Privacy Policy
Contents
1. Overview
SoulGainz ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains what personal data we collect, why we collect it, and how we use and protect it.
SoulGainz is operated by Dejan Zerafa, based in Qatar. By using the app at soulgainz.app, you consent to the practices described in this Policy.
2. What Data We Collect
| Data Type | Examples | When Collected |
|---|---|---|
| Account data | First name, last name, email address | When you register |
| Date of birth | Day, month, year | When you complete the macro calculator |
| Body metrics | Height, weight, activity level, goal (lose/maintain/gain) | When you use the macro calculator — stored locally on your device only |
| Payment data | Plan type, payment status — no card numbers | When you purchase a plan (processed by Stripe) |
| Usage data | Recipes selected, meal prep dates, shopping sessions | While using the app — stored locally on your device |
| Communication data | Email address, message content | When you contact us via feedback form or email |
We do not collect your location, IP address logs, device fingerprints, or any data beyond what is listed above.
3. How We Use Your Data
- Account management — to create and maintain your account
- Service delivery — to give you access to recipes and features appropriate to your plan
- Transactional emails — welcome emails, payment confirmations, subscription updates
- Birthday discounts — to send you a personalised birthday offer (using your date of birth)
- Holiday emails — to send occasional seasonal greetings and promotions
- Customer support — to respond to your enquiries and feedback
- Legal compliance — to comply with applicable laws and regulations
We do not sell your personal data to any third party. We do not use your data for advertising profiling or behavioural tracking.
4. Third-Party Services
We use the following third-party services to operate SoulGainz. Each has its own privacy policy.
| Service | Purpose | Data Shared |
|---|---|---|
| Supabase | Database — stores account data | Name, email, date of birth, plan status |
| Stripe | Payment processing | Email, plan type. Card details go directly to Stripe — we never see them. |
| Resend | Transactional email delivery | Name, email address |
| Netlify | App hosting and serverless functions | Standard web server logs (auto-deleted after 30 days) |
| Formspree | Feedback form submission routing | Name, email, message content you submit |
All third-party services used are reputable, GDPR-compliant providers. Data is processed on their infrastructure only as necessary to deliver the service.
5. Data Storage & Security
Where your data is stored
Account data (name, email, date of birth, payment status) is stored in our Supabase database, hosted on infrastructure in the United States (AWS). Your body metrics (height, weight, goal) and recipe selections are stored locally on your device in browser storage and are never sent to our servers.
How we protect your data
- All data in transit is encrypted using HTTPS/TLS
- Database access is protected by Row Level Security (RLS) — you can only access your own data
- Admin API access is protected by a strong secret key, never exposed publicly
- We do not store payment card information — all card processing is handled directly by Stripe
- API keys and secrets are stored as environment variables, never in the application code or repository
6. Data Retention
We retain your account data for as long as your account is active. If you request account deletion, we will permanently remove your personal data from our database within 30 days. Some data may be retained for longer periods where required by law (e.g., financial transaction records for tax purposes — Stripe retains these per their legal obligations).
7. Your Rights
SoulGainz is operated from Qatar and processes personal data in accordance with Qatar's Personal Data Privacy Protection Law (Law No. 13 of 2016). You have the following rights regarding your personal data:
- Right to be informed — know how and why your personal data is processed
- Right of access — request a copy of the personal data we hold about you
- Right to correction — request correction of inaccurate, incomplete or outdated data
- Right to deletion — request permanent deletion of your account and data
- Right to object — object to processing, including for direct marketing
- Right to withdraw consent — withdraw consent at any time, without affecting processing already carried out
- Right to opt out of marketing — unsubscribe from promotional emails at any time using the link in any email we send
- Right to data portability — request your data in a machine-readable format
Health and body data you enter (weight, height, goals) is treated as data of a special nature and is processed only with your explicit consent. You can withdraw that consent at any time and we will delete it.
If you are in the European Economic Area or the United Kingdom, you also hold these rights under the GDPR / UK GDPR, including the right to restrict processing and to lodge a complaint with your national data protection authority.
To exercise any of these rights, email us at support@soulgainz.app. We will respond within 30 days.
Complaints. If you are not satisfied with our response, you may complain to Qatar's National Cyber Governance and Assurance Affairs (NCGAA), part of the National Cyber Security Agency, at ncsa.gov.qa. EEA and UK users may instead complain to their own national data protection authority.
Data breaches. If a breach occurs that is likely to cause you serious harm, we will notify the competent authority and affected users without undue delay and, where required, within 72 hours of becoming aware of it.
9. Children's Privacy
SoulGainz is not directed at children under the age of 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal information, please contact us at support@soulgainz.app and we will promptly delete it.
10. International Users
SoulGainz is based in Qatar and operated under the laws of the State of Qatar. If you access the service from outside Qatar (including from the European Economic Area, United Kingdom, or elsewhere), please be aware that your data may be transferred to and processed in countries that may not have the same level of data protection as your home country.
By using SoulGainz, you consent to this transfer. We take reasonable steps to ensure your data remains protected in accordance with this Policy regardless of where it is processed.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will update the "Last updated" date above and notify registered users of material changes by email. Your continued use of SoulGainz after changes are posted constitutes your acceptance of the updated Policy.
12. Contact
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
- Email: support@soulgainz.app
- Website: soulgainz.app