SOUL — School of Ur Life

Policies & information

Privacy Policy

What SOUL collects, why we use it, who helps us operate the service, and the choices available to you.

Last updated 26 August 2026

Browse policies

Bengaluru, Karnataka, India

care@schoolofurlife.com

1. Scope and contact

This Privacy Policy explains how SOUL — School of Ur Life handles personal data when you use our website, member PWA, Studio-supported services, payments, gifts, live sessions and communications. SOUL is responsible for deciding how the product uses this data.

For privacy questions, requests or grievances, email care@schoolofurlife.com. We are based in Bengaluru, Karnataka, India and aim to acknowledge privacy requests within two business days.

2. Data we collect

Depending on the features you use, we collect:

  • account data such as your name, email address, phone number, authentication provider and account status;
  • profile and preference data such as timezone, interests, goals, reminder choices and onboarding responses;
  • membership and transaction data such as plan, order identifiers, payment status, renewal dates, refunds, gift recipient details and invoices;
  • activity data such as content viewed, playback position, completion, points, streaks, saved items, reactions, program progress and live attendance duration;
  • content you choose to provide, including private journal entries, support requests and moderated live-chat messages;
  • technical and security data such as device/browser type, app version, approximate network information, consent state, diagnostic events and hashed abuse-prevention identifiers;
  • notification data such as push subscriptions, delivery status, quiet hours and communication preferences.

We do not ask for or store your card number, CVV, UPI PIN or banking password. Razorpay and your payment provider process those credentials.

3. How we use data

We use personal data to:

  • create and secure your account;
  • personalise and deliver content, playback, downloads, programs and live sessions;
  • process memberships, gifts, renewals, cancellations and refunds;
  • calculate progress, streaks and earned grace days accurately;
  • deliver service messages and reminders you have chosen;
  • operate moderation, prevent fraud and enforce our terms;
  • troubleshoot, measure reliability and understand aggregate product usage;
  • meet accounting, legal and regulatory obligations;
  • respond to support, privacy and grievance requests.

We do not sell personal data. We do not use journal text for advertising, profiling or product analytics.

4. Private journal entries

Journal entries are visible to you through your account. They are excluded from analytics and the member-support dashboard. Authorised infrastructure may process encrypted transport, storage, backup and deletion operations needed to provide the journal. Do not use the journal as emergency or medical storage.

5. Payments and Razorpay

Razorpay processes checkout, payment instruments, recurring mandates and refunds under its own privacy terms. SOUL receives limited transaction information such as payment, order and subscription identifiers, amount, status, method category and timestamps. We use signed webhooks as the authoritative record of payment state.

6. Service providers

We use carefully selected providers to operate SOUL. Depending on configuration, these include Supabase for authentication and data, Vercel for hosting, Razorpay for payments, Cloudflare R2 for private media storage, Mux for video, LiveKit for live sessions, Trigger.dev for background jobs, Resend for email, Twilio for phone verification and consented SMS, PostHog for consent-aware analytics, Sentry for error monitoring, and Cloudflare Turnstile for abuse prevention.

Providers may process data only for the services they supply and under their own contractual and legal obligations. We configure analytics and error reporting to avoid journal contents, payment credentials and unnecessary sensitive profile fields.

7. Cookies, local storage and device permissions

SOUL uses essential cookies and local storage for sign-in, security, preferences, PWA installation, playback and encrypted offline downloads. Optional analytics is used only according to your consent choice. Push notifications, camera, microphone and screen sharing require device permission and are used only for the feature you initiate. See the Cookie and Local Storage Policy for details.

8. Sharing and disclosure

We share data with service providers only as needed to operate SOUL. We may also disclose information when required by law, to respond to lawful process, to protect people or the service from harm, or as part of a corporate transaction subject to appropriate safeguards. We do not expose private journals to administrators handling ordinary support requests.

9. International processing

Some providers may process data outside your state or outside India. Where this occurs, we use provider controls and contractual safeguards and follow applicable transfer requirements. Core database infrastructure is intended to be provisioned in India for the production service.

10. Retention

We keep account and feature data while your account is active and only as long afterward as needed for the purposes described here. Account deletion removes or de-identifies member content through the coordinated deletion workflow. Payment, invoice, fraud-prevention, audit and legal records may be retained for statutory periods. Provider backups and logs expire according to controlled retention schedules.

11. Security

We use access controls, row-level database security, signed media access, encrypted transport, protected secrets, audit records and monitoring. Offline music is encrypted and tied to a local device key. No system is perfectly secure; please contact us immediately if you believe your account or personal data has been compromised.

12. Your choices and rights

Subject to applicable law, you can:

  • view and correct profile information;
  • control email, push and consented SMS preferences;
  • withdraw optional analytics or notification consent;
  • download a structured export of your account data;
  • delete your account and private journal entries;
  • ask us to explain, correct or address our handling of your personal data;
  • raise a grievance or withdraw consent where processing depends on consent.

Some processing is necessary to provide an account or complete a transaction. Withdrawing that processing may require the relevant feature or account to end. We may verify your identity before fulfilling a request.

13. Children

SOUL is not directed to or marketed to children. A person who is not legally able to consent to data processing should use SOUL only through a parent or lawful guardian and subject to applicable law. If you believe a child provided personal data improperly, contact us.

14. Changes

We may update this policy as the service, providers or law changes. We will publish the new date and notify members of material changes where appropriate.