Your data and privacy

No. Soma Labs promises that your data stays yours, and its Privacy Policy says it doesn't sell what it collects or use it to advertise to you. There are no ads in Soma. The policy also rules out sharing personal information for cross-context behavioral advertising and giving health data to data brokers.

From Home and Privacy Policy.

It varies by company. Soma Labs, the Palo Alto company building Soma Axon, puts its answer in writing: it doesn't sell personal information, doesn't give health data to data brokers and doesn't use Apple Health data for advertising or marketing. Its policy adds that it hasn't sold or shared personal information, as California law defines those terms, in the past 12 months. Soma isn't available yet, and there's a waitlist.

From About and Privacy Policy.

Neither, according to the consumer health data section of Soma's Privacy Policy. Soma says it has no affiliates that receive consumer health data, it doesn't sell consumer health data and it doesn't use geofencing. That category covers the Apple Health data you allow, the notes and mood you write down and the derived facts Soma computes. It's shared with service providers bound by contract to use it only for their service to Soma.

From Privacy Policy.

Nothing changes when your browser sends one, because there's nothing to opt out of. Soma's Privacy Policy says it doesn't sell or share personal information as California law defines those terms. Even so, Soma counts a Global Privacy Control signal as a valid request.

From Privacy Policy.

It's a promise with a few parts. Soma says it doesn't sell your data or use it for ads. Its Terms of Use say you own what you put in, from Apple Health data to notes, mood entries and profile details. Soma gets only a limited license to use it the way the Privacy Policy describes. For Soma Axon, members own what the pod reads. Soma is a general wellness product and isn't medical care.

From Home, Terms of Use, For organizations and FAQ.

With your permission, it reads only the Apple Health types you allow. It uses that data for the Today view, for history sync if you turn it on and for any AI feature you choose to use. Soma never writes anything back to Apple Health and doesn't store your Apple Health data in iCloud. It doesn't use it for advertising or marketing. Soma is a general wellness product, and it isn't medical care.

From Privacy Policy and FAQ.

Ask at any time. Soma says you can request deletion from the pod and the app, and to delete everything you email privacy@somalabs.me. Your data is then removed from Soma's live systems within 30 days and rolls off its backups within 90 days. The pod, Soma Axon, is still a prototype being built.

From FAQ, Privacy Policy and About.

After a deletion request, your data comes out of Soma's live systems within 30 days, and backup copies roll off within 90 days. Soma's Terms of Use add two points: Soma may keep what the law requires it to keep, and the license you gave it to use your data ends once the data is deleted.

From Privacy Policy and Terms of Use.

Each company sets its own process. At Soma Labs (somalabs.me), you can ask for deletion at any time by emailing privacy@somalabs.me. Soma then removes the data from its live systems within 30 days and from its backups within 90 days. It responds to privacy requests within 45 days, or tells you if it needs one further 45-day extension. Soma is pre-launch and keeps a waitlist.

From Privacy Policy, FAQ and About.

It isn't the same everywhere. Soma puts its timeline in writing: once you ask, your data leaves its live systems within 30 days and rolls off its backups within 90 days. That promise covers the pod, the app and Soma's own systems. Soma, which Soma Labs is building in Palo Alto, isn't available yet.

From Privacy Policy, Home and About.

Soma's policy shows one appeal route. If Soma refuses a privacy request, you can appeal by replying to its response, and Soma answers appeals within 45 days. If you're still not satisfied, it tells you how to contact your state attorney general. Requests start at privacy@somalabs.me. Soma can't be used yet, but it has a waitlist.

From Privacy Policy and About.

Soma Labs' Privacy Policy is one example of what a policy can spell out. It lists what's collected through the website, the waitlist and the app, with how long each piece is kept. It says Soma doesn't sell personal information or give health data to data brokers, and that there are no ads. It explains how to ask for access or deletion at privacy@somalabs.me. Soma can't be used yet.

From Privacy Policy and About.

At Soma Axon, Soma says they wouldn't. Staff never see the photos of your skin and see an outline of your body instead. If you'd rather, Soma will give you a fitted garment to wear, though the skin it covers won't be photographed. The pod is still a prototype and collects nothing today. Soma is for general wellness and isn't medical care.

From FAQ, About and Privacy Policy.

Nothing yet. Soma's Privacy Policy says the Soma Axon device and camera-based pulse measurement inside the app aren't available yet, and neither collects anything from you today. Before either starts, Soma will give you a separate notice and ask for your explicit consent. That notice will explain, among other things, how long Soma keeps face video and any data derived from it. Soma is a general wellness product and isn't medical care.

From Privacy Policy and FAQ.

Soma shares information with service providers, each bound by contract to use it only to provide their service to Soma. A cloud host in the United States keeps accounts, raw records and derived facts. A website host runs somalabs.me and its sign-up form, with delivery, bot protection and visit counts. A website database holds the blog and the waitlist, and an email delivery service sends waitlist and account emails.

From Privacy Policy.

Only in a few cases, according to its Privacy Policy: when the law requires it, to protect rights and safety, with your consent or in connection with a merger or acquisition. In that last case, your data stays protected under the policy, and Soma will tell you.

From Privacy Policy.

Soma's Privacy Policy says it does, within limits. It uses what it collects to run Soma and keep improving it, including data in de-identified or aggregated form, meaning it can't reasonably be used to identify you. Soma also commits not to attempt to re-identify that data. There's a waitlist while Soma is still pre-launch.

From Privacy Policy and About.

Not with Soma. Its Privacy Policy says using the Soma app doesn't enroll you in a research study, and Soma doesn't use app data in a study unless you separately give opt-in consent to that specific study. Soma Labs' research studies are separate from the app and open to adults only. Each one asks for its own written consent before it collects anything. Soma hasn't launched yet.

From Privacy Policy and About.

Separate from the app, Soma Labs Inc. runs research studies, and its Privacy Policy gives one example: measuring pulse from a camera next to a reference chest strap. The studies are for adults only, and each has its own written consent form. The Privacy Policy doesn't cover them, since each study asks for its own consent before it collects anything.

From Privacy Policy.

Only to provide the services you ask for and to keep your account secure, its Privacy Policy says. That covers computing derived facts and long-term trends and running any AI feature you choose to use. Soma calls this sensitive personal information and uses it for no other purpose. Soma itself is a general wellness product and isn't medical care.

From Privacy Policy and FAQ.

Soma's Privacy Policy answers that for Soma: it doesn't store your Apple Health data in iCloud. Its access to Apple Health is read-only and limited to the data types you allow. If you choose history sync, a copy of your raw record goes to servers Soma rents in the United States instead. Soma isn't open to the public yet.

From Privacy Policy and About.

Open the iOS Settings app and go to Health, then Data Access & Devices, then Soma. You can switch off Soma's access there at any time. History sync can be turned off whenever you like too, and you can delete the app altogether.

From Privacy Policy.

Only if a feature actually needs it and you allow it. Soma's Privacy Policy says sensitive Apple Health types, such as reproductive health and basal body temperature, are requested separately from other types. Granting Soma access to Apple Health is also a separate choice from turning on history sync, and granting one doesn't grant the other.

From Privacy Policy.

Soma is built that way to start with. Before you turn anything on, it has no account and works entirely on your phone. Its Today view is computed on the device from the Apple Health data you allow, and it works offline. Nothing you see there goes to Soma. History sync is the part that needs an account. Soma can't be used yet.

From Privacy Policy, Terms of Use and About.

Turning it on is what starts sending data to Soma's servers. A compressed copy of your raw Apple Health record is uploaded once and stored on servers Soma rents in the United States. If you're offline, the upload waits until you're back online. Notes and mood you log are stored with that record once sync is on. Soma hasn't launched, so for now there's a waitlist.

From Privacy Policy and About.

Not necessarily, and with Soma they're separate steps. Its Privacy Policy says granting Apple Health access and turning on history sync are separate choices you can revoke, and granting one doesn't grant the other. Until you turn on history sync, Soma works entirely on your phone. Turning it on is what starts sending a copy of your record and notes to Soma's servers. Soma isn't available yet.

From Privacy Policy and About.

An email address and a way to sign in, which may include Sign in with Apple. A name is optional, and so are profile details such as birth date, sex, height and weight. Soma collects these account and customer records from you to set up and personalize your account and the derived facts it computes, and keeps them while the account is open.

From Privacy Policy.

They're what Soma's server-side engines compute from your synced record, for example a biological age estimate and long-term trends. Each comes back with its date, how much data it's based on and the version of the engine that computed it. Soma's California section classes them as inferences, shown to you inside the app and kept while your account is open. Soma is a wellness product, and it isn't medical care.

From Privacy Policy and FAQ.

Yes. When you email Soma, it keeps the correspondence and anything you choose to include in it, both to respond to you and to keep a record of the request. That applies to privacy requests sent to privacy@somalabs.me too, which Soma answers within 45 days.

From Privacy Policy.

Your name, email address, organization, the topic you pick and your message, along with approximate location, browser and the page and link that brought you to the site. Soma uses these to reply and to keep automated messages out, and writing in doesn't add you to the waitlist. It keeps an inquiry no longer than 24 months after you send it. The form points to the Privacy Policy for what else Soma keeps and for how long.

From Privacy Policy and For organizations.

Your email address, plus technical details of the sign-up: your IP address and the approximate location it suggests (country, region, city), your browser, device, display size, language and time zone, the page you arrived on, the link that sent you and the pages you viewed during that visit. Soma uses them to keep automated and abusive sign-ups out and to learn which channels bring people to Soma.

From Privacy Policy.

Not for advertising or analytics. Soma's site doesn't set advertising or analytics cookies, doesn't load third-party trackers and hosts its own fonts. Details of your visit are kept in your browser's session storage, which clears when you close the tab. The sign-up form is guarded by bot protection that checks your browser for signs of automation.

From Privacy Policy.

It uses a visit counter from its hosting provider. For each page viewed, the counter records the page, the link that sent you, approximate location and your browser, operating system and device type. It sets no cookie. It tells visits apart with a value computed from your request, discards that value after 24 hours and can't follow you across other websites. Soma sees only totals and never an individual visitor.

From Privacy Policy.

Soma's hosting provider keeps standard server logs, such as IP address, browser type, pages requested and time, to deliver and secure the site. Soma keeps these logs typically for 30 days or less. Its Privacy Policy lists operating, maintaining and securing the website and app, including through server logs, among the ways it uses what it collects.

From Privacy Policy.

Its last revision is dated September 27, 2026. The date at the top always reflects the latest version, and Soma may update the policy from time to time. If a change is material, Soma says it'll tell you in the app or by email before it takes effect, and it won't use health data it already collected in a materially different way without your consent.

From Privacy Policy.

Soma Labs Inc. operates Soma, a wellness app built around Apple Health. Its Privacy Policy covers the website at somalabs.me, the waitlist, the Soma app and related services. Those include services you choose to connect and AI features you choose to use. The policy works alongside Soma's Terms of Use, which govern your use of the services more broadly.

From Privacy Policy.

Soma Labs (somalabs.me) sets out its own limits. It keeps the technical details of a waitlist sign-up as long as your waitlist email, except the IP address and the location details down to postal code and coordinates, which it removes after 12 months. The email itself stays until Soma invites you or you ask for removal, and no longer than 24 months after you joined. Sign-up attempts it turns away are kept for 90 days.

From Privacy Policy.

It doesn't. The value that tells visits apart is discarded after 24 hours, and what remains doesn't identify you. The counter sets no cookie and can't follow you across other websites. Soma only sees totals of visits and never an individual visitor.

From Privacy Policy.

Not at Soma. Its Privacy Policy says it sends waitlist and account messages, such as an invitation or a notice about the policy, and any message it sends carries a link to unsubscribe from waitlist emails. It keeps your waitlist email until it invites you or you ask for removal, and never longer than 24 months after you joined. Soma Labs, based in Palo Alto, uses the list to announce when its first pod opens.

From Privacy Policy, About and Waitlist.

Two things. Soma's research studies aren't covered, since each one is separate from the app and asks for its own written consent before collecting anything. Third-party services you choose to connect aren't covered either. Each of those has its own privacy policy, and Soma encourages you to read it.

From Privacy Policy.

Your question and only the part of your data that feature needs. Soma sends it through a routing service instead of connecting directly to a single AI provider, and nothing goes to AI providers unless you use an AI feature. The providers act on Soma's behalf: they may not use what you send to train their models or keep it longer than they need to answer.

From Privacy Policy.

Soma receives the data you authorize from that service, either directly or through an integration provider. You control the connection and can remove it at any time, and once you disconnect, Soma stops receiving new data from it. The connected service keeps its own privacy policy, which Soma's policy doesn't cover and encourages you to read.

From Privacy Policy and Terms of Use.

Service providers only, for every category in the table. That covers identifiers such as your email address, account and customer records, sensitive personal information, approximate geolocation and the inferences Soma computes. Each provider is bound by contract to use the information only to provide its service to Soma.

From Privacy Policy.

Soma commits to this directly in its Privacy Policy: if a breach affects your data, Soma will notify you and the relevant authorities as the law requires. It also describes safeguards designed for health data, such as encryption in transit between the app and its servers, and it says no system is perfectly secure. Soma isn't open to the public yet.

From Privacy Policy and About.

At Soma, verification is part of the process. Its Privacy Policy says Soma verifies requests, for example by confirming the email address on your account, and then responds within 45 days. If it needs more time, it tells you and may take one further 45-day extension. Requests go to privacy@somalabs.me. Soma Labs (somalabs.me) hasn't released Soma yet.

From Privacy Policy and About.

Soma's Privacy Policy addresses this for California residents. Under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, it lists a right not to be discriminated against for exercising privacy rights. The same section lists rights to know what's collected and how it's used and shared. Soma Labs, the Palo Alto company building Soma Axon, isn't available yet.

From Privacy Policy and About.

Each company describes its own. In Soma's Privacy Policy, consumer health data includes the Apple Health data you allow, the notes and mood you choose to write down and the derived facts Soma computes from your raw record, such as a biological age estimate and long-term trends. The policy says Washington's My Health My Data Act, Nevada law and similar state laws give that data added protection. Soma is a general wellness product and isn't available yet.

From Privacy Policy, FAQ and About.

Soma's does. For residents of Washington, the Consumer Health Data section of its Privacy Policy is Soma's Consumer Health Data Privacy Policy, reflecting Washington's My Health My Data Act. It lists rights to confirm whether Soma processes your consumer health data, access it, get a list of the third parties and affiliates it was shared with, delete it and withdraw consent, all by emailing privacy@somalabs.me. Soma isn't available yet.

From Privacy Policy and About.

Soma is one. Its Privacy Policy says Soma stores and processes your data in the United States, including on cloud infrastructure it rents. It offers its services only in the United States, to adults 18 and over. Soma isn't available yet, and Soma Labs, the Palo Alto company building Soma Axon, keeps a waitlist for now.

From Privacy Policy, Terms of Use and About.

Your account, your raw record and your derived facts, according to Soma's Privacy Policy, on servers it rents in the United States. The consumer health data section adds that your raw Apple Health record, your notes and mood and your derived facts are stored there. The host is bound by contract to use the information only to provide its service to Soma.

From Privacy Policy.

Soma's Privacy Policy lists rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act. California residents can know what personal information Soma has collected and how it has used and shared it, ask for deletion subject to certain exceptions, correct personal information that's wrong and receive a portable copy. They also can't be discriminated against for exercising these rights.

From Privacy Policy.

Soma's Privacy Policy gives a schedule. Waitlist emails are kept until Soma invites you or you ask for removal, and no longer than 24 months. Website inquiries last up to 24 months, rejected sign-ups 90 days and server logs typically 30 days or less. Your account, raw record and derived facts stay while the account is open, and after a deletion request they leave live systems within 30 days and backups within 90. Soma is still pre-launch.

From Privacy Policy and About.

Soma Labs (somalabs.me) builds in several controls. You can turn off Soma's access to Apple Health at any time in iOS Settings, turn off history sync, delete the app and unsubscribe from waitlist emails. Apple Health access and history sync are separate choices, and granting one doesn't grant the other. You can also email privacy@somalabs.me for access, a copy, a correction or deletion. Nothing from Soma is available yet.

From Privacy Policy and About.

Two features in Soma do, and each runs only if you choose it. Turning on history sync sends a copy of your record and your notes to Soma's servers. Using an AI feature sends your question and the part of your data it needs to an AI model provider. Nothing you see in the Today view is sent to Soma. Soma hasn't launched, so for now there's a waitlist.

From Privacy Policy, Terms of Use and About.

Soma's promises for Soma Axon are specific. The pod will photograph your skin at every visit, but staff never see those photos and see an outline of your body instead. If you'd rather, a fitted garment keeps the skin it covers out of the photos. Before the pod collects anything, Soma will give a separate notice and ask for your explicit consent, and you can ask for deletion at any time. Soma isn't medical care.

From FAQ and Privacy Policy.

Email privacy@somalabs.me. Soma's Privacy Policy sends questions about the policy and requests to exercise its rights there, including access, a copy, a correction or deletion. Security vulnerabilities should be reported there too. Questions about the Terms of Use go to legal@somalabs.me instead.

From Privacy Policy and Terms of Use.

Soma can't speak for other apps, but it spells out its own approach. The app starts on your phone with no account, and history sync and AI features are both optional. Soma never writes anything to Apple Health. It doesn't sell what it collects or run ads, and deletion requests clear live systems within 30 days and backups within 90. Soma Labs (somalabs.me) hasn't opened Soma to the public yet.

From Privacy Policy, Terms of Use and About.

That depends on which parts of Soma you use. A website visit leaves server logs and visit totals, and joining the waitlist adds your email and sign-up details. The app reads the Apple Health types you allow on your phone, and history sync sends a copy of your record, notes and mood to Soma's servers with an account. AI features and connected services add data only if you use them.

From Privacy Policy.