Consumer Health Data Privacy Policy

1. Scope of this policy

This policy applies to Sondomo, a wellbeing service for adults at sondomo.com built around mood check-ins, Vibes, Mind Anchors, Collection, and Journey. It describes the information Sondomo handles when you sign in, choose a vibe and a mood, and receive or save Mind Anchors.

2. Information Sondomo collects

Depending on how you use the service, Sondomo may store:

• The mood you select
• The support vibe you select, stored internally as “tone”
• The Mind Anchor text and explanation you receive or save
• Mind Anchor library identifiers
• Check-in session identifiers
• Collection and Journey timestamps
• The authenticated user identifier used to keep records account-specific
• Your account email and authentication information, processed through Supabase Auth

3. Sources of information

Information comes from your direct selections in the app, records you previously saved, and your authenticated Sondomo account.

The curated Mind Anchor library is static application content. It is not health information imported from outside sources.

Sondomo currently does not import health information from wearables, health platforms, medical providers, file uploads, external health APIs, or connected applications.

4. Why the information is used

Mood, vibe, and Mind Anchor information is used to:

• Provide the Mind Anchor experience you requested
• Save Collection entries
• Maintain Journey history when Journey recording is turned on
• Restore your recent selections and results
• Keep each signed-in user’s records separated from other accounts
• Operate, secure, and troubleshoot the service

5. Optional note and crisis-related text

• Optional note text is held in browser memory while you are on the page.
• It is checked in your browser for safety-related wording.
• The optional note itself is not saved in Sondomo’s application database or in Sondomo’s browser-storage keys.
• Crisis-related wording itself is not saved.
• A safety match may route you to the Support page.
• During normal use, Sondomo does not place your selected mood, support vibe, Mind Anchor text, explanation, or crisis-related wording in application URLs. Routine technical request information may still be processed by Sondomo’s hosting and infrastructure providers.

6. Browser storage

Sondomo uses your browser’s storage to hold your authentication session, your selected vibe, a recent mood, recently generated results, and recent Mind Anchor information so the app can pick up where you left off.

Sondomo clears its coolMinds application-storage keys during normal sign-out.

Information stored in your browser may remain on your device after you delete your Sondomo account, until you sign out, clear your browser data, or the storage is otherwise removed.

7. Collection and Journey records

• Saving to your Collection is initiated by you.
• Journey records are created when you choose a Mind Anchor while Journey recording is turned on. You can turn off future Journey recording from the Journey page.
• Turning Journey recording off does not delete existing Journey entries.
• You can remove individual Collection entries.
• You can remove individual Journey entries.
• You can delete all Journey history from the Journey page and all Collection items from the Collection page. Deleting Collection items does not affect your Journey history, your account, your current check-in, or wallpapers you have already downloaded to your device.
• You can delete your Sondomo account from the Account page.
• Deleting your Sondomo account removes your active Sondomo account and the Journey, Collection, and account-preference records associated with it.
• Wallpapers you previously downloaded to your device are not removed when you delete your Sondomo account.
• If you cannot access your account but need help with account deletion, contact support@sondomo.com.

8. Service providers

• Supabase — authentication and database services
• Lovable — application development, hosting, deployment, and platform error reporting
• Cloudflare or related edge infrastructure — delivery of the application and processing of routine request information
• GoDaddy — email services for support@sondomo.com
• Google Fonts — delivery of web-font resources

These providers may process information needed to operate, secure, deliver, authenticate, or support the service.

9. Sharing and sale

The current Sondomo application:

• Does not sell consumer health data
• Does not use advertising trackers
• Does not use analytics trackers
• Does not send mood or Mind Anchor records to an AI or language-model service
• Sends stored account and wellbeing records to Supabase, because Supabase provides the application’s authentication and database infrastructure

10. Retention

Collection and Journey records remain associated with your account until they are removed. You may remove individual Journey entries, delete all Journey history from the Journey page, remove individual Collection entries, delete all Collection items from the Collection page, or delete your Sondomo account from the Account page. Records are also removed when the account and associated records are otherwise deleted.

Archived or backup copies may require additional time to be removed, according to applicable requirements and provider processes.

11. Your choices and rights

From within Sondomo, you may:

• Turn off future Journey recording from the Journey page
• Delete individual Journey entries
• Delete all Journey history from the Journey page
• Delete individual Collection entries
• Delete all Collection items from the Collection page
• Delete your Sondomo account from the Account page

You may also request:

• Confirmation of whether Sondomo holds your account-linked wellbeing data
• Access to your Collection and Journey records
• Information about providers or recipients
• Deletion of individual or all account-linked wellbeing records
• Assistance with account deletion when you cannot access your account
• Withdrawal from future collection where applicable
• Review or appeal of a denied request

Please send all requests through the Data Requests page.

12. Security

• Sondomo uses HTTPS connections.
• Database access is restricted using user-specific Supabase Row Level Security policies.
• Access to the two user-data tables is limited to authenticated users.
• No electronic system can be guaranteed completely secure.

13. Users under 18

Sondomo is intended only for adults aged 18 or older.

14. Changes to this policy

This policy may be updated as Sondomo changes. The effective date shown on this page will reflect the current version.

15. Contact

Questions about this policy can be sent to support@sondomo.com.

Effective date: To be set when published.