What we collect, why, and how to delete it.

The free reading on the homepage is computed in your browser and isn’t saved. Everything we do store exists because you asked us to make something last — an emailed copy, a share link, or an account — and this page is the complete list. We don’t sell your data, and you can delete everything by emailing hello@soulmath.io. The sections below are the long version, which the lawyers like and which you can skim.

Soulmath is an independently operated business based in the United States. When this page says “Soulmath” or “we,” it means that business.

The free reading and friend comparison run entirely in your browser — the birthday you type is used for the on-screen math and isn’t sent to our servers or stored. Two exceptions, both opt-in:

• Emailing yourself a copy stores the birthday(s) and optional first names needed to rebuild that exact reading, so your return link keeps working.
• Creating a share link does the same. The URL carries a random signed token — never a birthday — and links expire after two weeks.

For both, we also keep a SHA-256-hashed IP address and browser user-agent for rate-limiting and abuse control. We never store your raw IP address in our database.

We try to collect as little as possible. Specifically:

• Email address. So we can send you your reading and tell you when pricing or features change.
• Full birth name. The Pythagorean system maps letters to numbers, so we need your name to compute your reading. We store it.
• Birthday. The math depends on it. Stored only when you make an account, email yourself a copy, or create a share link — the free on-screen reading never stores it.
• Account info via Clerk. If you sign in (with email or Google), Clerk handles the password, the session cookie, and basic profile info (name, email, profile photo if you signed in with Google). We see what Clerk shows us — we never see your password.
• Aggregate usage. Plausible Analytics records anonymized, cookie-free pageviews and product events so we know which pages and features people use. It does not identify you individually.
• Server logs. Vercel (our hosting provider) records the usual short-lived request logs — IP, user-agent, path. Standard ops stuff.

We don’t collect anything special-category (health, biometrics, etc.). We don’t collect your location beyond what an IP address coarsely implies.

• We do not sell or share your personal information. Not now, not ever. (That’s the verbatim CCPA/CPRA phrasing California regulators want to see — we say it because we mean it, not because a lawyer made us.)
• We don’t load advertising pixels or send birthdays, readings, names, or email addresses to analytics.
• We don’t train AI models on your reading. Your name + birthday goes to the model only long enough to generate the interpretation, then it’s gone from the model provider.

We use a handful of vendors to make Soulmath work. We share only what they need:

• Clerk — authentication. They store your account.
• Neon — the Postgres database that holds your reading.
• Vercel — hosting + serverless functions.
• Resend — sends you waitlist confirmations and reading emails. They see your email address and the email content.
• Plausible — analytics. No cookies, no personal data.
• AI model providers (OpenAI, Anthropic) via Vercel AI Gateway — generates the text of your reading. We send them your numerology numbers and your name. We do not opt into letting them retain prompts for training.
• Google (if you sign in with Google) — standard OAuth. Google sees that you signed in to Soulmath. We see the email + name + profile photo you authorized.

We share data with law enforcement only when legally compelled, and we’ll push back on overbroad requests when we can.

Your reading and account live as long as your account does. If you delete your account, we delete your name, birthday, readings, and shares within 30 days. Waitlist emails get deleted on the same timeline when you unsubscribe.

Backups and server logs roll off automatically on shorter schedules (typically 7–30 days, depending on the vendor).

You can: see your data, fix wrong data, download a copy, delete your account, or opt out of marketing emails. To do any of those, email hello@soulmath.io. We’ll respond within 30 days.

California residents have the same rights under the CCPA/CPRA, plus a specific Right to Opt-Out of Sale or Sharing. As stated above, we do not sell or share your personal information, so the opt-out is effectively pre-set — but the right is still yours, and you can email hello@soulmath.io to confirm or exercise it. EU/UK residents have the same rights under GDPR/UK GDPR. We don’t play favorites — everyone gets the same treatment, regardless of where you live.

Soulmath is not built for anyone under 13, and we’ll delete an account if we find out the person behind it is under 13. If you’re a parent and think your kid signed up, email hello@soulmath.io and we’ll take care of it.

If we change anything material, we’ll update the “Last updated” date and email people who have accounts. Cosmetic edits (typos, formatting) get shipped without notice.

Privacy questions, data requests, anything: hello@soulmath.io.