Privacy Policy

Effective September 24, 2026 · Version 1.0

At a glance

What we collect

Account information. Your email address, a hashed password (we use the Argon2 algorithm, which is designed so your actual password is never stored or recoverable), timezone, preferred language, a referral code if you used one, and whether you've opted in to marketing messages.

Profile and preferences. Your display name, avatar, bio, default AI model/routing preference, response style, content filter level, and notification toggles. Your avatar is stored in a public location (its link is publicly reachable if shared); everything else here is private to your account.

Device and abuse-prevention signals. To keep the free tier fair and stop abuse, we collect technical signals from the device and browser you use:

Important: if our systems detect that several accounts are using the same device, the free daily usage allowance is shared across those accounts rather than given separately to each one. This is a fraud-prevention measure, not a way of limiting genuinely separate households.

Content you create. Your conversations and messages, AI-generated summaries of long conversations, and any images, video, or documents you generate or upload. Generated files and attachments are stored privately and only ever served to you through short-lived, expiring links — they are not publicly accessible.

Money. Your wallet balance (held in USD), and a record of each deposit and spend. If you deposit in Naira through Flutterwave, we record the Naira amount, the currency, and the exchange rate applied — but we do not store your card number; Flutterwave's own secure checkout handles your card details directly, and we never see them.

Usage. Counters like the number of messages you've sent and tokens used, to enforce your plan/tier and show you your own usage.

Why we collect it and our legal basis

Under the Nigeria Data Protection Act 2023 (NDPA), we process your data on these bases: to perform our contract with you (running the service you signed up for), for our legitimate interests (fraud/abuse prevention, keeping the service secure and running), to comply with legal obligations (e.g. financial record-keeping), and, where you've given it, your consent (e.g. marketing messages, or the "help improve Soulris" toggle described below).

Sharing with third parties

We share the minimum data needed with the following providers so Soulris can work:

Provider What we send What it's for
The underlying AI model provider we route to when necessary Your prompt text and any attachments in that conversation Generating the AI's response. This means your prompt is encrypted and is processed by the core underlying model—
Flutterwave Your email and the deposit amount Processing NGN payments into your wallet
Cloudflare Your generated files/images/video, your avatar Storage and content delivery
OneSignal A unique ID for your account (not your email) Sending push notifications
Google AdMob, MGID Ad requests from the app Showing ads.
Sentry Error reports (no personal data included by default) Fixing bugs when something breaks
Your email address Sending verification and account emails
Google Analytics and similar tools Anonymous usage patterns Understanding how people use Soulris so we can improve it

We do not sell your personal data.

AI training and the "help improve Soulris" toggle

Your profile has an "allow conversation data for improvement" setting, which is off by default. As of this draft, this setting is not yet connected to any active process — turning it on does not currently change how your data is used. We will update this page and notify you before that changes. —

International data transfer

Because AI responses are generated by the core models that power soulris, and because we use cloud infrastructure providers (Cloudflare, and others listed above), your data may be processed outside Nigeria.

Cookies and local storage

Our web app (ai.soultrob.com) uses cookies and/or browser storage to keep you logged in and remember your preferences.

How long we keep your data

Your data is kept indefinitely cause you need them altogether access your chats and media

Security measures

We use industry-standard measures to protect your data, including encrypting passwords with Argon2 (never storing them in plain text), encrypting data in transit with TLS, and restricting internal access to personal data to what's needed to run the service. We also defene ourselves from every known type of security malware and brute force and our system will lock you out if it detects harmful patterns

Your rights

Under the NDPA, you have the right to: know what data we hold about you, ask us to correct inaccurate data, ask us to delete your data (see "Deleting your account" below), object to certain processing, and complain to the Nigeria Data Protection Commission (NDPC) if you believe we've mishandled your data. To exercise any of these, email info @ soultrob .com.

Deleting your account

Email info @ soultrob .com to request account deletion. See our Account Deletion page for what happens next.

Children

Soulris is not intended for anyone under 18 years old, and we do not knowingly collect data from anyone under that age.

Changes to this policy

If we make material changes to this policy, we'll update the version number and effective date at the top of this page.

Contact us

Questions about this policy? Email info @ soultrob .com.