Privacy Policy

1. Information We Collect

We collect the following types of information when you use Solace:

• Account information: Your email address and display name provided during registration.
• Conversation data: Messages you send and receive during coaching sessions with the AI companion.
• Voice data: Audio recordings when you use the voice coaching feature, processed in real-time and not stored long-term.
• Analytics data: Usage patterns, session duration, and feature interactions to help us improve the service.

2. How We Use Your Information

• Service delivery: To provide personalized AI coaching conversations and maintain your session history.
• AI improvement: To improve the quality and safety of AI responses. Conversation data may be used in anonymized, aggregated form.
• Coaching session reviews: To generate periodic reports and insights about your focus and productivity patterns and progress.

3. Data Storage

Your conversations, goals, reminders and other account data are stored in Convex, a managed database platform, with encryption in transit and at rest. Files you upload are stored in a private Cloudflare R2 bucket and are never publicly readable; they are served only through short-lived links generated for you.

Every read and write of your data passes through a server-side authorization layer that resolves the owner from your signed-in identity rather than from anything the app sends, so your records are isolated from other users.

4. Third-Party Services

Solace integrates with the following third-party services to deliver its functionality:

• OpenRouter: Routes your messages to the AI model that generates the coach's replies, and to a second model that extracts notes for your knowledge base. OpenRouter passes your messages to the underlying model provider, which may be OpenAI or Anthropic depending on the model in use.
• Convex: Hosts the database and the server functions that read and write your data.
• Clerk: Handles sign-up, sign-in and account identity, including your email address and any social login you choose to connect.
• Cloudflare R2: Stores files you upload, in a private bucket.
• Deepgram: Provides speech-to-text and text-to-speech for the voice features, including the voice used for call reminders.
• Twilio: Places call reminders and sends the verification code when you add a phone number. Used only if you turn call reminders on.
• PostHog: Product analytics, used to understand how the app is used and to diagnose faults.
• Upstash: Rate limiting, to protect the service from abuse.
• Vercel: Hosts the web application and serves it to your browser.
• Stripe: Processes payments for Pro subscriptions. We do not store your payment card details.

Each third-party service operates under its own privacy policy. We encourage you to review their respective policies.

5. Data Retention and Deletion

We retain your data for as long as your account is active. You may request deletion of your account and all associated data at any time through the settings page or by contacting us. Upon account deletion, we will remove your personal data within 30 days, except where retention is required by law.

6. Cookies

Solace uses cookies strictly for authentication session management. We do not use tracking cookies, advertising cookies, or third-party analytics cookies. The only cookies stored are those necessary to maintain your login session.

7. Children's Privacy

Solace is not intended for use by anyone under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete that information promptly.

8. Security

We take the security of your data seriously. Our measures include:

• Encryption of data in transit (TLS) and at rest
• A server-side authorization layer on every data read and write, which resolves the owner from your signed-in identity rather than from anything the app sends
• Authentication handled by Clerk, an established identity provider
• Uploaded files kept in a private bucket, reachable only through short-lived links generated for you
• Regular review of access controls and security practices

While we strive to protect your information, no method of transmission or storage is completely secure. We cannot guarantee absolute security.

9. Your Rights

You have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate personal data.
• Deletion: Request deletion of your personal data and account.

To exercise any of these rights, please contact us at support@my-solace.app.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised date. Your continued use of Solace after changes are posted constitutes your acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us at support@my-solace.app. You may also review our Terms of Service.