Privacy Policy

Who we are

At Soul Explorer, your inner work deserves a private space. This Privacy Policy explains what information we handle, why, and the choices you have.

Soul Explorer is provided by Dillon Prime Limited (“we”, “us”, “our”), a company registered in England and Wales (company number 04980036) at 11 Chestnut Drive, Launceston, Cornwall, PL15 9GN, United Kingdom. We are the controller of your personal data and are registered with the Information Commissioner’s Office (registration reference ZC286345).

1. Information we handle and why

Your account

• Your email address and a password (stored only in scrambled, hashed form).
• Password-reset links we email you (single-use, and they expire), and a list of your linked devices so you can disconnect them.

Why: to give you an account you can use on any device, and to help you get back in if you forget your password.

Your birth details

• The date, time and place of your birth (the town or city, its map coordinates and time zone).

Why: to personalise your archetypal map and the reflections in your tasks. You can change them in Settings at any time.

Your journey

• The answers you give in onboarding (for example, what you’re seeking and where you are on your path), your reminder time and time zone.
• Your task answers, quiz answers, Log entries, free-form Log notes and Companion replies; which tasks you’ve completed and when; and your streak.
• Your Owner’s Manual and the extra steps picked for your Personal Adventure, where the app offers them.

Why: to run the app, show your progress, send reminders, and give you your Log.

How we tailor your journey: we use your onboarding answers and the choices you make in tasks (for example, your quiz answers) to decide which tasks and extra steps you see. This happens automatically on our servers, using simple rules set by our team. No AI is involved in these choices, and they have no legal or similarly significant effect on you. They are part of your journey data and are deleted with your account.

Some of what you write may reveal sensitive things about you, such as your feelings and emotional wellbeing. Data protection law treats information about mental health as “special category data”, and we only process it with your explicit consent, which you give when you start your journey. You can withdraw it at any time by deleting your account (see section 7).

Settings and support

• Your settings (notifications, haptics, Companion on or off).
• Messages you send us through in-app support or by email, and our replies.

Technical information

• Basic information our servers record when the app connects, such as IP address, device type and time, kept for security and to fix problems.
• Anonymous, combined statistics about how the app is used, to improve it. We work these out ourselves; we don’t use third-party analytics or crash-reporting tools.

2. The Companion and your Owner’s Manual (AI)

When the Companion is on and you answer a task’s reflection, we send your answer to our AI provider, OpenAI, so it can write a reply. It may include a few of your earlier reflections, so the reply can connect your thoughts. We send it with the task’s theme and day number only. Your name, email address and account details are never sent. Your free-form Log notes are never sent.

OpenAI processes this on our behalf. It does not use it to train its models. We ask OpenAI not to store it, but OpenAI may keep it for up to 30 days to detect misuse before deleting it. The reply is saved in your Log. You can switch the Companion off at any time in Settings.

Your Owner’s Manual (where the app offers it): about once a week, while the Companion is on, we send your recent task reflections and quiz answers, the choices you’ve made in the app (as short labels, such as “sleep-struggle”), and the previous version of your manual to OpenAI, so it can update a short summary of what works for you. It is saved in your Toolkit, where you can read or print it. The same protections apply: your name, email address and account details are never sent, your free-form Log notes are never sent, and nothing is used to train its models. Switching the Companion off also stops your manual being updated. The manual is written by software and is not a professional assessment.

3. Our legal bases

UK data protection law requires us to have a lawful reason for each way we use your information.

4. Who we share data with

We only share what’s needed, with providers who work on our behalf under contract:

• Hosting: Hetzner Online GmbH stores our servers and backups in Nuremberg, Germany.
• Email: Mailgun sends password-reset and account emails from its EU region.
• AI: OpenAI, for the Companion and the Owner’s Manual (section 2).
• Payments: Apple or Stripe, if you subscribe. They handle your payment; we never see or store your card details. We receive a transaction reference to unlock your subscription.

We may also disclose information if the law requires it.

International transfers: your account and journey data are stored in the EU, which the UK recognises as giving adequate protection. OpenAI processes data in the United States. For that transfer we rely on the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, included in OpenAI’s Data Processing Addendum. Apple and Stripe process payments under their own privacy policies and transfer safeguards.

5. How we protect your information

• All communication between the app and our servers is encrypted.
• Passwords are stored only in hashed form.
• Access to our systems is limited to authorised personnel, for maintenance and security.
• We keep daily backups for disaster recovery.

6. How long we keep data

We keep your data while your account exists, and delete it when you delete your account. If your account has been inactive for 24 months and you have no active subscription, we’ll email you, and if you don’t sign in within 30 days we’ll delete your account. Server logs are kept for 30 days, and backups are overwritten within 30 days.

7. Your choices and rights

Under the UK GDPR and the Data Protection Act 2018 (and, if you live in the EU, the EU GDPR), you have the right to:

• Access your data: download your Log and account data from Settings > Export at any time, or ask us for a copy.
• Delete your data: delete your account from Settings. This is permanent.
• Correct your data (including your birth details, in Settings), restrict or object to how we use it, and take it elsewhere (portability).
• Withdraw consent at any time, by switching off the Companion or deleting your account.
• Complain to the Information Commissioner’s Office (ico.org.uk), or your local data protection authority. We’d appreciate the chance to help first.

We’ll respond to requests within one month.

Deleting your account does not cancel your subscription. Cancel it with the App Store, or for a web subscription email us at mail@mysoulexplorer.com.

8. This website

mysoulexplorer.com uses no cookies, no analytics and no advertising trackers. Our web server keeps standard logs (IP address, browser type, the page requested and the time) for 30 days, for security. Everything on the site, including fonts, is served from our own server, so no third party learns that you visited.

9. Age

Soul Explorer is for adults aged 18 and over. We don’t knowingly collect data from anyone younger.

10. Changes to this policy

If we make significant changes, we’ll let you know in the app or by email before they take effect.

11. Contact us

Questions or requests: mail@mysoulexplorer.com

Dillon Prime Limited, 11 Chestnut Drive, Launceston, Cornwall, PL15 9GN, United Kingdom.