Solo AI CoachBack to Solo AI Coach

Privacy Policy

Last Updated: August 25, 2026

Effective Date: August 2026

1. Introduction

Solo AI Coach ("we," "us," "Company") values your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information.

2. Information We Collect

Information You Provide Directly

  • Account information: Email, name, payment details (via Stripe)
  • Coaching session transcripts: Conversations you upload for analysis
  • Audio files: Voice recordings you upload for transcription
  • Account settings: Subscription tier, billing preferences, contact preferences

Information Collected Automatically

  • Usage data: Which features you use, analysis frequency, session length
  • Device information: IP address, browser type, operating system
  • Cookies: Session tokens, authentication, preferences (no tracking pixels)

Information from Third Parties

  • Stripe: Payment processing, billing information
  • Deepgram: Audio transcription (we do not retain raw audio; Deepgram does not retain it longer than processing)
  • Anthropic: Claude API usage (we do not share session content with Anthropic beyond processing)

3. How We Use Your Information

For Service Delivery

  • Process and analyze your coaching transcripts
  • Generate insights and suggestions
  • Manage your subscription and billing
  • Provide customer support

For Product Improvement

  • Identify common coaching patterns
  • Train and improve our analysis algorithms
  • Debug and fix errors
  • Measure feature usage

For Research (De-Identified Only)

  • Create aggregate insights about coaching practices
  • Develop online courses based on patterns
  • Publish industry reports and findings
  • Share findings with the coaching community

Important: We only use de-identified (pseudonymized) data for research (see Data Retention below). De-identification removes the structured links back to you and your client — see "Limitations" under De-Identification below for what it does not remove.

Processing Special-Category Data (GDPR Article 9)

Coaching conversations may reveal special-category personal data about your client — for example, references to mental health, medical conditions, or other sensitive personal details — even though the Service itself is not a medical or mental-health tool. This tool is for coaching reflection only, not clinical diagnosis or treatment. Because of this:

  • You confirm, before uploading each session, that your client has consented to AI analysis of the conversation and that you have lawful authority to upload it (see the consent screen in the app).
  • Our lawful basis for processing any special-category data that appears in a session is your client's consent, obtained by you as the data controller for that conversation.
  • We do not seek to identify, diagnose, or draw conclusions about a client's health status — analysis findings describe coaching-relevant patterns (beliefs, emotions, suggested interventions), not clinical assessments.
  • If you are unable to obtain a client's consent, or client consent is later withdrawn, do not upload that session, or delete it via Account Settings.
  • Comply with laws and regulations
  • Respond to lawful requests from authorities
  • Enforce these terms and other agreements
  • Protect our legal rights

4. How We Share Your Information

What We DON'T Share

  • ❌ We never sell your personal data to third parties
  • ❌ We never share your raw coaching transcripts with advertisers, analytics companies, or brokers
  • ❌ We never sell client names or identifying information
  • ❌ We never share payment details (Stripe handles this)

What We DO Share

  • Service providers: Stripe (payments), Deepgram (transcription), Supabase (hosting), Anthropic (analysis)
  • De-identified research data: With coaches, researchers, and the coaching community (structured identifying info removed — see "Limitations" under De-Identification below)
  • Legal requests: We comply with lawful court orders and law enforcement requests

Data Processing Agreements

Our service providers (subprocessors) have committed to data protection:

If you're an organization (not an individual coach) and need a signed Data Processing Agreement between you and Solo AI Coach, see our Data Processing Agreement.

5. Data Retention & Deletion

What We Store

Analysis findings (indefinitely):

  • Beliefs, emotions, patterns, and suggestions detected — including short evidence quotes drawn from the transcript to support each finding
  • Session metadata (date, analysis mode used, tier used at time of analysis)
  • Retained while your account exists

Raw transcripts (ephemeral only):

  • Stored only while you are actively working in a session — needed so you can view, edit, and re-run analysis
  • Permanently deleted the moment you leave the session (via "Save and Close," navigating away, or deleting the session) — not retained on any fixed schedule
  • Never included in the research/product-improvement data described below, regardless of tier

Data Usage Based on Your Subscription Tier

Free and Research-Collaborative Tiers:

  • Free Conversational, Free Hypnotherapy (trial), Hypnotherapy Basic, Real-Time Trial (2 hrs/month)
  • Your analysis findings may be flagged for future product improvement and research:
    • Training and improving our analysis algorithms
    • Identifying common coaching patterns and limiting beliefs
    • Creating research insights and industry reports
    • Developing online courses and educational content
    • Status: Research pipeline is planned but not yet active

Privacy-First Tiers:

  • Conversational Secure, Hypnotherapy Secure, Hypnotherapy Pro, Real-Time Hour Packs (5-hour: $65, 10-hour: $120, one-time purchase)
  • Your analysis findings are explicitly opted out of any research or product improvement
  • Tier selection is your control mechanism for research eligibility
  • Data retained in your account history only

De-Identification (Pseudonymization) Process (Planned for Future)

When data is archived (planned future implementation, only for Free/Basic tier research):

  • Coach name, email, and client ID removed
  • Session title removed
  • Limitations: De-identification does not currently edit free-text content:
    • Coach notes (may contain identifying details you typed)
    • Evidence quotes from analysis (may reference client names or details mentioned in conversation)
  • This is a partial de-identification (pseudonymization) appropriate for research use; it is not anonymization in the strict GDPR sense (Recital 26) and is not a guarantee that a client could never be re-identified from the retained content

Your Deletion Rights

You can delete any individual session yourself, anytime, from that session's page in the app — no request needed. For deletion of your entire account, email: privacy@soloaicoach.com

Timeline (per-session deletion):

  • Session removed from your account immediately (soft-delete)
  • 30 days later, analysis findings are archived (only if your tier permits research use) and the session is permanently removed
  • De-identified data may be retained for research per your tier's usage policy (planned future feature) — never the raw transcript, which is already gone by the time you delete the session

Account Termination

Upon account deletion:

  • All analysis data deleted within 30 days
  • De-identified archived data (if applicable) retained per your tier's usage policy

6. International Data Transfers & Compliance

GDPR (European Union)

If you're in the EU:

  • Your data is processed in compliance with GDPR
  • You have rights: access, portability, deletion, correction
  • See our Data Processing Agreement for controller/processor terms
  • Our infrastructure (Supabase, hosted on AWS) is US-based, not EU-based — see "Data Transfer to US" below for the safeguards that apply

CCPA (California)

If you're in California:

  • You have rights: access, deletion, opt-out of data sales
  • We don't sell personal information
  • We don't use personal info for targeted advertising

Canada, Australia, Other Jurisdictions

  • We comply with local privacy laws where applicable
  • Your data may be transferred to the US for processing (see below)

Data Transfer to US

  • Our servers are hosted in the US (Supabase/AWS)
  • Transfers occur under standard contractual clauses (EU users)
  • Transfers are necessary for service delivery

7. Security

Encryption

  • In transit: All data encrypted via HTTPS/TLS
  • At rest: Transcripts encrypted in database (AES-256)
  • Passwords: Hashed via bcrypt, never stored in plaintext

Access Controls

  • Only authorized employees can access raw data
  • De-identified research data accessible to analysis team
  • Role-based access (engineers, support, researchers)
  • Multi-factor authentication required for admin access

Incident Response

  • Breaches are investigated immediately
  • Affected users notified within 72 hours (per GDPR)
  • Incidents logged and reported to relevant authorities

Third-Party Security

  • Stripe: PCI DSS Level 1 compliant
  • Supabase: SOC 2 Type II certified
  • Deepgram: SOC 2 compliant
  • Anthropic: SOC 2 compliant

8. Cookies & Tracking

Cookies We Use

  • Session token: Keeps you logged in
  • Authentication: Verifies your identity
  • Preferences: Remembers your settings (dark mode, etc.)
  • Analytics: Tracks feature usage (no third-party pixel tracking)

Cookies We Don't Use

  • ❌ No Google Analytics
  • ❌ No Facebook Pixel
  • ❌ No ad tracking
  • ❌ No third-party cookies
  • By using the Service, you consent to essential cookies
  • Analytics cookies are optional (you can disable in settings)

9. Your Rights & Choices

Right to Access

  • Request a copy of your data anytime by emailing privacy@soloaicoach.com
  • Includes analysis findings, notes, and account info (not raw transcripts — those are not retained past the session, see Data Retention above)

Right to Correction

  • Update your email, name, preferences anytime
  • Contact support for other corrections

Right to Deletion

  • Delete any individual session yourself, anytime, from the app
  • Request deletion of your entire account by emailing privacy@soloaicoach.com — processed within 30 days
  • De-identified data may be retained for research per your tier's usage policy — re-identification is not offered

Right to Portability

Right to Opt Out of Research

  • To opt out of research data usage, upgrade to a Secure or Pro tier (Conversational Secure, Hypnotherapy Secure, or Hypnotherapy Pro)
  • Tier selection is the control mechanism for research eligibility
  • No separate ad-hoc opt-out mechanism is available for Free/Basic tiers

10. Children's Privacy

  • The Service is not intended for children under 18
  • We do not knowingly collect data from minors
  • If we learn we've collected child data, we delete it immediately
  • We are not responsible for third-party websites or privacy practices
  • Our Privacy Policy does not apply to external links
  • Read third-party privacy policies before using their services

12. Changes to Privacy Policy

  • We may update this policy anytime
  • Changes posted here and take effect immediately
  • Continued use constitutes acceptance

13. Contact & Data Protection Officer

Questions about privacy or requests for your data?

Email: privacy@soloaicoach.com
Mailing Address: 223 W 38th St, P.O. Box #416, New York, NY 10018
Website: soloaicoach.com

For EU users:

  • Data Protection Officer: privacy@soloaicoach.com
  • Local privacy authority: EU users may lodge a complaint with the data protection authority in their country of residence

Version: 3.2
Last Updated: August 25, 2026
Changes: Simplified Real-Time Analysis to one-time Hour Packs (5-hour: $65, 10-hour: $120, never expire, no auto-renewal) instead of a monthly subscription — updated Section 5 tier-based data usage lists accordingly

v3.1 changes: Locked initial Real-Time Analysis pricing ahead of Phase 2 launch (superseded by v3.2 above)

v3.0 changes: GDPR/EU AI Act compliance pass — replaced "anonymized" with "de-identified"/"pseudonymized" throughout; corrected raw-transcript retention claim (ephemeral, deleted on session close, not "never stored" or a fixed schedule); added Processing Special-Category Data (GDPR Art. 9) section; corrected EU-hosting claim (infrastructure is US-based, not EU-based); linked Data Processing Agreement; corrected self-service session deletion (previously described as email-only); clarified data export does not include raw transcripts Next Review: August 2027