Privacy policy
Last updated 13 August 2026
Soul Connection is a weekly planning companion for intentional living. This policy explains what we collect, why, and what we do with it. It is written plainly and describes what the product actually does.
What we collect
When you create an account we store:
- Your name and email address.
- Either a hashed password (we never store the password itself) or, if you sign in with Google, the account identifier Google returns to us.
- Your preferences — the interests, travel style and setting you choose during onboarding.
- What you plan and save — your weekly check-ins and intentions, the experiences and events you save, and your Sunday reflections.
- Which recommendations you open, save or dismiss, so the app can learn what suits you.
We do not collect your location. Distances shown in the app are fixed figures measured from Byron Bay town centre, not from where you are.
How we use it
Only to run the product: to sign you in, to build your weekly plan, to explain why something was recommended, and to improve those recommendations over time. We do not sell personal information, and we do not use it for advertising.
Where it is stored
In a MongoDB database hosted by DigitalOcean in Sydney, Australia. The application is hosted on DigitalOcean App Platform in the same region.
Who else is involved
- Google — if you choose to sign in with Google, they confirm your identity to us.
- DigitalOcean — hosting and database.
- Brevo — sends the occasional product email.
- Unsplash — serves the photography, which means your browser requests images from them.
The API
Soul Connection offers a REST API, used to curate the catalogue of local experiences, events and seasonal signals — including by connecting it to an AI assistant such as ChatGPT.
The API exposes only that public catalogue. It cannot read or change any personal information: no accounts, no profiles, no weekly plans, no saved items and no reflections are reachable through it. Connecting an AI assistant to this API therefore shares information about places and events in Byron Shire, and nothing about any person using the app.
Access requires an API key, issued only to approved administrators. Keys can be revoked at any time, and we record when a key was last used so unused keys can be spotted and retired.
Cookies
One cookie, used to keep you signed in. There is no advertising or third-party tracking on the product.
Your choices
You can ask us for a copy of your information, ask us to correct it, or ask us to delete your account and everything attached to it. Email [email protected] and we will action it.
Changes
If this policy changes, the date at the top changes with it.
Contact
Questions about privacy: [email protected].