Privacy Policy
This Privacy Policy explains how SoMic (“SoMic,” “we,” “us,” or “our”) collects, uses, stores, and protects information when you use our mobile application, website, and related services (collectively, the “Service”).
SoMic is an AI-powered content and slide generation app that helps users create carousel-style posts, slide decks, captions, scripts, visual content, and related creative materials.
If you have any questions about this Privacy Policy, contact us at:
Email: support@somicai.app
Website: https://somicai.app
1. Information We Collect
We collect only the information needed to provide, improve, secure, and support the Service.
1.1 Information You Provide
When you use SoMic, you may provide:
- text prompts, ideas, notes, outlines, or other written input;
- voice input or audio recordings, if you use voice features;
- selected photos, images, or background media that you choose to use in your content;
- generated slide content, posts, captions, scripts, and related creative outputs;
- brand, audience, style, or content preferences you choose to save as part of your context;
- content examples or social-media-related materials that you manually provide for analysis;
- messages or requests you send to us for support.
SoMic does not create anonymous backend accounts. You can browse signed-out screens, but account-backed features require Sign in with Apple. When you sign in, we receive and store an Apple account identifier and may receive your name and the email address associated with your Apple ID (which may be Apple's private relay address if you chose to hide your email).
Saved posts, saved ideas, Creator Context, subscription entitlement state, and photos referenced by saved posts are stored with your SoMic account so supported content can be restored on another signed-in device. Some app data (such as text outputs, custom folders, saved styles, imported fonts, preferences, and cached photo copies) is also or only stored on your device.
1.2 Automatically Collected Information
We may collect limited technical information, including:
- your SoMic account identifier and authentication session information;
- device-registration metadata used to enforce the supported-device limit, such as a device-scoped installation identifier, platform, app version, device label, registration status, and a one-way hash of a server-issued device credential;
- app version and build, device type, and operating system version;
- subscription entitlement status when subscriptions are enabled;
- limited AI-operation and quota metadata used for idempotency, abuse prevention, and reliability, without storing prompts or generated output in those operation records;
- limited product-interaction events, such as onboarding steps viewed or completed and generation, paywall, purchase, editor, and export actions or outcomes. These events use random session and flow identifiers that are created for one app launch or action and are not linked to your SoMic account;
- limited diagnostic information used locally to operate the app and, when you contact support, included in your support request.
The current version of SoMic does not use a third-party analytics, advertising, or cross-app tracking SDK. We do not use this information to track you across apps or websites owned by other companies.
1.3 Payment and Subscription Information
If you purchase a subscription or other paid feature, payment is processed through Apple App Store in-app purchases and may be managed through RevenueCat.
We do not receive or store your full payment card number, bank account details, or Apple ID password. Apple and RevenueCat may provide us with limited subscription-related information, such as:
- whether a subscription is active;
- product or entitlement identifier;
- renewal, expiration, cancellation, or refund status;
- your SoMic account identifier, which is also used as the RevenueCat app user identifier to manage entitlements.
1.4 Information We Do Not Collect
Unless added in a future version and disclosed in an updated Privacy Policy, SoMic does not intentionally collect:
- your precise GPS location;
- your phone contacts;
- your postal address;
- your phone number;
- government identification numbers;
- sensitive health, biometric, or financial account information;
- advertising identifiers for cross-app tracking;
- information from children under 13.
2. How We Use Information
We use information to:
- provide AI-powered slide, carousel, and content generation;
- process text, voice, image, and context inputs that you provide;
- save and retrieve your projects, posts, drafts, and preferences;
- personalize outputs based on your selected style, brand, audience, or context;
- transcribe voice input when you use voice features;
- generate, edit, export, and share content;
- manage subscriptions, premium access, and purchase restoration;
- provide support and respond to your requests;
- monitor performance, diagnose bugs, prevent abuse, and improve reliability;
- maintain security and prevent fraud or misuse;
- comply with legal obligations.
We do not sell your personal information.
3. AI Processing
SoMic uses AI models and backend services to generate and improve content.
Before SoMic first sends your content to a third-party AI provider on a device, the app shows an in-app disclosure and asks for your explicit permission. You can review or withdraw this permission at any time under Settings → Data & privacy → AI Data Sharing. If permission is not granted, or if you withdraw it, SoMic blocks future provider-backed AI requests until you grant permission again; non-AI Library, editing, export, account, legal, and support features do not send content to those AI providers.
When you grant permission and request an AI feature:
- Anthropic, PBC or OpenAI, L.L.C. receives the text needed to provide the requested generation. Depending on the feature, this may include your prompts, ideas, Creator Context, generation instructions, transcripts you choose to continue with, and text you ask SoMic to regenerate. SoMic selects which of the two providers handles a given request on its own servers, and may send the request to the other provider if the first is unavailable or cannot complete it, so that generation keeps working during a provider outage. You are not asked to choose a provider, you cannot select one per request, and the provider selected does not change what is sent.
- Anthropic, PBC additionally receives the writing examples you submit for analysis, and only when you explicitly request Content Intelligence.
- OpenAI, L.L.C. additionally receives a voice recording when you choose to use voice input so that it can transcribe the recording. If you continue to generate content from the transcript, that transcript is then handled like any other requested text described above.
This content is sent through SoMic's authenticated backend and is used to provide the AI result you request. The current AI endpoints do not send your selected or stored photos, name, email address, SoMic account identifier, or device credential to Anthropic or OpenAI. Photos referenced by saved posts may still be uploaded to SoMic's private account-scoped storage as described in Section 5.
We use Anthropic and OpenAI as interchangeable service providers for text generation, and require them to protect personal data consistently with this Privacy Policy and applicable requirements and to process it only to provide the contracted services. We do not authorize them to use your information for unrelated advertising or cross-app tracking.
AI-generated content may be inaccurate, incomplete, non-unique, or unsuitable for a particular purpose. You are responsible for reviewing, editing, and verifying any generated content before publishing, relying on, or using it commercially.
We do not intentionally use your content to train public foundation models unless explicitly disclosed or required by a provider’s terms. Where possible, we use provider settings and backend controls intended to limit unnecessary retention and training use.
4. Voice Input and Transcription
If you use voice features, SoMic may process audio recordings or voice input to convert speech into text or to generate content from spoken ideas.
After you grant AI Data Sharing permission, voice input is sent through our backend to OpenAI, L.L.C. for transcription when you choose to use this feature.
We use voice input to provide transcription and generation features. SoMic does not store the uploaded audio file in its application database after the transcription request; the resulting transcript may be used as text input or saved as part of your content. We do not use voice recordings for biometric identification.
5. Photos, Images, and Background Media
If you choose photos, images, or background media for your slides or generated content, SoMic may process those files to display, edit, store, synchronize, or export your content. Photos referenced by saved posts may be uploaded to private account-scoped cloud storage; the app also keeps local cached copies for editing and export.
We access only the photos or media you choose to provide through the app. We do not access your full photo library unless you explicitly grant permission through iOS.
6. User Context and Content Intelligence
SoMic may allow you to create a personal or brand context, such as your niche, audience, tone of voice, visual preferences, goals, and content themes.
If you provide examples of your posts, social content, profile descriptions, or brand materials, we may analyze them to create a derived summary of your style and content strategy.
For content intelligence features, our goal is to store useful derived context rather than unnecessary raw data. You are responsible for ensuring that you have the right to provide any content, examples, links, or materials that you submit for analysis.
7. Third-Party Services
SoMic may use third-party services to operate the app, process content, manage subscriptions, provide infrastructure, and improve reliability.
These may include:
- Apple App Store / StoreKit — in-app purchases and subscription processing;
- Apple Sign in with Apple — authentication for permanent SoMic account access, and revocation of the sign-in connection when you delete your account;
- RevenueCat — subscription entitlement and purchase management;
- Supabase — backend, authentication/session management, database, and edge functions;
- Anthropic, PBC — text and content generation, requested Content Intelligence analysis, and related AI processing that you request after granting AI Data Sharing permission;
- OpenAI, L.L.C. — voice-to-text processing, and text and content generation when SoMic's servers route or fall back to it, that you request after granting AI Data Sharing permission;
- email and support providers — responding to support requests.
Each third-party provider also processes information according to its own privacy policy and terms. When a provider receives personal data from SoMic as our service provider, we require it to provide protection consistent with this Privacy Policy and applicable requirements and to use the data only to provide the contracted service.
We do not authorize third-party services to use your information for unrelated advertising or sale of personal data.
8. Analytics, Diagnostics, and Logs
The current version of SoMic does not use third-party analytics, advertising, or crash-reporting SDKs.
SoMic sends a limited set of first-party product-interaction events to our Supabase backend so we can understand whether core flows work and where they fail. These events may identify a screen or action, a coarse content format, a coarse duration or slide-count range, a typed success or failure category, and the app version and build. They use a random session identifier for one app launch and, where needed, a random identifier for one generation or export attempt. We do not attach your SoMic account identifier, email, name, device credential, or a persistent installation identifier to these analytics events.
Product-interaction events do not include prompts, Creator Context, generated text, slide text, saved ideas, transcripts, audio, photos, filenames, provider requests or responses, raw error messages, or crash stack traces. Raw product-interaction events are retained for no more than 30 days. Aggregated daily metrics that no longer contain event- or session-level identifiers may be retained for up to 13 months.
The app also uses Apple’s on-device logging for local diagnostics, which is not automatically transmitted to us. We may receive crash and performance information made available by Apple through App Store and developer tools, subject to Apple’s privacy settings and terms; SoMic does not use its product-event pipeline to upload raw crash reports or stack traces.
When you contact support, your message may include limited technical diagnostics to help us resolve your issue, such as:
- a Support ID;
- app version and build;
- device model and operating system version;
- subscription plan / entitlement status.
These diagnostics do not include your prompts, generated slide text, voice transcripts, uploaded images, API keys, or your full internal user identifier.
If we add a third-party analytics or crash-reporting tool in the future, we will update this Privacy Policy before enabling it.
9. Cookies and Website Data
Our website may use basic cookies or similar technologies for security, performance, or essential website functionality.
If we add analytics, marketing, or advertising cookies in the future, we will update this Privacy Policy and provide any legally required notices or choices.
10. Data Storage and Security
We use reasonable technical, administrative, and organizational measures to protect information against unauthorized access, loss, misuse, alteration, or disclosure.
However, no internet or electronic storage system is completely secure. We cannot guarantee absolute security.
Your information may be processed and stored in the United States or other countries where our service providers operate.
11. Data Retention
We retain information only as long as reasonably necessary to provide the Service, comply with legal obligations, resolve disputes, prevent abuse, and improve app reliability.
Account content and related app data may be retained until you delete the content or your account, or ask us for deletion assistance. AI operation and quota records are retained as operational records while the account exists and do not contain the prompt, generated output, transcript, or uploaded audio. Device registration and entitlement-mirror records are retained while needed to operate those account features.
Raw first-party product-interaction events are retained for no more than 30 days. Aggregated daily metrics that are not linked to an account or persistent installation identifier may be retained for up to 13 months.
Support messages may be retained as needed to respond to your request and maintain support records.
12. Data Deletion Requests
If you use Sign in with Apple, we may store a limited Apple sign-in credential on our servers solely to support account deletion and to revoke your Sign in with Apple connection when you delete your account. This credential is not used for advertising, tracking, or any other purpose.
You can delete your account and associated server-stored data in the app under Settings → Account → Delete Account. You may also request help with deletion by contacting:
Please include “Privacy Request” or “Data Deletion Request” in the subject line.
We may need reasonable information to verify a support-assisted request and locate the relevant account, such as your Support ID or details about your request. Never send us your password, session token, device credential, or Apple authorization code.
When in-app account deletion succeeds, SoMic deletes the authentication account and account-linked posts and Library content, saved ideas, Creator Context, device registrations, server entitlement mirror, AI usage and operation records, stored Sign in with Apple credential, and private cloud photos. The app also clears the deleted account's local account-scoped state and returns to a signed-out state. If the cloud-photo purge cannot be completed, account deletion fails so it can be retried instead of deleting the account while leaving those photos behind.
Deleting your SoMic account does not cancel an Apple subscription and does not delete transaction or subscription records controlled by Apple or RevenueCat. Minimal RevenueCat webhook idempotency records may remain after the account reference is removed, and support correspondence may remain as described above. Service-provider backups or security records may also persist for the provider's limited retention period before deletion or rotation.
We will process deletion requests as required by applicable law.
Some information may be retained if necessary for legal compliance, security, fraud prevention, dispute resolution, payment records, or backup integrity.
13. Your Privacy Rights
Depending on where you live, you may have rights to:
- request access to information we hold about you;
- request correction of inaccurate information;
- request deletion of your information;
- object to or restrict certain processing;
- request a copy of your information;
- withdraw consent where processing is based on consent;
- lodge a complaint with a data protection authority.
To exercise these rights, contact us at:
We may need to verify your request before responding.
14. California Privacy Notice
If you are a California resident, California law may provide additional privacy rights.
SoMic does not sell your personal information.
SoMic does not share your personal information for cross-context behavioral advertising.
SoMic does not knowingly collect personal information from children under 13.
California users may contact us to request access, correction, deletion, or more information about our privacy practices:
15. Children’s Privacy
SoMic is not directed to children under the age of 13.
We do not knowingly collect personal information from children under 13. If you believe that a child under 13 has provided us with personal information, contact us at support@somicai.app, and we will take reasonable steps to delete the information.
16. International Users
If you access SoMic from outside the United States, your information may be processed in the United States or other countries where we and our service providers operate.
By using the Service, you understand that your information may be transferred to and processed in countries that may have privacy laws different from those in your country.
Where required, we rely on appropriate legal bases and safeguards for international data transfers.
17. No Sale of Personal Information
We do not sell your personal information.
We do not use your prompts, generated content, voice input, selected media, or private app data for third-party advertising sales.
18. Changes to This Privacy Policy
We may update this Privacy Policy from time to time.
If we make material changes, we may notify you through the app, website, or other reasonable means. The “Last Updated” date at the top of this policy indicates when it was most recently revised.
Your continued use of the Service after an update means you accept the revised Privacy Policy.
19. Contact Us
If you have questions, requests, or concerns about this Privacy Policy or your data, contact us at:
SoMic
Email: support@somicai.app
Website: https://somicai.app
For privacy-related requests, please include “Privacy Request” in the subject line.