Privacy policy

Last updated 28 September 2026

This policy explains what data Soh̄a AI handles and why. The data controller is Michel Abi Fadel (trade name Abstracto, product Soh̄a AI), SIRET 879 849 164 00030, 45 rue François Coulet, 34000 Montpellier, France. Contact: contact@soha-ai.app.

What we collect

  • Meal content you submit: photos, voice recordings, text notes and the chat messages used to analyze your meals, plus the resulting meals, saved labels, recipes and estimates.
  • Profile information you enter: sex, birth year, height, weight, goals, activity level and meal times.
  • Account information (optional): if you sign in with Apple or Google, we receive your email address (or Apple's private relay address) and a provider identifier. You can use the app without signing in.
  • Apple Health / Health Connect data (optional, only if you connect it): steps, distance, active energy, resting energy (basal metabolic rate), total energy burned, workouts, and weight. We only read it, and never write to Apple Health or Health Connect.
  • Notification token: if you allow notifications, an identifier for your phone used to send meal reminders.
  • Access code and usage events: the access code you enter (web only), a random device identifier, your IP address, and events such as app opens, meals logged and AI requests (type, status and duration), used to operate and improve the service, prevent abuse and monitor costs. These logs contain no photos or profile.
  • Subscription status: if you subscribe in the app, whether you have an active subscription or free trial, its plan, and its renewal and end dates, to unlock the paid features. Payment is handled by Apple or Google: we never receive your card number.

Where your data is stored

Your meals, profile, goals and library are kept on your device and synced to our servers (Cloudflare, data stored in the European Union) so they follow your account and survive a change of phone. Photos are stored in Cloudflare object storage, and usage events in a separate Cloudflare database. Data is encrypted in transit and at rest.

Third parties that process data

To provide the features, some data is sent to service providers acting on our behalf. By using the app features below, you agree that this data is sent to them:

  • OpenAI (USA): meal photos, text and questions, to analyze meals and answer questions in the chat. The app asks for your consent before the first photo or voice note is sent.
  • Speechmatics (UK): voice recordings, to convert speech to text.
  • Cloudflare (USA): hosting, the database and photo storage.
  • Apple and Google: sign-in (Sign in with Apple, Google Sign-In) and push notifications (Apple Push Notification service, Firebase Cloud Messaging).
  • Apple (App Store) and Google (Google Play): sell and bill in-app subscriptions. RevenueCat (USA): manages subscription status for us; it receives your account identifier (a random id, not your name or email) and your store purchase records.

We do not sell your data and we do not use it for advertising or tracking across other apps or websites. Your Apple Health / Health Connect data is never sent to OpenAI, Speechmatics or any advertiser. Some providers are located outside the European Union, so your data may be transferred abroad under the safeguards those providers offer.

Why we use it (legal basis)

To provide the service you request (contract), to secure and improve it (legitimate interest), and for optional features such as Apple Health / Health Connect and notifications, based on your consent, which you can withdraw at any time in the app.

How long we keep it

Your account data is kept until you delete your account. Meals you delete are hidden from the app and permanently erased when the account is deleted. Usage logs are kept for up to 12 months, then deleted or anonymized.

Your rights

You can ask to access, correct, delete, or export your data, or object to its processing. Write to contact@soha-ai.app. You can delete your account and all its data at any time in the app (Settings, then Account, then “Delete account and data”), or see Delete your account. You can disconnect Apple Health / Health Connect in Settings and choose to erase the activity already stored. You may also lodge a complaint with the CNIL (cnil.fr) or your local data protection authority.

Health information

Food, weight, goal and activity information may reveal health-related details. We use it only to provide the features you request (for example adjusting your daily calorie target from your measured activity) and never sell it. Calorie figures are estimates, not medical advice.

Children

The service is not intended for children under 16.

Changes

We will update this page when our practices change and show the date at the top.