So Today Privacy Policy
Last updated: October 21, 2026
So Today is a voice journal. You talk with a companion about your day, and the app keeps short notes ("moments") from what you said, so you can look back later. This policy explains what we collect, why, who helps us run the app, how long we keep things, and the choices you have.
So Today is made by Aoide Studio LLC, a California limited liability company ("we", "us"). Contact: [email protected], Aoide Studio LLC, California.
The short version
- Your journal is yours. We use it to run the app for you, and for nothing else.
- We don't sell your data, and we don't show ads.
- We don't keep recordings of your voice. Your speech is turned into text as you talk, and the audio isn't stored.
- A few companies process your words so the app can work: OpenAI (the companion's replies and the notes it keeps), Soniox (speech to text, and the companion's voice), ElevenLabs (the companion's voice) and Supabase (where your journal is stored). They process it for us, to run the app.
- Usage and crash reports are off unless you turn them on, and never include what you said, your name or your email.
- You can export your journal, forget a person or a topic, or delete your account and everything in it.
- So Today is not a medical or crisis service.
What we collect, and why
Your account
- An anonymous account is made when you first open the app. It has a random id, not your name or email.
- Your email address, if you choose "Keep your journal safe" or sign in. We use it only to send you sign-in codes and to let you get back into your journal on another phone. We store a fingerprint (a hash) of the codes, never the codes themselves.
- Your setup answers: the name you'd like to be called, your time zone, when your day starts, reminder times, which companions you chose, and your answer about your age.
What you say in a Talk
- Your speech is sent while you talk to our speech-to-text provider (Soniox), which turns it into text. We don't store the audio. Soniox processes it under its own terms; see its privacy policy.
- The conversation's text (what you said and what the companion said) is kept with the Talk, so you can read it back and so the app can keep your notes accurate. You can delete a Talk's conversation text.
- Moments: short notes the app keeps from what you said, with the people, places and themes in them.
- What the app learns about your life ("facts", such as a friend's name or that you have a sister), so the companion can remember. The Memory page shows them and lets you remove them. Private ones (such as health) aren't shown there yet. A removed fact stops being used, but its record is kept until you delete your account.
- Your preferences for the companions, such as "shorter replies" or "don't mention work".
- Typed Talks: if you type instead of speaking, the text you type is kept the same way.
- Your readings: mood, sleep and habits you log in a Talk.
- Spoken feedback about the app, if you give it in a Talk.
- Conversation timing: how long you tend to pause, so the companion waits the right amount. Timings only.
Photos
- Photos you add to a moment are stored privately in your account (not public).
- To describe a photo for search and for your notes, the photo is sent to OpenAI (again if a first try fails). The short description it returns is stored with the photo.
Find
- Your questions to Find, its answers and which moments they came from are kept, so you can see them again.
- While you type a search, the text is sent to OpenAI to find moments by meaning (it isn't kept there by us).
What the app writes for you
- Companion notes and letters: short things the companions send you after a Talk ("afterwords"), weekly cards, and monthly or yearly letters. These are written by AI from your own moments and stored in your account.
Care and safety signals
- If a Talk touches on something serious (for example distress, self-harm or someone hurting you), the app keeps a care level for that Talk (no words, only a level and a kind). It uses this to keep you safe: the companion changes how it talks, those moments are hidden from suggestions, and the companions hold back their later messages.
- If you leave a Talk quickly because someone is near ("quiet exit"), the app remembers that the Talk ended that way, hides it, and keeps the companions quiet for a while.
- After a safety moment, the app keeps the time it happened on your profile, so the companions stay careful.
Usage and costs
- A usage ledger: for each call the app makes to an AI provider, we record which service, which model, how many tokens or characters, how long it took and what it cost. It never includes the words. It's linked to your account so we can run your subscription fairly and spot problems. Kept 90 days.
- Talk health: how long the app's server steps take (timings only, with no account and no words). Kept 30 days.
- Quick chats: which companion, how many turns and how it ended (no words), linked to your account.
- Onboarding answers: your answers to the first questions (topics and what you'd like from the app).
- An install id for your phone, kept with your account so a first Talk isn't started twice. It's a random id, not Apple's device or advertising id.
- Security counters: when you ask for sign-in or phone-transfer codes, a fingerprint (hash) of your network address and email, to limit guessing. Cleared within about a day.
Usage and crash reports (only if you turn them on)
- If you agree, the app sends usage events to PostHog and crash reports to Sentry. Nothing is sent until you do: it asks before your first Talk ("Share anonymous usage to help improve So Today", unticked), and the same switch is in You.
- They carry a random install id and basic device and app details (phone model, system version, language, time zone, app version), never your account id, email or anything you said or wrote. Events are a fixed list (for example "a Talk started"), with no free text. We ask both services not to store IP addresses.
- You can turn it off again any time with the same switch. Off means nothing more is sent.
- PostHog is in its US region; see each provider's policy for where it stores data.
On your phone
- A copy of your journal is kept on your phone so it works offline and opens fast. Signing out deletes it from the phone.
- Your phone's own backups (iCloud or a computer) may include that copy. Removing data from the app doesn't change a backup that already exists.
Who processes your data
These companies process your data for us, to run the app and only on our instructions (as "service providers" or "processors").
| Company | What it does | What it receives |
|---|---|---|
| OpenAI (US) | Writes the companion's replies, keeps the moments, learns facts, answers searches in your journal, describes photos, writes the companions' notes and letters | The text of your Talk and the parts of your journal the task needs; search text as you type; your photos for a description. OpenAI may keep API data for a limited period for abuse monitoring; see its policy |
| Soniox | Speech to text while you talk, and the companion's spoken voice | Your voice audio, a short list of names and places from your journal to recognise them correctly, the text the companion says, and a Talk id |
| ElevenLabs | The companion's spoken voice | The text the companion says |
| Supabase (US) | Hosts our database, file storage and server functions | Everything stored in your account, encrypted in transit and at rest |
| Resend | Sends sign-in code emails | Your email address and the code |
| PostHog (US) | Anonymous usage events, if you allow them | A random install id and fixed event names (no content) |
| Sentry | Crash reports, if you allow them | A random install id and the crash details (we scrub text) |
| Apple | The App Store, and purchases if you subscribe | What Apple's own privacy policy describes |
We don't sell your personal information or share it for advertising. We may disclose information if the law requires it, to protect someone's safety, or as part of a sale or merger of the company (with this policy still applying).
How long we keep things
- Your journal (Talks, moments, photos, facts, notes and letters): until you delete it or your account.
- A Talk you discard: deleted after 30 days.
- Quick chats (the short practice Talks): the conversation is deleted when it ends, and in any case within about 3 hours. What's kept: the usage details above, and a care level or safety time if one was raised.
- Things you forget (a person or topic): removed from your moments, facts and the app's notes once the short undo window passes. The name or words you asked to forget are kept, so the app can keep them out from then on.
- Removed companion preferences: deleted within about 2 days.
- Recovery copies of a Talk the app couldn't save: cleared 30 days after it stops trying.
- Sync history (the record your phones use to stay in step): 90 days.
- Usage ledger: 90 days. Talk health timings: 30 days.
- Sign-in codes and phone-transfer codes: minutes; cleared every 15 minutes.
- Speech-to-text cost records (length and cost of each stream, no words): 100 days.
- Backups held by our hosting provider may keep deleted data for a limited time.
Your choices and rights
- See and change what the app remembers: the Memory page, your moments and your preferences.
- Forget a person or a topic: the app removes them from your moments, facts and notes.
- Leave someone or some days out of looking back: your letters won't mention them.
- Export your journal as a file you can save or share.
- Delete a Talk's conversation text, a moment, a photo, or your whole account from the app. Deleting your account deletes your account and your journal's records from our database straight away. Stored files (photos, letters) are then deleted by a background job within minutes, which retries until it succeeds. Backups and the providers above follow their own retention (see each provider's policy).
- Turn on or off anonymous usage and crash reports (off unless you turned them on), and turn off reminders and companion notes.
- Depending on where you live (for example California, the EU or the UK), you may have rights to access, correct, delete or port your data, and to object to or restrict some processing. Contact us at [email protected] and we'll respond within the time the law requires.
Children and young people
- So Today is not for children under 13, and we don't knowingly collect their information. If you believe a child under 13 is using it, contact us and we'll delete the account.
- Under 18: if you tell us you're under 18, or say an age under 18 in a Talk, the app applies extra care: some companions aren't available, topics are handled more carefully, and yearly letters aren't written. Once the app knows you're under 18, it keeps those rules on. Apple's age range isn't connected yet.
Not a medical or crisis service
So Today is a journal and a companion for reflection. It isn't therapy, medical advice or an emergency service, and the companions are AI, not people. If you're in danger or thinking about harming yourself, contact your local emergency number or crisis line, or in the US call or text 988 (the Suicide & Crisis Lifeline). The companions may suggest these lines, but they can't contact anyone for you.
Security
Your data is sent over encrypted connections and stored with access controls, so each account can read only its own. No system is perfectly secure; if a breach affects you, we'll tell you as the law requires.
Changes
We'll update this policy as the app changes, and tell you in the app before a significant change takes effect.
Contact
Aoide Studio LLC, California. Email: [email protected].