Sovi logo

Privacy Policy

Last updated: October 21, 2026

Mengel Enterprises LLC · Sovi

Your sovi is private. We do not sell your data, share it with advertisers, or use your personal content to train AI models.

Data We Collect

  • •Account information: name, email address, and password (hashed — we never store plaintext passwords).
  • •Profile data: timezone, preferences, brief time, and onboarding responses you provide.
  • •Usage data: features you use, pages you visit, and actions you take within the app — used to improve the product.
  • •Content you create: tasks, goals, journal entries, notes, decisions, and venture data stored in your account.
  • •Health data (optional): sleep, readiness, and activity data from wearables you connect (Oura, Fitbit). It is stored in your account and is never sold or shared with advertisers. If you connect a wearable, your latest sleep and readiness scores are included in what is sent to the AI model to write your daily brief (see AI Features below); for that request Sovi uses only OpenAI GPT models via Microsoft Azure OpenAI.
  • •Financial data (optional): if you connect bank or credit card accounts via Plaid, we receive transaction and balance data to populate your Finance module. We do not store raw account credentials.
  • •Connected accounts (optional): if you connect Microsoft (Outlook calendar), GitHub, Linear or Slack, we receive the items from that account that Sovi shows you (for example events, message summaries, issues or notifications), using the access you approve on that provider’s own consent screen.
  • •Device data: if you allow notifications, we store your device’s push token. If the mobile app crashes or hits an error, a crash report (device model, operating system, app version and the error details) may be sent to Sentry, our crash-reporting provider.
  • •OAuth tokens: if you sign in with Google, Microsoft, or Apple, we receive an access token and basic profile information. If you connect Google Calendar, we also request read-only access to your unread Gmail (subject line and a short snippet only, never the full message body) to surface time-sensitive email in your daily brief — you see and approve this scope on Google’s own consent screen before it’s granted.

How We Use Your Data

  • •To provide and operate the Sovi service, including your daily brief, AI assistant, and module features.
  • •To personalize your experience — your context is what makes Sovi useful.
  • •To send transactional emails: account confirmation, password reset, billing receipts.
  • •To improve the product through aggregate, anonymized usage analytics. We do not sell individual usage data.
  • •We do not use your personal content (journal entries, notes, decisions, tasks) to train AI models. Your sovi is private.

Data Sharing

  • •We do not sell your data to third parties. Ever.
  • •We do not share your data with advertisers or analytics companies that build user profiles.
  • •We share data only with the service providers necessary to operate Sovi: Microsoft Azure (hosting, database and storage; Azure OpenAI Service and Microsoft Foundry for AI features; Azure Communication Services for email; Application Insights for service monitoring); Plaid (bank account linking, United States, if you choose it); Apple, Google and Microsoft (optional sign-in, and the Google and Microsoft accounts you connect); GitHub, Linear and Slack (if you connect them); Oura and Fitbit (if you connect them); the Expo push service, which relays notifications to Apple Push Notification service and Google Firebase Cloud Messaging; Sentry (crash reports from the mobile app); Stripe and PayPal (website payments); and the Apple App Store and Google Play (in-app purchases).
  • •We may disclose data if required by law, legal process, or to protect the rights and safety of our users or the public.

AI Features

  • •Sovi’s AI features (chat, your daily brief, weekly review and suggestions) send your request and the personal context needed to answer it to an AI model. That context can include your tasks, goals, journal entries, notes, calendar events, email subjects and snippets, finance summaries and, if you connect a wearable, your sleep and readiness scores.
  • •Which models: OpenAI GPT models via Microsoft Azure OpenAI and, for requests that carry no health data, Anthropic Claude via Microsoft Foundry together with the DeepSeek and Kimi models Microsoft Foundry hosts. Health scores and journal entries go only to OpenAI GPT models via Microsoft Azure OpenAI. We do not send your data to any other AI provider, and it is not used to train AI models.
  • •The app asks your permission before the first time any of your data is sent to an AI model. You can withdraw that permission at any time in Settings; AI features then stay off until you allow them again.

Google User Data and Limited Use

  • •When you connect your Google Account, Sovi requests access to your calendar events (the https://www.googleapis.com/auth/calendar.events scope) to display your upcoming events in the app and in your daily brief, and to create, update or delete events that you create, edit or delete inside Sovi. Sovi does not create or manage whole calendars, and does not touch events you have not acted on in Sovi.
  • •Sovi also requests read-only access to Gmail (the https://www.googleapis.com/auth/gmail.readonly scope) to show the sender, subject and snippet of your most recent unread messages in your daily brief and chat context. Sovi does not read full message bodies for this feature, and does not send, modify, or delete mail.
  • •Sovi's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements: Google user data is used only to provide the calendar and mail summary features you request, is not transferred to third parties except to operate those features, is not used for advertising, is not used to train generalized AI models, and is not accessed by humans except with your consent or for security, abuse-prevention, or legal reasons.
  • •You can disconnect your Google Account at any time, which revokes our access and deletes the stored tokens.

Data Retention

  • •Your account data is retained as long as your account is active.
  • •If you delete your account, we delete your personal data within 30 days, except where we are required to retain it for legal or financial compliance purposes (e.g., billing records for up to 7 years).
  • •You may request deletion of your data at any time by contacting info@sovi.studio.

Security

  • •All data is encrypted in transit (TLS) and at rest (AES-256).
  • •Passwords are hashed using bcrypt and are never stored in plaintext.
  • •Authentication tokens are short-lived JWTs. We support HttpOnly cookie sessions for additional security.
  • •We use Azure cloud infrastructure with role-based access controls and audit logging.
  • •We conduct regular security reviews. If you discover a security vulnerability, please report it to info@sovi.studio.

Your Rights

  • •Access: you can export your data at any time from your account settings.
  • •Correction: you can update your account information and profile data in your settings.
  • •Deletion: you can delete your account and all associated data from your settings, or by contacting us. The steps, and what is deleted or kept, are on our Delete your account page (/delete-account).
  • •Portability: your data is yours. We provide export functionality for your content.
  • •If you are located in the European Economic Area, you may have additional rights under GDPR. Contact us at info@sovi.studio for GDPR-specific requests.

Cookies

  • •We use session cookies to maintain your authenticated session.
  • •We do not use third-party advertising cookies.
  • •We may use minimal, privacy-preserving analytics cookies (e.g., page view counts) to understand product usage. These do not track you across other sites.
  • •You can disable cookies in your browser settings. Note that disabling session cookies will prevent you from staying signed in.

Contact

  • •Sovi is operated by Mengel Enterprises LLC.
  • •For privacy-related questions, requests, or concerns, contact us at: info@sovi.studio
  • •We will respond to privacy requests within 30 days.

This policy may be updated from time to time. We will notify users of material changes via email or in-app notification. Continued use of Sovi after changes constitutes acceptance of the updated policy.