Privacy Policy

Directly from you:

• Account details: full name, email address, password (stored as a bcrypt hash — we never store or see your plain-text password).
• Profile details: age, gender, city, bio, interests, relationship goal, and an optional profile photo.
• Your AI interview answers, so we can write your personality report and explain your matches.
• Messages you send to other members, and reports you file against them.
• Payment details when you upgrade — handled entirely by our payment processor (Stripe or Razorpay, depending on your region). We never see or store your card details.

Automatically:

• Basic technical data needed to run the service and keep it safe: IP address (for rate-limiting and abuse prevention), timestamps of activity, and error reports if something breaks.
• A session token stored in your browser's local storage, so you stay signed in. We don't use tracking or advertising cookies.

• To run the core product: create your profile, run the AI interview, work out and explain matches, and deliver messages.
• To keep the platform safe: reviewing reports, blocking abusive accounts, and rate-limiting to stop spam and account takeover attempts.
• To send account and safety email — verification, password reset, match and message notifications, receipts. You can turn optional notification email off in Settings; security email (like a password-change confirmation) always sends.
• To process payments for Premium plans, if you choose to upgrade.

Every photo you upload is decoded and re-encoded on our server before it's stored or shown to anyone — this strips all embedded metadata, including GPS location, from the file. Photos are stored either on our own server or on Cloudinary, depending on how this instance is configured; either way, the same processing happens first.

We don't sell your data. It's shared only with the outside services that make the product work:

• AI providers (Groq, Google Gemini, OpenAI, or Anthropic, depending on configuration) — your interview answers are sent to generate your report and match explanations.
• Our email provider (Brevo, or an SMTP relay) — to deliver the emails described above.
• Our payment processor (Stripe or Razorpay) — to process a Premium upgrade.
• Cloudinary — if this instance stores photos there instead of on our own server.
• An error-tracking service, if one is configured — to catch and fix bugs. Error reports never include message content or passwords.

Other members only ever see your public profile (name, age, city, photo, bio, interests) and what you have in common with them — never your interview answers or full report.

We keep your account and its data for as long as your account exists. Payment records are the one exception: we keep those (identified only by an internal account id, not your name) after an account is deleted, for accounting and tax purposes.

From Settings, at any time:

• Change your password, or sign out of every device at once.
• Turn off optional notification and marketing-style email, category by category.
• Block or unblock another member, or report a conversation.
• Delete your account permanently — this removes your profile, matches, conversations, messages, likes, and photo. See Terms for what this doesn't undo.

Want a copy of your data, or have a question about what we hold? Email support@soulsync.app and we'll help.

SoulSync is for adults. You must be at least 18 years old to create an account, and we don't knowingly collect data from anyone younger.

If this policy changes in a meaningful way, we'll update the date at the top of this page.

Questions about this policy or your data: support@soulsync.app.