Privacy Policy

1. What We Collect

We aim to collect only what we genuinely need to run and improve Sorei OS. Depending on how you use the system, we may collect:

1.1 Account Information (for registered users)

• Email address
• Encrypted password (we store only a hashed version)
• Basic profile preferences (e.g., display name, interface preferences, access tier)

1.2 Interaction Data

• Text you submit (messages, reflections, responses to prompts)
• System outputs (AI-generated replies, prompts, and reactions)
• Metadata about your sessions (timestamps, session IDs, general usage patterns)

1.3 Safety & Integrity Signals

• Automated or manually reviewed flags indicating:
  • potential self-harm or harm to others,
  • harassment, hate, or abusive content,
  • system misuse or suspicious behavior.
• These are used solely to protect users, maintain integrity, and enforce our Terms.

1.4 Technical & Usage Data

• Device type, browser type, and basic technical info
• Non-identifying usage metrics (e.g., which features are used, error logs)

2. How We Use Your Data

We use the information we collect to:

• Operate the system — Provide responses, save your sessions (if applicable), and keep things running.
• Improve Sorei OS — Refine prompts, flows, and system behavior based on anonymized patterns.
• Personalize your experience — Remember your preferences, tone, or recurring themes (if you choose to use those features).
• Maintain safety & integrity — Detect and respond to possible self-harm content, violence, abuse, or misuse. Enforce our Terms of Service.
• Communicate with you (if you opt in) — Send updates, feature announcements, or invitations related to Sorei OS. Respond to support or privacy requests.

We do not sell or rent your personal data. We may use aggregated and de-identified information (data that cannot reasonably be linked back to you) to analyze usage and inform future improvements.

3. AI & Third-Party Service Providers (Including OpenAI)

To generate responses and operate Sorei OS, we use third-party service providers, including AI model providers. At the time of this policy, this includes:

• OpenAI's ChatGPT (accessed through their API or related services), and
• Other infrastructure or analytics providers (such as hosting platforms, email services, or logging tools).

When you interact with Sorei:

• Your messages, prompts, and related context may be sent to these providers so they can generate responses or support system operation.
• These providers process your data on our behalf in line with their own terms and applicable law.

Where possible, we minimize identifying information and use internal user IDs instead of real names. We encourage you not to include highly sensitive personal data in your messages. If we substantially change or add core AI providers, we may update this policy or provide additional notice.

4. Data Location & Transfers

Our services and third-party providers may be located in the United States and other countries. By using Sorei OS, you understand that your data may be processed in regions that may have different data protection laws than your country of residence. Where required, we take reasonable steps to help ensure that international data transfers comply with applicable legal requirements.

5. How We Store & Protect Your Data

We take reasonable steps to protect your information, including:

• Using HTTPS to encrypt data in transit.
• Storing account data (like passwords) using industry-standard hashing and encryption methods.
• Restricting direct access to logs and databases to authorized personnel or processes only.
• Periodically reviewing internal access and storage practices.

No system is perfectly secure, but we are committed to continuously improving our safeguards as Sorei evolves.

6. Data Retention

We keep data only as long as we reasonably need it for the purposes described above, or as required by law. Current baseline (subject to change as the system matures):

• Account information — Stored while your account is active. If you request deletion, we will remove or anonymize identifiable account info within a reasonable timeframe, except where retention is required by law or for legitimate business reasons (e.g., preventing abuse or resolving disputes).
• Conversation logs & interaction data — Typically retained for up to 12 months to support memory features, debugging, and system improvement. Some aggregated and de-identified data may be kept longer for analytics.
• Safety & incident flags — May be retained for up to 24 months to ensure safety, investigate misuse, and maintain system integrity.
• Backups — Backups may contain older copies of data for a limited time until rotated out under our backup schedule.

These retention periods are approximate and may be updated as we refine Sorei OS. We will update this policy if those changes are material.

7. Your Choices & Data Rights

Depending on your location, you may have certain rights regarding your personal data, such as:

• Accessing a copy of the personal data we hold about you.
• Requesting correction of inaccurate information.
• Requesting deletion of your data ("right to be forgotten") where applicable.
• Objecting to or limiting certain types of processing.

Even where specific legal rights do not apply, we aim to be reasonable and transparent. To make a request, contact us:

We will review and respond within a reasonable period and in accordance with applicable laws.

8. Age & Eligibility

Sorei OS is intended for use by adults and mature users capable of understanding these Terms and this Policy. It is not designed for young children. If we become aware that we have collected personal data from a child in violation of applicable laws, we will take steps to delete that data as soon as reasonably possible.

9. Policy Updates

This Privacy Policy may evolve as Sorei OS grows and as legal or technical requirements change.

• We will update the "Last Updated" date at the top of this page when changes are made.
• Where changes are material, we may also provide additional notice (for example, on-site notices or email).

Your continued use of Sorei OS after updates become effective constitutes your acceptance of the revised Policy.

10. Contact

If you have questions about this Privacy Policy, or how your data is handled, please contact us:

We take your trust seriously. Sorei OS is meant to be a reflective, supportive space—and part of that is honoring your privacy with clarity and care.