial is active and until when, as reported by Apple through our subscription provider.
• We never see or store payment details. Your card, billing address and purchase history stay with Apple.

2.9 Technical data

• Crash reports: the error, the screens before it, your device model and iOS version. They contain no name, email or IP address.
• Product analytics: which screens you open and which actions you take (for example “daily log saved”), tagged with your user id, your pregnancy week and trimester. Never the text you write, never your name or email.
• Your IP address, seen briefly by our hosting providers to deliver the Service and protect it from abuse. We do not keep it.

3. Why we use it, and on what basis

We do not use your data for advertising, and the app contains no advertising or tracking SDKs. If that ever changes, this policy will change first, and iOS will ask for your permission before any tracking happens.

4. Written questions and AI

When you ask a written question (“Something else” in Ask), the text you typed, the category, and your pregnancy week are sent to Anthropic’s Claude model to write the answer. That is the only use of AI in the Service, and it happens only when you choose it.

• We do not send your name, email, user id, push token, IP address or any device identifier. The model does not know who is asking.
• The model is instructed to treat your text as untrusted, to answer about pregnancy only, and never to include personal details in the answer.
• Anthropic’s API terms exclude your inputs and the answers from being used to train its models. We cannot control a third party beyond its contractual commitments, so please do not include other people’s personal details in a question.
• The guided questions in Ask do not use AI at all; they follow fixed rules.

5. Where your data lives, and who processes it

Your account and everything in Sections 2.1 to 2.8 are stored in a database hosted in the European Union (Ireland). The companies below process data for us, each for one job:

Where data leaves the European Economic Area, we rely on the Standard Contractual Clauses approved by the European Commission and on each provider’s data processing agreement, and on the EU–US Data Privacy Framework where the provider is certified. You can request a copy of the safeguards at support@solesia.app.

6. How long we keep it

• While you have an account: everything in Section 2 is kept, because the app reads it back to you. The daily log is what lets the app learn what is usual for you.
• When you delete your account, from Settings → “Delete my account and data”: your request is recorded and emailed to us, the app closes for you immediately, and we permanently delete your account and every record attached to it within 30 days. Nothing is kept.
• Backups of the database roll over on a schedule of roughly 30 days; deleted data expires from them on that schedule and is never restored.
• Crash reports are kept for about 90 days. Analytics events are kept according to PostHog’s standard retention.
• Written questions are kept in your history so you can read them again; they go when your account goes. Anthropic does not retain them beyond what its API terms allow for abuse monitoring.

7. Who we share it with

Only the processors in Section 5, each for its stated purpose. We do not sell personal data, we do not share it for advertising, and we do not give it to data brokers, insurers, employers or anyone else. We would disclose data if the law required it, and we would tell you unless the law forbade it.

8. Your rights

Wherever you live, you can ask us to show you your data, correct it, delete it, or stop using it for a particular purpose, and we will answer within 30 days. Specific laws add the following.

European Union and United Kingdom (GDPR)

• Access, rectification, erasure, restriction, portability and objection.
• Withdrawal of consent at any time, for example by turning reminders off in Settings.
• A complaint to the Spanish Data Protection Agency (Agencia Española de Protección de Datos, aepd.es) or to your local supervisory authority.

California (CCPA / CPRA)

• The right to know, delete and correct, and the right not to be discriminated against for exercising your rights.
• We do not “sell” or “share” personal data as those terms are defined in the CCPA, so there is nothing to opt out of. We do not use sensitive personal information to infer characteristics about you beyond what the Service itself does.

Other US states

Residents of states with consumer privacy laws (including Colorado, Connecticut, Virginia, Utah, Texas and Oregon) have similar rights to access, correct, delete and port their data, and to appeal a decision. Health data collected by the Service is processed only with your consent, which you give by entering it and can withdraw by deleting it or your account.

How to exercise them

• Delete everything: in the app, Settings → “Delete my account and data”.
• Anything else: email support@solesia.app from the address on your account. We may ask you to confirm it is you. You may also authorize someone to act for you; we will verify the authorization.
• If we decline a request, we will say why, and you may appeal by replying to that email.

9. Consumer Health Data Privacy Policy

This section applies to residents of Washington (My Health My Data Act), Nevada and Connecticut, and to anyone who wants the short version.

• Categories of consumer health data collected: pregnancy status and due date, daily mood and symptoms, blood pressure and weight if entered, fetal movement counts, appointment details, the questions you ask and the answers you receive, and the pregnancy week attached to analytics events.
• Sources: you. Everything comes from what you enter in the app.
• Purposes: providing the Service you asked for, as described in Sections 2 and 3. Nothing else.
• Sharing: only with the processors in Section 5, to provide the Service. We do not sell consumer health data, and we do not share it for advertising.
• Your rights: to confirm whether we collect your consumer health data, to access it, to withdraw consent, and to have it deleted, including from our processors and backups on their retention schedule. Exercise them as described in Section 8; we answer within 45 days.
• No geofencing: the Service does not collect location and does not use geofences.

10. Children

The Service is for adults. It is not directed at anyone under 18, and we do not knowingly collect data from anyone under 13. If you believe a child has used the Service, write to support@solesia.app and we will delete the data.

11. Security

• All traffic is encrypted in transit (TLS), and the database is encrypted at rest.
• Every row in the database is protected by row-level security: your session can only read and write your own data, enforced by the database itself, not only by the app.
• Your session is stored in the iPhone Keychain. We never see a password: Apple and Google handle sign-in.
• Keys for AI, subscriptions and email live only on our servers, never in the app.
• We never handle payment data.

No system is perfectly secure. If we learn of a breach affecting your data, we will notify you and the relevant authorities as the law requires.

12. Not medical advice

Solesia gives general information about pregnancy and calm, plain-language guidance about when something is worth a call. It is not a medical device and it does not replace your doctor, midwife or nurse. The Terms of Use say more.

13. Cookies and tracking

• This website sets no cookies and runs no analytics. There is nothing to consent to and no banner to dismiss.
• The app uses no advertising identifier and does not show Apple’s tracking prompt, because it does not track you across other apps or websites.

14. Changes to this policy

If we change what we collect or how we use it, we will update this page and tell you in the app before the change takes effect. The date at the top is the date of the current version.

15. Contact and data controller

The data controller for the Service is:

• Román Zukov, sole proprietor (autónomo) registered in Spain
• Tax ID (NIF): X7038822V
• Av. Novo Mesoiro, 18, 2A, 15190 A Coruña, Spain
• Email: support@solesia.app

This identification is provided in compliance with article 10 of Spain’s Law 34/2002 on Information Society Services and Electronic Commerce (LSSI-CE).