Privacy Policy

Effective date: Jul 21, 2026

This Privacy Policy explains how Sandeep Caberwal, an individual doing business as "Say So" ("we," "us," or "our"), collects, uses, and shares information when you use the Say So mobile application and related services (the "Service").

Say So is designed for people 13 and older. We do not knowingly collect personal information from children under 13 (see Section 8).

1. Information We Collect

Account information. When you create an account, we collect your phone number and login credentials (password). Authentication is handled through Supabase.

Your practice content. The core of Say So is the content you create: your daily self-talk entries, reframed thoughts, the name you choose to address yourself by, streak and progress data, prize selection, and related activity (such as dates and times of entries). This content may include sensitive reflections about how you think and feel — we treat it as private to you.

Shipping information. If you earn a prize, we (or your parent/guardian on your behalf) collect the recipient name and postal shipping address needed to deliver it. We collect this only at fulfillment time and use it only for prize delivery and related communication.

Device and usage information. We automatically collect limited technical information such as device type, operating system version, app version, crash reports, and basic usage events (e.g., which screens are used and when entries are logged). We use this to keep the Service working, fix bugs, and understand how the app is used.

Notifications. If you enable push notifications, we collect a device push token so we can send you reminders and streak updates. You can turn notifications off at any time in your device settings.

A note on dictation. Say So entries are entered as text. If you use your device keyboard's microphone/dictation feature to speak instead of type, that voice input is captured and converted to text by your device's operating system (e.g., Apple's dictation), under Apple's own terms and privacy practices — the app receives only the resulting text, not your audio.

2. How We Use Information

We use the information we collect to:

Provide the Service: sync your entries, calculate streaks and stats, show your history, and deliver your weekly summaries;
Deliver earned prizes and communicate with you about fulfillment;
Send reminders and notifications you've enabled;
Maintain, debug, secure, and improve the Service;
Respond to your questions and support requests;
Comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information. We do not use your information for third-party advertising, and the app contains no third-party advertising. We do not use the content of your self-talk entries for marketing, and we do not use it to train AI models.

3. How We Share Information

We share information only in these limited circumstances:

Service providers. We use Supabase to provide authentication, database, hosting, and related infrastructure. Your data is stored and processed on their systems on our behalf, under their data processing terms.
Prize fulfillment. We share recipient name and shipping address with shipping carriers and, where applicable, retailers or fulfillment partners, solely to deliver your prize.
Legal reasons. We may disclose information if we reasonably believe it is required by law, legal process, or a government request, or necessary to protect the safety, rights, or property of users, the public, or the Service.
Business transition. If the Say So project is transferred to a company or successor (for example, if it is incorporated or acquired), your information may be transferred as part of that transition, subject to this Privacy Policy or one that is at least as protective.

We do not share your information with data brokers, advertisers, or analytics companies for their own purposes.

4. Data Storage and Security

Your data is stored on Supabase servers located in the United States. Data is encrypted in transit. We limit access to personal data to what is needed to operate the Service. No system is perfectly secure, and we cannot guarantee absolute security — please use a strong, unique password.

5. Data Retention and Deletion

We keep your account information and practice content for as long as your account is active. Shipping addresses are retained only as long as needed for fulfillment and record-keeping.

You can delete your account at any time by emailing us at contact@saysoapp.org. When you delete your account, we delete your account information and practice content from our active systems within 30 days, except where we are required to retain limited records by law. Residual copies may persist in encrypted backups for a limited period before being purged.

6. Your Choices and Rights

Access and correction. You can view and edit your entries and account details in the app. You can also email us to request a copy of your data.
Deletion. You can delete individual entries or your entire account as described above.
Notifications. You can disable push notifications in your device settings.
California residents. California law gives residents rights regarding personal information, including the right to know, delete, and correct. California also gives users under 18 the right to request removal of content they have posted. To exercise any of these rights, contact us at contact@saysoapp.org. We will not discriminate against you for exercising your rights.

If you are a parent or guardian of a user aged 13–17 and have questions about your teen's data, contact us at contact@saysoapp.org. We may take reasonable steps to verify your identity and relationship before acting on a request.

7. International Users

The Service is operated from the United States and intended for users in the United States. If you use the Service from elsewhere, you understand that your information will be transferred to and processed in the United States, where privacy laws may differ from those in your country.

8. Children Under 13

The Service is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If we learn that we have collected personal information from a child under 13, we will delete it and the associated account promptly. If you believe a child under 13 is using the Service, contact us at contact@saysoapp.org.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you in the app or by email before the changes take effect. The "Effective date" at the top shows when this policy was last revised.

10. Contact

Questions or requests regarding privacy: contact@saysoapp.org