Last updated: 17 August 2026
Soria ("we", "us", "our") is committed to protecting your privacy. This policy explains what data we collect, why, and how we handle it across both the Soria mobile app and our waitlist website.
Soria is operated by Sam Tuxworth, a sole trader trading as Soria, of 38 Drumnasoo Road, Portadown, Craigavon, BT62 4EU, United Kingdom. I am the data controller for the personal data described in this policy, and you can reach me at hello@getsoria.app.
Soria stores the data you log. Depending on which modules you enable, this may include: spending and income, food intake and nutrition, exercise activity, time-of-day logs, sleep, hydration, mood, energy, stress, gratitude, habits, journal entries, and goals.
If you grant Apple Health permissions, Soria reads workouts, steps, sleep, and active-energy data to populate your dashboard. Health data is never written back to Apple Health, never shared with third parties, and never used to train AI models. You can revoke Health access any time in iOS Settings → Privacy → Health → Soria.
When you use Soria's natural-language input ("I spent £15 on lunch"), the text is sent to Anthropic's Claude API for parsing. The same applies to AI features you invoke — monthly recaps, the AI coach, and nutrition suggestions, which send the relevant logged data to generate your summary or reply. Inputs are not stored by Anthropic and are not used for model training (per Anthropic's enterprise data terms).
Voice input is transcribed on your device using Apple's speech recognition — audio never leaves your phone; only the resulting text goes to the AI parser, exactly as if you had typed it.
If you connect Strava, Soria reads your activities (type, distance, duration, date) to populate your exercise log. We never post to Strava. Disconnect any time in Settings. If you sign in with Google or Apple, we receive only your email address (and name, if you choose to share it) for authentication.
Home-screen widget data is stored locally on your device only and never leaves it.
Your personal data is never used to train AI models for other users.
All data is stored in Supabase (EU region). Encrypted in transit (TLS) and at rest. Row-Level Security ensures only your authenticated account can read your records — even our team cannot read your logs without explicit elevated access (used only for support requests you initiate).
We do not sell, share, or transfer your personal data to advertisers, data brokers, or any third parties for marketing purposes.
Service providers we use to run Soria:
Soria offers one optional auto-renewing subscription, Soria Premium (monthly or annual, with a free trial on the annual plan), processed entirely by Apple's App Store. We do not collect, store, or have access to your payment details. Manage or cancel subscriptions in iOS Settings → [Your Name] → Subscriptions.
You have the right to:
The waitlist website does not use cookies or third-party analytics trackers. The Soria app does not contain any advertising SDKs, marketing analytics SDKs, or trackers — the only diagnostic tool included is Sentry crash reporting (section 4). We may add privacy-respecting product analytics in future and will update this policy with at least 30 days' notice.
Soria is rated 4+ but is not intended for children under 13 (under 16 in the EU). We do not knowingly collect data from minors below these ages. If you believe we have collected such data, contact us and we will delete it promptly.
Data is primarily stored in the EU (Supabase eu-west). API calls to Anthropic and Apple are processed in the United States under Standard Contractual Clauses. By using Soria you consent to these transfers.
We may update this policy as the product evolves. Material changes will be communicated via email and in-app notification. The "Last updated" date above always reflects the latest version.
UK GDPR requires a lawful basis for each use of your personal data. Soria relies on:
If you are unhappy with how your personal data has been handled, please contact me first so I can put it right. You also have the right to complain to the Information Commissioner's Office, the UK's data protection regulator, at ico.org.uk or on 0303 123 1113.
For privacy questions, deletion requests, or to exercise any of your rights, email us at hello@getsoria.app.