Privacy Policy

Introduction

Rogue Labs LLC ("Rogue Labs," "we," "us," or "our") operates the Sona mobile application and related services, including roguelabs.nyc, sona.cards, and Sona sharing pages. This Privacy Policy explains what information we collect, why we use it, when we disclose it, and the choices available to you.

Sona is designed to become more personalized and helpful as you use it. We use information to provide that experience, operate the service, keep it safe, and improve it. We never sell your personal information.

Account and Profile Information

• Your name, email address, account identifier, sign-in provider, and authentication information
• Profile details such as your pronouns, date of birth, birth time, birth location, time zone, onboarding answers, and preferences
• Subscription status and entitlement information used to provide Sona Pro features

Content You Create

• Conversations with Sona, prompts, responses, tarot readings, and other AI-generated content
• Reflections, journal entries, stress ratings, memories, personal notes, and feedback
• Connection profiles, compatibility information, birth details you add for other people, and photos you choose to upload or capture
• Images and other content you choose to include in a conversation, reflection, profile, or sharing feature

Contacts and Connections

If you grant Sona access to Contacts, Sona may upload and sync address-book details such as names, nicknames, organizations, birthdays, phone numbers, email addresses, and contact photos. We use this information to help you add people you know, keep your connections up to date, and personalize guidance and compatibility readings about the people in your life. Your contacts are not notified when you add or sync them.

You can deny or revoke Contacts access in iOS Settings. Revoking access stops future access from your device, but it does not automatically delete information that was already synced. You can request deletion by contacting us.

Calendar, Location, Photos, and Device Permissions

Sona only accesses permission-based data after you grant the relevant iOS permission. Depending on the features you use, this may include:

• Calendar event titles, dates and times, locations, notes, calendar names, and related event details, used to make guidance and check-ins relevant to your actual schedule
• Precise location, background location visits, arrival and departure times, place names, streets, cities, and nearby areas of interest, used to tailor guidance to where you are and the places you visit
• Photos you select and images you capture with the camera, used only for the feature where you provide them
• Notification permission and device push tokens, used to deliver reminders, compatibility updates, and personalized check-ins you choose to receive

You can change these permissions at any time in iOS Settings. Some features will not work without the information they require.

Public Sharing and sona.cards

Sona lets account holders create compatibility links and, when they choose, public birth-chart profile links. If you respond to a compatibility link on sona.cards, we collect the answers you submit, which may include your name, birth date, birth location, relationship to the link owner, and an optional message. We also process technical information such as your IP address to protect the service and enforce rate limits.

The owner of a compatibility link may see your submitted information and generated result in Sona. A public profile is visible only when its owner chooses to make it available. Do not submit another person’s information unless you have the right to do so.

Our websites may use browser storage, such as session storage, to keep a sharing flow working as you move between pages. Hosting and delivery providers may also process standard request logs and device information.

Information Collected Automatically

• Device and app information such as device model, operating system, app version, language, time zone, IP address, and identifiers associated with your device, installation, or account
• Usage information such as screens viewed, features used, actions taken, session activity, purchase-flow events, and notification interactions
• Diagnostic and performance information such as errors, crashes, request timing, and service logs
• Marketing attribution information such as campaign and referral data and, where you grant Apple’s tracking permission, advertising identifiers

Subscriptions and Purchases

Apple processes payments for Sona subscriptions. We do not receive your full payment-card details. We receive and store information needed to manage access, such as the product purchased, subscription status, transaction or entitlement identifiers, renewal events, and related account and device identifiers. RevenueCat helps us manage subscriptions and purchase entitlements.

How We Use Information

• Provide, maintain, and secure Sona and its websites
• Build your birth chart and generate personalized horoscopes, conversations, reflections, tarot readings, compatibility readings, and other requested content
• Remember context so Sona can respond consistently and become more useful over time
• Use optional contacts, calendar, location, photos, and notifications for the specific personalized features you choose
• Create and deliver public or private sharing experiences at your direction
• Authenticate accounts, process subscriptions, restore purchases, and provide customer support
• Measure product performance, understand how features are used, attribute installs, fix bugs, prevent abuse, and improve Sona

AI Processing

Sona uses third-party AI providers to generate responses, readings, insights, compatibility results, and images. Information needed for a feature may be sent to those providers, including your prompts, conversations, profile and birth-chart context, reflections, calendar context, location context, connection information, and images you submit.

We limit what is sent to what is reasonably needed for the requested or personalized feature. OpenAI conversation state may be retained for up to 30 days to support continuing conversations, while Sona’s own copy of your conversations and other account content may be retained as described below.

When We Disclose Information

We disclose information only as needed to operate Sona, follow your directions, or meet legal and safety obligations. This may include:

• Service providers that help with hosting, authentication, storage, AI processing, image generation, subscriptions, analytics, attribution, notifications, security, and monitoring, including Apple, Supabase, OpenAI, Google, RevenueCat, Mixpanel, AppsFlyer, Render, Cloudflare, and GitHub
• Other users or members of the public when you use a sharing feature or otherwise direct us to disclose information
• Law enforcement, regulators, courts, or other parties when required by law or reasonably necessary to protect rights, safety, and the integrity of the service
• A buyer, successor, or advisor in connection with a financing, merger, acquisition, reorganization, or sale of all or part of our business, subject to appropriate confidentiality protections

These providers process information under their own terms and privacy commitments. We do not sell your personal information to data brokers, advertisers, or anyone else.

Data Retention

We generally retain account information and content for as long as your account is active or as needed to provide Sona. Conversations, reflections, connections, synced contacts, calendar events, location visits, compatibility submissions, and generated content may remain stored until you delete the relevant content where a deletion control is available or ask us to delete it.

We may retain some information longer when necessary for security, fraud prevention, backups, accounting, dispute resolution, or legal compliance. When information is no longer needed, we delete it or deidentify it where reasonably practicable.

Security

We use administrative, technical, and organizational safeguards designed to protect personal information, including encryption in transit, encryption at rest where supported by our providers, access controls, and service monitoring. No storage or transmission system is completely secure, so we cannot guarantee absolute security.

Your Choices and Rights

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information; object to or restrict certain processing; or withdraw consent. To make a privacy request, contact [email protected]. We may need to verify your identity before completing a request.

• Manage Contacts, Calendar, Location, Camera, Photos, Notifications, and Tracking permissions in iOS Settings
• Manage or cancel your subscription in your Apple ID subscription settings
• Edit profile information and remove supported content within Sona
• Ask us to delete your account and associated personal information
• Unsubscribe from non-service communications using the instructions in the message or by contacting us

Legal Bases for Processing

If you are in the European Economic Area, United Kingdom, or another place that requires a legal basis, we process information as needed to perform our contract with you, based on your consent, for our legitimate interests in operating and improving Sona, and to comply with legal obligations. You may withdraw consent at any time, but that does not affect processing already completed.

International Data Transfers

Rogue Labs and its service providers may process information in the United States and other countries where they operate. Those countries may have different data-protection laws than your home country. Where required, we use appropriate safeguards for international transfers.

Children’s Privacy

Sona is not directed to children under 13, and we do not knowingly collect personal information from a child under 13. If you believe a child has provided personal information to Sona, contact us so we can investigate and delete it as appropriate.

Changes to This Policy

We may update this Privacy Policy as Sona and our legal obligations change. We will post the updated policy here, revise the last-updated date, and provide additional notice in the app or through another appropriate channel when a change is material.

Contact Us

If you have questions, concerns, or a request about this Privacy Policy or your personal information, contact Rogue Labs LLC at [email protected].