Privacy Policy

Who this policy covers

This policy applies to the SoothBox mobile app and the SoothBox website. SoothBox is the name of the app and the developer for purposes of this policy.

Information handled by the app

Private content on your device

Check-ins, mood and energy selections, notes, journal text, Soothe Boxes and keepsakes (including photos and voice notes you add), Mo chats, feedback about activities, preferences, and care recipes stay on your device, in an encrypted database and the app's private storage. SoothBox does not upload this private content to its servers.

Mo on your phone

With SoothBox Plus you can download a small language model once, from Hugging Face, so Mo can answer in its own words. The model runs on your device; what you write to Mo is not sent to SoothBox or anyone else.

Optional account

An account is optional and made only with Sign in with Apple or Google. If you create one, we store the identifiers that sign-in provides (an account ID, your name and email address, which may be an Apple private relay address), session records, and a link to SoothBox's random purchase identifier, so a subscription can follow you to a new device. The account does not hold your check-ins, journal, keepsakes or Mo chats.

Purchases and subscriptions

If you use paid features, Apple or Google processes the payment; SoothBox does not receive your payment-card details. RevenueCat verifies purchases using a random SoothBox identifier and sends our server purchase events for it, including the product, status, store, country, price and relevant dates. We keep these to confirm entitlements and to keep accurate purchase records.

Backups

Backups are files you create and store wherever you choose. They are encrypted with your passphrase before they leave the app. Recovery codes are kept in your device's secure storage and are never sent to us.

Updates and basic technical data

Expo may deliver app updates and receive the technical request information needed to do so. App stores and service providers may process device, platform, app-version, network, diagnostic, and transaction information under their own policies.

Information you choose to send

If you contact support or send feedback through your mail app, we receive the information you include, such as your email address, message, app version, and any attachments you choose to provide.

Website data

The website does not use advertising cookies or behavioral analytics. Vercel hosts the site and may process standard request data such as IP address, browser details, requested URL, and timestamps for security, reliability, and delivery.

How information is used

• Provide the core self-care experience on your device.
• Verify, restore, and manage paid entitlements, including across devices for people with an account.
• Deliver updates, maintain reliability, prevent abuse, and troubleshoot issues.
• Answer support, privacy, and legal requests you send us.

SoothBox does not sell personal information and does not use journal, check-in or Mo chat content for advertising or to train models.

Sharing

Information is shared only as needed with service providers that operate the product: Apple and Google for store distribution, payments and sign-in; RevenueCat for subscription status; Vercel and Neon for our server and its database; Expo for update delivery; and Hugging Face for the on-device model download. Information may also be disclosed when legally required or to protect users, the public, or the service.

Security, retention, and deletion

SoothBox uses data minimization, encrypts on-device content, blocks unnecessary sensitive device permissions, and disables Android cloud backup for app data. On-device content remains until you remove it using app controls, clear the app's storage, or uninstall the app. Account data is kept until you delete your account in the app. Purchase records are kept as long as needed for billing, fraud prevention, tax and legal obligations. Support correspondence is kept only as long as reasonably needed.

See the data deletion page for practical steps.

Children

SoothBox is not directed to children under 13, or the minimum digital-consent age in their country. We do not knowingly collect personal information from children.

Your choices and rights

You can use SoothBox without an account, avoid optional paid features, decline to send feedback, manage purchases through your app-store account, delete your account, and remove on-device information. Depending on where you live, you may also have rights to access, correct, delete, restrict, or object to processing of personal information we or our service providers hold.

Contact and changes

For privacy questions, contact support@soothbox.app. Material changes will be posted here with a new effective date.