Privacy Policy

1. Introduction

SouLogic LLC operates multiple platforms, currently including Arni Pantry. This Privacy Policy applies to all Services operated by SouLogic LLC.

By using any SouLogic Service, you agree to this Policy.

2. Information We Collect

Information You Provide Directly

• •Account information: Name, email address, date of birth, and password
• •Profile information: Preferences, goals, and dietary settings
• •Household data: Names and roles of household members you add
• •User-generated content: Food logs, pantry items, lists, recipes, meal plans
• •Photos and media: Images you submit for meal logging, barcode scanning, and receipt scanning
• •Voice input: Audio and speech captured only when you use hands-free voice commands (such as Cook with Arni)
• •Contacts you choose: If you use the contact picker to invite someone to your household, we access only the specific contact you select to send that invitation — we do not upload or store your address book
• •Communications: AI chat messages and support correspondence

Information Collected Automatically

• •Usage data: Features used, screens viewed, session duration
• •Device information: Model, OS version, app version, language, timezone
• •Approximate location: When you use store-related features, we use your device location — only while the app is open — to detect which grocery store you are at and to find nearby stores. We do not track your location in the background.
• •Network information: IP address and inferred country/region
• •Push notification tokens
• •Crash and performance data

3. How We Use Your Information

• •Provide and operate the Services
• •Power AI features by sending relevant account context to Anthropic's Claude API
• •Read recipe steps aloud and power hands-free voice (Cook with Arni)
• •Detect nearby stores and compare grocery prices
• •Send notifications (meal reminders, account alerts) and transactional or support emails
• •Process subscriptions through RevenueCat
• •Analyze aggregate usage patterns to improve the Services
• •Provide customer support
• •Ensure security and prevent fraud
• •Comply with legal obligations

We do NOT use your personal data to train AI models. We do NOT sell your personal data. We do NOT display third-party advertising.

4. How We Share Your Information

Service Providers

• •Anthropic, PBC — AI processing (account context and chat messages)
• •Supabase — Database, authentication, and storage (all user data)
• •Microsoft Azure — Text-to-speech voice synthesis for Cook with Arni (recipe and response text only)
• •RevenueCat — Subscription management (account ID and subscription status)
• •Resend — Transactional and support email delivery (your email address and message)
• •Expo/EAS — App delivery and push notifications (device push token)
• •Tavily — Web search when enabled (search query text only)
• •Nutrition databases (USDA FoodData Central, Open Food Facts, Nutritionix) — Food nutrition lookups (food name text only)

Community Price Sharing (Anonymized)

When you scan a grocery receipt, we add the item prices and the store to an anonymized community pricing database that helps all users find better prices at their local stores. These contributions are not linked to your account, name, or identity — no one, including the SouLogic team, can trace a price back to you. This is kept separate from your private pantry and account data.

Other Sharing

Within your account: Shared household data is visible to all account members. Individual data marked private is visible only to you.

Legal requirements: We may disclose information if required by law, court order, or to protect the safety of any person.

Business transfers: If SouLogic is acquired or merges, your information may transfer as part of that transaction.

5. AI Processing

Some SouLogic Services use Claude, a large language model provided by Anthropic, PBC (San Francisco, CA). To generate responses, we transmit relevant account context to Anthropic's API.

Anthropic does not use your data to train its models. All AI API calls are made server-side — your AI provider credentials are never transmitted to your device.

6. Data Retention

• •Account and profile data: Retained until you delete your account
• •User-generated content: Retained for the life of your account
• •AI chat messages: Retained for 90 days
• •Crash and performance logs: Retained for 30 days
• •Billing records: Retained for 7 years

When you delete your account, we delete or anonymize your personal data within 30 days, except where retention is required by law.

7. Data Security

• •Encryption in transit: All data uses TLS/HTTPS
• •Encryption at rest: Stored data is encrypted
• •Access isolation: Our database enforces account-level data isolation
• •Secret management: API keys are server-side only, never on your device
• •Access controls: Internal access to production data is restricted

No security system is impenetrable. We will notify affected users of any breach as required by law.

8. Children's Privacy

Arni accounts are for users 13 and older. We collect date of birth at registration and block direct sign-up by anyone under 13. Children do not create or log into their own accounts.

Parent-managed child profiles: A parent or guardian may create a managed profile for a child under 13 within their household. These profiles have no login and are controlled entirely by the parent — the child does not access the app, and we do not knowingly collect personal information directly from a child. Any information in a managed child profile (such as first name, dietary needs, or logged meals) is provided and controlled by the parent under their consent, consistent with the Children's Online Privacy Protection Act (COPPA). The managing parent can review, edit, or delete a child's profile and its data at any time in the app, or by contacting support@soulogic.io. When a child turns 13, the parent may graduate the profile into the child's own account.

We do not use children's information for advertising and never sell it. If you believe a child under 13 has provided us information directly without parental consent, contact support@soulogic.io and we will delete it promptly.

9. Your Privacy Rights

All Users

• •Access: Request a copy of your personal data
• •Correction: Request correction of inaccurate data
• •Deletion: Request deletion of your personal data
• •Portability: Request your data in a machine-readable format

Submit requests to support@soulogic.io. We will respond within 30 days.

California Residents (CCPA/CPRA)

California residents have the right to: know what personal information is collected, used, and disclosed; delete personal information; opt out of the sale or sharing of personal information (we do not sell or share for advertising); and non-discrimination for exercising privacy rights.

10. Geographic Availability

SouLogic Services are available to residents of the United States and Canada only. If you are located in the EEA, United Kingdom, Switzerland, or any GDPR jurisdiction, you are not permitted to use the Services at this time.

11. Changes to This Policy

We will notify you of material changes through the applicable Service or by email at least 14 days before changes take effect. Continued use after changes take effect constitutes acceptance.

12. Contact

SouLogic LLC

Support: support@soulogic.io