Privacy Policy

Last updated: 19 July 2026 · Effective: 19 July 2026

This Privacy Policy explains what personal data Soilse (the mobile app and this website) collects, why we collect it, who we share it with, how long we keep it, and the rights you have. We've tried to describe every data point and every third party we rely on. If anything is unclear, contact us — details are at the end.

1. Who we are

Soilse ("Soilse", "we", "us", "our") is operated by [OPERATOR NAME], [ADDRESS], Hungary. For the purposes of the EU General Data Protection Regulation (GDPR) and the UK GDPR, we are the data controller of the personal data described in this policy.

You can reach us about privacy at privacy@soilse.com.

2. Scope of this policy

This policy applies to:

• the Soilse mobile app for iOS and Android;
• the Soilse website at soilse.com, including the launch waitlist; and
• any related emails, notifications and support we provide.

It does not apply to third-party services we link to or rely on, which have their own privacy policies (see section 7).

3. Information we collect

3.1 Information you give us directly

• Account & identity: your email address, a password (which we never store in plain text — it is hashed by our authentication provider), your display name, and your date of birth (collected when you create an account to confirm you meet our minimum age requirement — see our Terms).
• Profile & preferences: your chosen currency, language, light/dark theme, and a profile avatar (an icon and colour you choose; if you upload a picture it is stored in our secure file storage).
• Financial information you enter yourself: the accounts, balances, assets and liabilities you add to your Net Worth; the monthly income, spending and saving figures you record (including when you ask the coach to log them for you); your savings goals (name, target amount, amount saved, notes, icon) and any savings plan (how often and how much you plan to deposit); and, in Family Mode, a shared monthly budget. These figures are typed in by you. Soilse does not connect to your bank, does not use open-banking/PSD2 aggregation, and never receives your banking login or credentials.
• AI coach messages: the questions and messages you send to the coach, and facts you ask it to remember about you ("coach memory").
• Chat messages: the messages you post in Family chat (a group chat shared with everyone in your family) and in a 1-to-1 Friend chat with a friend you've connected with. We store the text of these messages on our servers so they can be delivered to, and read by, the other people in that family or friendship.
• Family invitations: if you invite someone to your family, the email address you enter for them, and the in-family name/role (adult or child) and colour you assign.
• Friends & shared goals: to add a friend you enter their email address to send a friend request; if they accept, a 1-to-1 friendship links your two accounts. You can create shared goals with a friend (name, icon, target amount, amount saved and any savings plan), which are visible to that friend — either of you can propose one and the other accepts.
• Support & correspondence: anything you send us by email.
• Waitlist (website): the email address you submit to be notified at launch.

3.2 Information created as you use Soilse

• Your Money Score (a 0–100 figure our software calculates from the accounts and goals you enter).
• Learning progress & gamification: which lessons you've completed, daily-quiz activity, XP, level, and streak count.
• Coach chat history and usage: saved conversations (kept for a limited window — see retention) and a per-day count of coach messages used (to enforce your plan's daily limit).
• Notifications: in-app notification records (we store an event type and minimal data, e.g. "a family member joined" — not free-form text), and the read/unread state.
• Family & subscription state: family membership links and points, and your plan (Standard or Premium).

3.3 Information collected automatically

• Device & technical data: basic technical information needed to deliver the service, such as app version, device/operating-system type, and network information.
• IP address: your IP is processed transiently by our infrastructure and service providers to deliver requests and prevent abuse. For the website waitlist and certain security counters, we do not store your raw IP — we store only a salted, one-way hash of it, which we use solely for rate-limiting (to stop spam and abuse) and cannot be reversed into your address.
• Push notification tokens: if you enable push notifications, a device push token so we can deliver them.
• Diagnostic logs: our servers keep short-lived operational logs (e.g. request status and errors) to run and secure the service.

3.4 Information we receive from third parties

• Payment status from our payment processor, Stripe, when you subscribe to Premium (e.g. that a subscription started, renewed or was cancelled, and Stripe's customer/subscription identifiers). We never receive or store your full card number — Stripe handles that directly.
• Where you install the app from an app store, limited purchase/subscription confirmation as required to provide the service.
• Identity from Apple or Google — if you choose "Continue with Apple" or "Continue with Google" to sign in, the name and email address they share so we can create or sign you into your account. Apple may supply a private "hide my email" relay address instead of your real one. These sign-in options are optional; you can always use an email and password instead.

3.5 What we do not collect

• No bank connections, bank credentials, or automatic transaction feeds — all financial data is entered manually by you.
• No full payment-card numbers (handled by Stripe).
• No precise location, no access to your contacts, camera or photos beyond an avatar you choose to add.
• No advertising identifiers, no ad networks, no analytics or tracking pixels, no behavioural profiling for advertising.
• We do not sell your personal data, and we do not share it for cross-context behavioural advertising.

4. Full data inventory

For transparency, here is essentially everything we store, where, and why.

5. The AI coach & automated processing

Soilse's coach is an AI assistant. To answer you, we send your message, relevant context you've chosen to share (which can include figures from your accounts and goals and the "coach memory" facts you've saved) and a system prompt to our AI provider, Anthropic, which runs the model. When a question needs current information, the coach may perform a web search through Anthropic's search tool; the search query (not your identity) is sent to that search provider.

The coach also runs an offline "finance brain" built into the app that can answer common questions without contacting any server.

The coach provides general information and guidance, not professional financial, investment, tax or legal advice, and it does not make automated decisions that produce legal or similarly significant effects about you. See our Terms of Service for the full disclaimer. We do not use your coach conversations to train third-party AI models; Anthropic processes them to return a response under its API terms.

6. How and why we use your information (legal bases)

Under the GDPR we must have a legal basis for each use. Here they are:

7. Third parties & subprocessors

We keep the number of providers small. We share personal data only with the processors below, only as needed to run Soilse, and each is bound to protect it. We do not sell data or share it with advertisers.

We may also disclose data if required by law, to protect our rights or users' safety, or in connection with a business transfer (e.g. merger or acquisition), in which case we'll notify you and this policy will continue to protect your data.

8. Information shared with other users (Family & Friends)

Family Mode and Friends are social features: when you use them, some of your information is shown to the specific people you connect with. This is not a sale and not sharing with advertisers — it's the feature working as you'd expect — but we want to be clear about exactly what becomes visible, and to whom.

8.1 Family Mode

• Leaderboard: your display name and your points (XP) are visible to every member of your family.
• Group chat: messages you post are visible to all current members of that family. If you leave or are removed you lose access to the chat, but messages you already sent remain visible to the others.
• Shared budget & roster: the shared monthly budget and the member list (names, roles, points) are visible to members.
• Invitations: the email you enter to invite someone is used to send their invite; once they accept, they can see the shared family information above.

8.2 Friends

• Friend requests: to add a friend you enter their email. If an account exists for it, that person receives your request and can see your name — which also tells them you use Soilse.
• 1-on-1 chat: messages in a friendship are visible to both people in it.
• Shared goals: a goal you share with a friend — its name, icon, target and amount saved — is visible to that friend, who can also contribute to and edit it.

Each friend chat and shared goal is private to the two people in that friendship; your other friends can't see it. You can remove a friend or leave a family at any time, which ends further sharing. Please treat these spaces like any shared conversation — don't post anything you wouldn't want the other people in that family or friendship to see.

9. International data transfers

Some of our providers (including Anthropic, Stripe, Expo and Google) are based in, or process data in, the United States or other countries outside the EEA/UK. Where we transfer personal data outside the EEA/UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses and, where available, the provider's certification under an approved framework. You can ask us for more detail using the contact below.

10. How long we keep data

Deleting your account is permanent. When you confirm deletion (via a code we email you), we erase your account and all associated data, including your avatar, family links and coach history. This cannot be undone.

11. How we protect your data

• Encryption in transit: all traffic uses HTTPS/TLS.
• Two-step sign-in: password plus a one-time code emailed to you, verified server-side.
• Row-Level Security: our database enforces per-user access rules, so you can only reach your own data plus the shared spaces you opt into. When you join a family or accept a 1-to-1 friend request, the others in that space can see what's shared there — the family group chat, a 1-to-1 friend chat, and any goals you share with that friend. No one outside those spaces can reach your data.
• Least privilege: sensitive tables (deletion codes, security counters, the waitlist email list) are locked so they can only be touched by trusted server-side functions — not by the public API key shipped in the app.
• Hashing: passwords, deletion codes and IP addresses used for rate-limiting are stored only as hashes.
• Abuse controls: rate limits and signed webhooks protect against spam and tampering.

No system is perfectly secure, but we take these measures seriously and keep them under review. If a data breach affects your rights, we will notify you and the relevant authority as required by law.

12. Your rights

If you are in the EEA or UK, you have the right to: access your data; correct inaccurate data; erase your data ("right to be forgotten"); restrict or object to certain processing; data portability; and to withdraw consent at any time (without affecting prior processing). You will not be treated differently for exercising these rights.

You can exercise most of these directly in the app — edit your profile and data, export a copy of your data, and permanently delete your account from Profile → Danger zone. For anything else, email privacy@soilse.com and we'll respond within the timeframe the law requires (generally one month).

If you are in California, you have rights under the CCPA/CPRA to know, delete, and correct your personal information, and to opt out of "sale" or "sharing" — note we do not sell or share your personal information for cross-context behavioural advertising.

You also have the right to lodge a complaint with a supervisory authority. In Hungary this is the Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH); you may also contact the authority in your country of residence.

13. Children & family mode

Soilse accounts are intended for adults (18+, or the age of majority where you live). We do not knowingly create accounts for, or knowingly collect personal data directly from, children under 16.

Family Mode lets an adult account holder add family members, including labelling a member as a "child" and tracking shared points. When you add or invite someone, you are responsible for having the right to share their information (such as their email) and, where the member is a child, for providing any parental consent and supervision required by law in your country. If you believe a child's data has been provided to us without proper authority, contact us and we will delete it.

14. Marketing & the waitlist

If you join the website waitlist, we use your email only to send a confirmation and a single notification when Soilse launches — not for ongoing marketing. Every email includes a way to opt out, and you can ask us to remove you at any time by emailing privacy@soilse.com. We do not add you to any advertising lists and we do not share the waitlist with anyone.

15. Cookies & local storage

This website does not use cookies, analytics, or tracking of any kind. It loads fonts from Google Fonts (which involves a standard request to Google that includes your IP — see the third-party table). The waitlist form talks only to our own backend.

The mobile app stores data locally on your device (using your device's secure storage for login tokens, and standard app storage to cache your chat, usage and preferences) so it can keep you signed in and run quickly. This local data stays on your device and is removed when you sign out or uninstall.

16. Changes to this policy

We may update this policy as Soilse evolves. When we make material changes, we'll update the "Last updated" date and, where appropriate, notify you in the app or by email. Continuing to use Soilse after an update means you accept the revised policy.

17. Contact & complaints

Questions, requests, or complaints about privacy? Email privacy@soilse.com or write to [OPERATOR NAME], [ADDRESS], Hungary. We're happy to help, and we'd always rather hear from you first — but you can also complain to your data protection authority as noted above.

Read our Terms of Service →