Privacy Policy

1. Who we are

SOULGNO OPUS OS ("SOULGNO", "we", "us") is a personal coherence platform operated by SOULGNO Ltd, registered in the United Kingdom. This policy explains how we collect, use, and protect your personal data in compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the EU General Data Protection Regulation (EU GDPR) where applicable.

2. Data we collect

2.1 Account data

When you register, we collect your email address, display name, and hashed password. We never store plaintext passwords.

2.2 Profile & natal data

If you choose to use timing features (Kairos, Dasha, Numerology), we collect your date, time, and place of birth. This data is used solely to compute your personal timing windows and remains on our secured database.

2.3 Session & usage data

We record interactions with the platform — page visits, feature usage, QC ratings, journal entries, and Kaizen move logs — to personalise your experience and improve the system. This data is associated with your account and is never sold.

2.4 Voice & audio data

If you use True Tone or Shruti features, audio is processed locally in your browser for coherence analysis. Raw audio is not transmitted to our servers unless you explicitly choose to save a recording.

2.5 Technical data

We collect standard technical data: IP address (anonymised after 30 days), browser type, device type, and referrer URL. This helps us maintain service quality and security.

3. How we use your data

• To provide and personalise the SOULGNO platform experience
• To compute your coherence scores, timing windows, and recommendations
• To improve the system through aggregated, anonymised analytics
• To communicate with you about your account, updates, and (with your consent) new features
• To protect against fraud and ensure platform security

Legal basis: We process your data under legitimate interest (platform operation), contract performance (service delivery), and consent (optional features and communications).

4. Data storage & security

Your data is stored on encrypted databases hosted by MongoDB Atlas and Railway, with servers located in the EU and US. All connections use TLS 1.2+. Passwords are hashed with PBKDF2-SHA256. Access tokens use HS256-signed JWTs with short expiry windows.

5. Data retention

• Account data: Retained while your account is active. Deleted within 30 days of account deletion request.
• Session logs: Retained for 12 months, then anonymised or deleted.
• Technical logs: IP addresses anonymised after 30 days. Aggregated analytics retained indefinitely.

6. Your rights

Under UK GDPR and EU GDPR, you have the right to:

• Access — Request a copy of all data we hold about you
• Rectification — Correct inaccurate data
• Erasure — Request deletion of your data ("right to be forgotten")
• Portability — Export your data in a machine-readable format
• Restriction — Limit how we process your data
• Object — Object to processing based on legitimate interest
• Withdraw consent — At any time, without affecting prior processing

To exercise any of these rights, email privacy@soulgno.com. We will respond within 30 days.

7. Third-party services

• MongoDB Atlas — Database hosting (data processor)
• Railway — Application hosting (data processor)
• Google Analytics — Anonymised usage analytics (with consent)
• OpenAI / Anthropic — SCRIBE AI assistant processing (no personal data shared; prompts are ephemeral)

8. Cookies

We use minimal cookies. See our Cookie Policy for full details.

9. Children

SOULGNO is not designed for users under 16 years of age. We do not knowingly collect data from children.

10. Changes to this policy

We may update this policy from time to time. Material changes will be communicated via email or in-app notification. The "Effective" date at the top reflects the last update.

11. Contact

Data Controller: SOULGNO Ltd
Email: privacy@soulgno.com

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).