Who we are
This Privacy Policy is issued by Soniqara ("Soniqara", "we", "us", or "our"), the operator of the Soniqara app and website at soniqara.com.
Soniqara is the data controller of the personal information described in this policy.
What we collect
We collect only the information needed to provide and improve the app, including:
Account data: name, email address, password (hashed), and account settings.
Subscription data: plan, subscription status, and billing identifiers.
Content data: saved rituals, saved rhythms, and preferences you create in the app.
Usage data: basic interaction data, device type, browser, and IP address.
Support data: messages you send us.
How we use it and our legal basis
To provide the service (account creation, saving content, login) — legal basis: performance of a contract.
To process payments and manage subscriptions — legal basis: performance of a contract.
To keep the service secure and prevent fraud — legal basis: legitimate interests.
To improve and debug the product — legal basis: legitimate interests.
To send service emails (e.g. password reset, billing) — legal basis: performance of a contract.
To send marketing emails, where applicable — legal basis: consent (you can withdraw at any time).
To comply with legal obligations — legal basis: legal obligation.
Payments
Payments are processed by Paddle.com Market Limited ("Paddle"), our Merchant of Record. Paddle acts as the reseller of Soniqara subscriptions and handles checkout, billing, tax, invoicing, refunds, and chargebacks. When you make a purchase, your payment information is collected and processed directly by Paddle under Paddle's own privacy notice. We do not store your full card details.
Sharing
We do not sell your personal information. We may share data with:
Paddle — as Merchant of Record for sales, subscriptions, payments, tax compliance, invoicing, and refund handling.
Service providers / subprocessors — hosting, authentication, database, email delivery, analytics, and customer support tools, acting on our instructions.
Professional advisers — legal, accounting, and compliance advisers where needed.
Authorities — where required by law or to protect our rights.
International transfers
Some of our service providers may process data outside your country. Where this happens, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.
Data retention
We keep your personal data for as long as your account is active and for a reasonable period afterwards to meet legal, accounting, and security obligations. In general:
Account data: kept while your account is active and deleted or anonymised within 12 months of account closure.
Billing and tax records: retained for up to 7 years to comply with tax and accounting laws.
Support messages: kept for up to 24 months.
Usage logs: kept for up to 12 months.
When data is no longer needed, it is deleted or anonymised.
Security
We use appropriate technical and organisational measures to protect your personal data, including encryption in transit (HTTPS/TLS), encryption at rest where supported by our infrastructure, hashed passwords, access controls, role-based permissions, and regular review of our security practices. No system is 100% secure, but we work to protect your data against unauthorised access, loss, or misuse.
Your rights
Depending on your location, you may have the right to access, correct, delete, restrict, or port your personal data, to object to certain processing, and to withdraw consent. You may also have the right to lodge a complaint with your local data protection authority. To exercise any of these rights, contact us through the contact page. We will respond within the time required by applicable law (generally one month).
Cookies
We use essential cookies required to run the app (such as login sessions) and may use limited analytics cookies to understand how the app is used. You can manage cookies through your browser settings.
Updates
We may update this Privacy Policy from time to time. Continued use of Soniqara means you accept the updated Privacy Policy.