How your information is handled.
Written plainly. The short version is at the top of each section — open one if you want the detail.
SOLISURE is a private mental wellbeing and self-reflection space using CBT- and DBT-informed tools. Almost everything you write stays on the device you write it on. There is no account, and nothing is uploaded unless you choose to use AI-assisted reflection or dictation.
Who we areSOLISURE is the app you are using. It is operated by the app publisher.
The publisher is responsible for how your information is handled in this app. Full company details and a contact route are set out under Contact details below.
What data we collectOnly what the app needs to work: what you write, and your settings.
- Journal entries, reflection answers, saved lines and letters you write.
- Your display name, if you choose to enter one.
- Your preferences, such as theme and region.
- Audio you record, only while it is being turned into text.
- Anonymous product usage events, only if you turn analytics on.
No location, contacts, camera, photo library or health data is collected. No advertising or tracking software is included in the app.
Why we collect itSo the app can show you your own reflections again, and so optional features can work.
Your writing is stored so that you can return to it. Settings are stored so the app behaves the way you left it. Nothing is collected for advertising, profiling or resale.
Lawful basisThis section is being completed with a UK data protection adviser before launch.
Because almost all information stays on your own device and is never transmitted to us, much of it is not processed by us at all. The lawful basis for the parts that are — such as sending text to an AI provider when you ask for AI-assisted reflection — is being confirmed as part of a professional review, and this section will be completed before commercial launch.
Special category dataWhat you write here may reveal information about your mental health, which is treated as highly sensitive.
Journal entries, reflections, emotional check-ins and anything you send for AI-assisted reflection are treated as highly sensitive throughout the app. This content is never included in analytics, never used for advertising, and never appears in error reports.
AI-assisted reflectionOptional. Only the message you choose to send leaves the device.
When you use AI-assisted reflection, the message you send and a small number of recent turns from the same conversation are sent to Lovable AI Gateway to generate a reply. Your name, journal, saved reflections and settings are never sent.
Data sharingYour writing is never sold, shared or used for advertising.
The only circumstance in which content leaves your device is when you personally trigger AI-assisted reflection or dictation. There are no advertising partners, data brokers or social platforms involved in this app.
Data processorsOne: the AI gateway used for optional reflection and transcription.
Lovable AI Gateway processes the text and audio you choose to send, using the model google/gemini-3.6-flash. No other processor receives your content. The processor contract and its safeguards are being reviewed before launch.
International transfersRequests to the AI provider may be processed outside the UK.
Requests are processed by the AI gateway's infrastructure and by the underlying model providers it routes to. The processing location has not been independently verified by us and may involve transfers outside the UK.
Data retentionYour content is kept on your device until you delete it.
- Your settings — Kept on this device until you delete them.
- Journal entries — Kept on this device until you delete them. Never sent anywhere automatically.
- Saved reflections — Kept on this device until you delete them.
- Check-ins — Kept on this device until you delete them.
- Lines you've kept — Kept on this device until you delete them.
- Letters to your future self — Kept on this device until you delete them.
- AI-assisted reflection — Not stored on a server by us. What you choose to keep is saved on this device. Provider-side retention is described in AI and your data.
- Product analytics — Only collected if you turn it on. Held on this device and capped at the most recent events.
- Deleted data — Removed from this device immediately. There is no server copy to restore.
Your rightsYou can see, export, correct and delete everything, at any time, without asking anyone.
Because your information lives on your device, you have direct control over it. You can export a full copy or permanently delete everything from Profile → Privacy & data. You do not need to contact us to do either.
If you believe your information has been mishandled, you may also complain to the Information Commissioner's Office.
Data deletionOne action removes everything the app holds on this device.
Deletion removes journal entries, reflections, check-ins, saved lines, letters, settings, consents and any recordings waiting to be transcribed. It cannot be undone, and there is no server copy to restore.
Data securityContent stays on the device; anything sent is sent over an encrypted connection.
Browser local storage is not encrypted at rest, so anyone with access to this device and browser profile could read what is stored. If you share a device, consider using a device passcode and deleting your data when you are finished. Requests to the AI provider use encrypted connections, and provider credentials are held on the server, never in the app.
ChildrenThis app is designed for adults aged 18 and over.
You are asked to confirm you are 18 or older before using the app. It is not designed for, or directed at, children.
Changes to this policyIf this changes materially, you will be asked to read it again.
Acknowledgements are versioned. If the meaning of this policy changes, the app will ask you to review it rather than quietly updating the text.
Contact detailsA contact route will be published before launch.
A contact address for privacy questions will be published here before commercial launch.
This page describes how the app behaves today. It is not a claim that the app has been certified or approved by any regulator.
Back to Privacy & data