Privacy Policy

Account information: your name, email address, role (owner or caregiver), and hashed password. We never store passwords in plain text.

Pet and wellness data you provide: pet profiles, daily check-ins, wellness logs, rituals, bond scores, reports, photos, and notes. This data exists solely so the service can work for you.

Support data: support tickets, messages, and any files you attach.

Billing data: subscription plan and transaction records. Card details are collected and stored by Stripe, our PCI DSS-compliant payment processor — Soula Paws never sees or stores your full card number.

Technical data: IP address, request identifiers, and security logs used for fraud prevention, rate limiting, and audit trails.

To provide the service: bond scores, AI insights, reports, care-circle coordination, and support.

To process AI features: relevant pet context you provide may be sent to our AI model providers strictly to generate the response you requested. AI outputs are observation-based and never a diagnosis.

To communicate with you: transactional emails (welcome, billing, support replies) via our email processor. We do not send third-party marketing.

To secure the platform: abuse prevention, brute-force protection, rate limiting, and audit logging.

Service providers acting on our instructions only: Stripe (payments), Resend (transactional email), cloud infrastructure hosting, and AI model providers (for AI features you invoke).

People you explicitly authorize: care-circle members you invite, and report recipients you consent to share with. Nothing is shared without your consent.

Legal requirements: we may disclose information if required by law, court order, or to protect the safety of people or animals.

We do not sell, rent, or trade your personal information. Ever.

We keep your data while your account is active. Records you delete are soft-deleted immediately and purged on a rolling basis.

You can export a full copy of your data anytime from Privacy & Consent → Export my data.

You can request full account deletion from Privacy & Consent. Deletion requests are verified by a human and confirmed with you before anything is removed.

Depending on where you live (including GDPR and CCPA/CPRA jurisdictions), you may have rights to access, correct, export, restrict, or delete your personal information, and to non-discrimination for exercising those rights.

You can exercise these rights directly in the app (Privacy & Consent) or by emailing luminasoula@gmail.com. We respond within 30 days.

Data is encrypted in transit (TLS). Passwords are hashed with bcrypt. Access is role-based and audit-logged. See our Security & Compliance page for the full program.

Soula Paws is not directed to children under 13 (or under 16 in the EEA), and we do not knowingly collect their data. Accounts require users to be 18 or older.

We will notify you of material changes to this policy by email or in-app notice before they take effect.

Contact: luminasoula@gmail.com — Soula Paws Privacy Team.