Privacy Policy

• Eli is an AI, not a person. What you tell her is processed by software, not read by people.
• Our team does not read your conversations, and our admin tools never show them. They are encrypted before they are stored.
• We do not sell your data, and we do not use it for advertising.
• You can delete everything about you, yourself, at any time (button below).
• We keep payment records the law requires, without your name attached. Section “How long we keep things” says exactly what.

Soul in Motion Private Limited (“we”, “us”), CIN U86909UP2026PTC250824, registered office: Moh Sanwaldass Po, Najibabad, Bijnor, Uttar Pradesh 246763, India. We run Soul in Motion presents Eli from India. We decide why and how your personal data is used, which makes us the “data fiduciary” under India's Digital Personal Data Protection Act, 2023 and the “controller” under the GDPR and UK GDPR.

Contact for anything in this policy: business@thesoulinmotion.in.

• Who you are to us. If you give an email address, we use it to send your sign-in link and your receipts. If you do not, you are a guest with a random ID and we hold no name or email. If you tell Eli what to call you, we keep that name so she can use it.
• Your conversations. What you type or say to Eli and what she says back, plus short summaries and key facts she writes after a session so she can remember you next time. This may include information about your feelings, relationships and health. We process it only with your explicit consent (the tick on the first screen), to run your sessions, and to keep you safe.
• Your voice, if you talk. Your speech is streamed in real time to our voice provider, which turns it into text and speaks Eli's replies. The audio is not recorded. The provider's copy of the text is deleted shortly after the call ends (normally within minutes). The only lasting copy is the encrypted one in our own database.
• Safety signals. What you write or say is checked automatically for signs you may be in danger (see “Automated safety checks”). When something is found we record when, how serious it looked, its category, and a short snippet of what matched, at most 60 characters.
• Payments. Card and UPI details go straight to our payment provider, Razorpay. We never see or store them. We keep a record of each order: amount, currency, what was bought (typing or voice), whether it was paid, Razorpay's reference numbers and the date. For monthly plans we also keep the plan, its status, renewal dates and when you agreed to the renewal terms.
• Roughly where you are. Each time you visit, our host tells our server your country, worked out from your internet connection. We use it to pick the currency and price, the language shown under the English, and the helplines that ring where you are. We do not save it to your account (a payment records its currency).
• What you send us. Feedback written inside Eli, and emails to business@thesoulinmotion.in. We read these.
• Technical data. Our hosting provider keeps short-lived server logs (these include your IP address) for security and fixing faults. Our own app does not keep your IP address. To block abuse it counts requests per address using a scrambled (hashed) version of the address, held for a few minutes.

Eli's memory of you is encrypted (AES-256-GCM) before it is stored, and the conversation text is only decrypted by our servers to let Eli continue your session. The key is held by the company, so this is a promise we keep and build around, not something that is mathematically impossible for us to break. Our admin tools show when a session happened, how long it was, typing or voice, what it cost, and counts of safety signals. They never show the words.

We use these companies to run Eli. Each receives only what it needs to do its job, for us, and not to sell or to advertise.

• Anthropic (United States), the AI model that writes Eli's replies. It receives your messages and Eli's memory of you for each reply. Its terms for business customers do not allow it to train its models on our customers' content.
• ElevenLabs (a company based in the United States, which may process audio in more than one country), the voice. It receives your speech and Eli's spoken replies during a call.
• Supabase (database in Mumbai, India), where your account and encrypted conversations are stored.
• Vercel, our host. Our servers run in Mumbai, and pages reach you through Vercel's worldwide network. Vercel Web Analytics counts page views without cookies, using only the page address and campaign tags, never your conversations or your sign-in links.
• Razorpay (India), which takes your payment and keeps its own records, as a payment company must.
• Resend (United States), which delivers our emails: sign-in links, receipts, plan confirmations and withdrawal acknowledgements.

We may also disclose information when the law requires it, or to protect someone from serious harm. We do not sell your data or share it for advertising.

We do not use your conversations to train AI models, and we do not give any of these providers permission to use them for their own model training.

Your account and conversations are stored in India. To answer you, parts of them are sent to the AI and voice providers above, which are outside India. If you are in the European Economic Area or the United Kingdom, that means your data leaves your region. We use providers whose business terms limit what they may do with it, and we keep what we send them to what the reply needs.

You can ask us to show you what we hold, correct it, give you a copy, stop using it, or delete it, and you can take back your consent at any time. Deleting your account (below) is the quickest way to withdraw consent and erase everything about you. For anything else, email business@thesoulinmotion.in. We reply within 30 days.

In India you have the rights the DPDP Act gives you, including access, correction, erasure and a way to complain. In the EU and UK you also have the right to restrict or object to processing and to data portability, and to complain to your local data protection authority. In US states with privacy laws (California and others) you can ask to access, correct or delete your information, and we do not sell it or share it for advertising. We will not treat you worse for using these rights.

Deleting your account also ends any monthly plan, so nothing is charged again. Money already paid for the current month is not refunded when you delete, unless the law says otherwise. You can instead cancel the plan on your account page and keep it to the end of the month.

To keep you safe, Eli's system automatically checks what you write or say for signs of crisis, such as thoughts of harming yourself. If it finds one, Eli responds with care and shows helplines that ring where you are. This check is done by software. It does not involve a person reading your conversation, and it can be wrong, in both directions. Eli is not a crisis service. Read how this works, and the helplines, on the crisis help page.

• Sign-in cookie (needed): keeps you signed in, as a guest or by email.
• Language cookie: remembers for 30 days which language to show under the English, chosen from your country. If you use a price-region test link, a second cookie remembers it.
• On your device: the room and light or dark look you chose, whether we have already offered to save your progress, and a count of visits used to decide when to suggest adding Eli to your home screen.

We do not use advertising or tracking cookies, and we run no advertising scripts or cross-site trackers on Eli. The only analytics is the cookieless Vercel Web Analytics described above.

Everything travels over HTTPS. Conversations and memory are encrypted before storage and access to our systems is restricted. If a breach ever affects you, we will tell you and the authorities as the law requires.

Eli is for adults, 18 and over. We ask you to confirm your age before you begin. If we learn that someone under 18 is using Eli, we will close their account and delete their data.

Debu Rajput, Director and Grievance Officer: business@thesoulinmotion.in. We acknowledge a complaint within 48 hours and aim to settle it within 30 days. If you are not satisfied, you can complain to the data protection authority where you live.

If we change how we handle your data, we will update this page and its date, and for material changes we will ask you again before you continue.