This policy describes what personal data the SoulQ mobile application (the "app") processes, for what purposes, for how long, and what rights you have. Processing complies with Regulation (EU) 2016/679 (GDPR).
1. Data controller
The data controller is Mikuláš Báča.
Contact: info@soulq.cz
2. What data we process
| Category | Data | Purpose |
|---|---|---|
| Account data | email address, password (stored only in a secured form), username, year of birth; when signing in with Google or Apple, also the identifier and name provided by those services | creating and managing your account, sign-in, password recovery, age-appropriate content |
| Profile photo | a photo you voluntarily upload | displaying it in your profile |
| Journal entries | recorded moods, feelings, their reasons and optional notes | providing the app's core feature — mood journaling, insights and statistics; sync and backup across devices |
| Technical data | device time zone, app settings (e.g. reminder time, theme) | correct scheduling of notifications and app functionality |
Mood and feeling entries may reveal information about your mental state. We therefore treat them with extra care: they are used exclusively to make the app work for you. We never use them for any other purpose, never analyze them for advertising, and never share them with anyone.
3. What we don't do
- We show no ads and use no advertising or marketing tools.
- We do not sell or rent your data to third parties.
- We use no behavioral tracking (third-party analytics or trackers).
- We do not track your location.
4. Legal basis
- Performance of a contract (Art. 6(1)(b) GDPR) — maintaining your account and providing the app's features.
- Consent (Art. 6(1)(a) and Art. 9(2)(a) GDPR) — voluntary recording of moods and feelings and uploading a profile photo. You may withdraw consent at any time by deleting your entries, photo, or the entire account.
- Legitimate interest (Art. 6(1)(f) GDPR) — securing the service and preventing abuse.
5. Where data is stored and who processes it
Some data (entries, settings) is stored directly on your device. Account data and synced data are stored with our contracted processor:
- Supabase (Supabase, Inc.) — database, authentication and file storage. See supabase.com/privacy.
- When you sign in with Google or Apple, those providers process your sign-in data under their own privacy policies.
Where data is transferred outside the European Economic Area, appropriate safeguards under Chapter V of the GDPR (in particular standard contractual clauses) are in place.
6. Retention
We keep your data for as long as your account exists. After account deletion, all your data (account, entries, profile photo) is permanently removed; it disappears from backups within 30 days at the latest. Data stored only on your device is removed by uninstalling the app.
7. Your rights
Under the GDPR you have the right to:
- access your data,
- rectify inaccurate data,
- erasure ("right to be forgotten") — you can delete your account directly in the app, see Delete Account,
- restrict processing and object to processing,
- data portability,
- withdraw consent without affecting the lawfulness of prior processing,
- lodge a complaint with a supervisory authority — in the Czech Republic the Office for Personal Data Protection (ÚOOÚ).
To exercise your rights, contact us at info@soulq.cz. We respond within 30 days at the latest.
8. Security
All communication between the app and the server is encrypted (HTTPS/TLS). Passwords are stored only as cryptographic hashes. Access to data is protected by rules ensuring that only you can access your entries.
9. Children
The app is not intended for children under 13. Users below the age of digital consent in their country may use the app only with the consent of a legal guardian.
10. Disclaimer
The app is intended for personal reflection and mood tracking. It is not a medical device and does not replace professional medical or psychological care.
11. Changes to this policy
We may update this policy from time to time. We will inform you about material changes in the app or by email. The current version is always available on this page.