Privacy Policy

Who this policy covers

This policy applies to the SoothBox mobile app and the SoothBox website. SoothBox is the name of the app and the developer for purposes of this policy.

Information handled by the app

Private content on your device

Check-ins, mood and energy selections, notes, journal text, Soothe Boxes and keepsakes (including photos, voice notes, and any name or number you add for someone to call), Mo chats, call history, feedback about activities, preferences, and care recipes stay on your device, in an encrypted database and the app's private storage. SoothBox does not store this private content on its servers. The only content that leaves your device is what you choose to send to Mo online or say during a call with Mo, described below.

Mo on your phone

With SoothBox Plus you can download a small language model once, from Hugging Face, so Mo can answer in its own words. The model runs on your device; what you write to Mo is not sent to SoothBox or anyone else.

Mo online (Plus)

If you choose Mo online, each message you write to Mo is sent to our server together with the last few lines of that chat and, if you added them, today's check-in mood and note. Our server sends it to Google (Gemini) or, if Gemini cannot answer, OpenAI, to word the reply. We do not store your message or the reply, and these providers do not use it to train their models. A fixed safety check reads every message before any model. We keep only a count of replies per account per day, to prevent abuse and keep the service fair.

Calls with Mo

Calls are live audio and require an Apple or Google account. During a call your voice is processed by LiveKit and its speech partners: AssemblyAI to transcribe speech, OpenAI to word Mo's replies (or Google's Gemini if OpenAI can't finish one), and Deepgram, Cartesia or Fish Audio to speak in the voice you chose. Calls are not recorded and our server stores no transcript. The words shown during a call are kept in a call history on your device, in the same encrypted database as your journal, so you can read them back; you can delete any call, or let the words go when it ends. We keep a record of each call (when it happened, how long it lasted and which voice was used) to apply call minute allowances.

Notifications and sounds

Reminders and the “Mo replied” notification are created on your device and never include what you wrote. In-app sounds play on your device and send no data.

Optional account

An account is optional and made only with Sign in with Apple or Google. If you create one, we store the identifiers that sign-in provides (an account ID, your name and email address, which may be an Apple private relay address), session records, and a link to SoothBox's random purchase identifier, so a subscription can follow you to a new device. The account does not hold your check-ins, journal, keepsakes or Mo chats.

Purchases and subscriptions

If you use paid features, Apple or Google processes the payment; SoothBox does not receive your payment-card details. RevenueCat verifies purchases using a random SoothBox identifier and sends our server purchase events for it, including the product, status, store, country, price and relevant dates. We keep these to confirm entitlements and to keep accurate purchase records.

Backups

Backups are files you create and store wherever you choose. They are encrypted with your passphrase before they leave the app. Recovery codes are kept in your device's secure storage and are never sent to us.

Updates and basic technical data

Expo may deliver app updates and receive the technical request information needed to do so. App stores and service providers may process device, platform, app-version, network, diagnostic, and transaction information under their own policies.

Information you choose to send

If you contact support or send feedback through your mail app, we receive the information you include, such as your email address, message, app version, and any attachments you choose to provide.

Shared recipe links

When you share a care recipe with the SoothBox mark on, the text includes a link to soothbox.com/r. The recipe's name, situation and the steps you left on are written into the part of the link after the "#", which browsers do not send to our server: the page reads it on the viewer's device, and we do not store it. Anyone with the link can see that recipe.

Website data

The website does not use advertising cookies or behavioral analytics. Vercel hosts the site and may process standard request data such as IP address, browser details, requested URL, and timestamps for security, reliability, and delivery.

How information is used

• Provide the core self-care experience on your device.
• Verify, restore, and manage paid entitlements, including across devices for people with an account.
• Deliver updates, maintain reliability, prevent abuse, and troubleshoot issues.
• Answer support, privacy, and legal requests you send us.

SoothBox does not sell personal information and does not use journal, check-in, Mo chat or call content for advertising or to train models.

Sharing

Information is shared only as needed with service providers that operate the product: Apple and Google for store distribution, payments and sign-in; RevenueCat for subscription status; Vercel and Neon for our server and its database (accounts, purchase status, call records and daily reply counts); Google (Gemini) and OpenAI to word Mo online's replies when you use it; LiveKit with AssemblyAI, OpenAI, Google (Gemini), Deepgram, Cartesia and Fish Audio during calls with Mo; Expo for update delivery; and Hugging Face for the on-device model download. Information may also be disclosed when legally required or to protect users, the public, or the service.

Security, retention, and deletion

SoothBox uses data minimization, encrypts on-device content, blocks unnecessary sensitive device permissions, and disables Android cloud backup for app data. On-device content remains until you remove it using app controls, clear the app's storage, or uninstall the app. Account data is kept until you delete your account in the app. Purchase records are kept as long as needed for billing, fraud prevention, tax and legal obligations. Support correspondence is kept only as long as reasonably needed.

See the data deletion page for practical steps.

Children

SoothBox is not directed to children under 13, or the minimum digital-consent age in their country. We do not knowingly collect personal information from children.

Your choices and rights

You can use SoothBox without an account, avoid optional paid features, decline to send feedback, manage purchases through your app-store account, delete your account, and remove on-device information. Depending on where you live, you may also have rights to access, correct, delete, restrict, or object to processing of personal information we or our service providers hold.

Contact and changes

For privacy questions, contact support@soothbox.com. Material changes will be posted here with a new effective date.