Privacy policy

Last updated 21 September 2026

This policy explains what data Soh̄a AI handles and why. The data controller is Michel Abi Fadel (trade name Abstracto, product Soh̄a AI), SIRET 879 849 164 00030, 45 rue François Coulet, 34000 Montpellier, France. Contact: contact@soha-ai.app.

What we collect

• Meal content you submit: photos, voice recordings, and text notes used to analyze your meals.
• Profile information you enter: for example sex, birth year, height, weight, goals and activity level. This is stored on your device in your browser.
• Access code and usage events: the access code you enter, a random device identifier, your IP address, and events such as meals logged and AI requests (type, status and duration), used to operate and improve the service and monitor costs.
• Location (optional): if you use the nearby restaurants feature, your approximate location is sent to find places around you.
• Phone number and payment status (when accounts and subscriptions are available): to sign you in (for example through WhatsApp) and to manage your subscription. We do not receive or store your card number.

Where your data is stored

Your meals, profile and library are saved locally in your browser. Clearing your browser data deletes them. Usage events are stored on our server in a Cloudflare database.

Third parties that process data

To provide the features, some data is sent to service providers acting on our behalf. By using the app features below, you agree that this data is sent to them:

• OpenAI (USA): meal photos, text and questions, to analyze meals and answer questions in the chat.
• Speechmatics (UK): voice recordings, to convert speech to text.
• Cloudflare (USA): hosting and the usage database.
• OpenStreetMap Overpass API: coordinates you share, to look up nearby restaurants.
• Meta (WhatsApp) and payment providers such as Stripe: only when sign-in by WhatsApp or online subscription payments are available, to send you login messages and process payments.

Some of these providers are located outside the European Union, so your data may be transferred abroad under the safeguards those providers offer.

Why we use it (legal basis)

To provide the service you request (contract), to secure and improve it (legitimate interest), and for optional features such as location, based on your consent.

How long we keep it

Content on your device stays until you delete it. Server-side usage events are kept only as long as needed to operate the service, then deleted or anonymized.

Your rights

You can ask to access, correct, delete, or export your data, or object to its processing. Write to contact@soha-ai.app. You may also lodge a complaint with the CNIL (cnil.fr) or your local data protection authority.

Health information

Food, weight and goal information may reveal health-related details. We use it only to provide the features you request and never sell it.

Children

The service is not intended for children under 16.

Changes

We will update this page when our practices change and show the date at the top.