In short. What you log in Psoma stays in an encrypted database on your phone. If you create an account, a copy is kept on our server so you can restore it, and only your account can read it. When you use the chat, your message and a summary of your log are sent to Anthropic's Claude model to write the reply. We do not show ads, we do not use analytics or tracking, and we never sell your data.
Psoma is provided by Alexander Trieb, Dr. Toribio Pacheco 5825, Asunción, Paraguay ("we", "us"). We are the controller of the personal data described here. Contact us at dertriebpy@gmail.com for any question or request about your data.
Everything you enter is stored on your phone in a database encrypted with SQLCipher, with an optional fingerprint or face lock. This includes your counters and restarts, daily and weekly entries (mood, sleep, energy, craving levels, substance use you record, notes), craving logs and bad-hour sessions, your journal, your daily list, appointments, crisis and support contacts, your training plan, sessions, sets, runs, weigh-ins and measurements, and your settings. It works without an internet connection. Deleting the app or using "Delete all data on this phone" removes it.
If you create an account with your email address, password and an invite code, Psoma keeps a copy of the data above on our server so it survives a lost phone and can be restored. The server is a database hosted by Supabase in its São Paulo, Brazil region (AWS sa-east-1). Every row is tied to your account and the database itself only lets your account read or change it. The GPS track of a run is never uploaded; only the distance, time and step of the run are.
Each message you send in the chat goes, together with a text summary of your recent log (by default the last 90 days) and the conversation so far, to Anthropic's Claude API through our server, so the model can write a reply that knows your situation. Once a day, the app also sends a few lines of context to the same API to word your daily list. Conversations are stored in your account so you can read them again; you can delete a conversation in the chat history (press and hold it), which removes it and its summary from your phone and the server at once. Under Anthropic's commercial terms, data sent through the API is not used to train models and is kept by Anthropic only for a limited period for safety and abuse monitoring.
If you connect Health Connect, Psoma reads, with your permission: steps, exercise sessions, distance, weight, sleep and resting heart rate. It can write the workouts and runs you record in Psoma, their distance, and your weigh-ins, so other apps such as Google Fit count them. You choose each permission and can withdraw it at any time in Health Connect.
Psoma's use of information received from Health Connect adheres to the Health Connect Permissions policy, including the Limited Use requirements. We use this data only to show your activity, sleep and weight in Psoma and in your coach chat. We do not use it for advertising, we do not sell it, and we do not transfer it to anyone except as needed to provide these features (the chat summary described above) or as required by law.
Psoma uses your location only while you are recording a run you started, to measure distance and pace. If you allow location "all the time", recording continues with the screen off during that run; it stops when the run ends. The track stays on your phone.
When you dictate a message, speech is turned into text on your phone by Android's speech recognition. Psoma keeps only the text you send. No audio is stored or sent by Psoma.
If you request early access on our website, we store the email address you give us and, if you fill them in, your name, country, what you would use Psoma for and your message, together with the time you signed up. It is stored in the same Supabase database and is used only to send you an invite and news about early access. Each email includes a way to stop further emails, and you can ask us to delete your sign-up at any time. The website itself uses no cookies, analytics or trackers.
Psoma is sold through Google Play. Google processes your payment under its own privacy policy; we receive confirmation of the purchase, not your payment details. App updates are downloaded from Expo's update service, which sees your device's IP address and app version when it delivers an update.
We do not use your data for advertising, profiling for marketing, or automated decisions with legal or similar effects.
| Service | What for | What it receives | Where |
|---|---|---|---|
| Supabase | Account and sync database, server functions, early-access list | Your account email and the synced log; early-access sign-ups | Brazil (AWS sa-east-1) |
| Vercel | Hosting psoma.app | Standard web server logs (IP address, browser) | United States and edge locations |
| Anthropic | The chat and the wording of the daily list | Your chat messages and a summary of your log | United States |
| Google (Play, Health Connect) | Distribution, payment, health data on your phone | Purchase and install data; Health Connect stays on your phone | Google's locations |
| Expo | Delivering app updates | IP address, device and app version | United States |
Each of these acts as our processor or as an independent provider under its own terms. Where data leaves your country, the transfer relies on the provider's standard contractual clauses or equivalent safeguards. We do not sell or rent personal data to anyone.
You can export all your data from the app at any time (Menu → Export, report, restore). You can also ask us to access, correct, delete or restrict your data, to receive it in a portable format, or object to its use, by writing to dertriebpy@gmail.com. To delete your account and all server data, use Menu → Sync, account, app lock → Delete my account in the app, or write to the same address from your account email; see how to delete your account or some of your data. If you live in the EU, the UK or another place with data protection law, you may also complain to your local data protection authority.
Data is encrypted on the phone and in transit (HTTPS). On the server, row-level security means one account can never read another's rows. No system is perfectly secure; if a breach affected your data we would tell you and the relevant authority as the law requires.
Psoma is for adults aged 18 and over. We do not knowingly collect data from children.
If we change this policy in a way that matters, we will say so in the app before the change takes effect. The date at the top always shows the current version.