Privacy notice

Under legal review. The controller, AI Companion, is a company pending incorporation; its registration details will be added once it is registered.

1. Who we are

These sites are operated by AI Companion (a company pending incorporation), the data controller. You can reach us at support@mysoulm8.com (a postal address is available on request). We have not appointed a Data Protection Officer. This notice covers our pre-launch sites for Sophie and our other companion; their only purpose is to collect an email so we can tell you once we launch.

2. What we collect

Your email (required) and name (optional), when you join the waitlist.
If you accept analytics: Google Analytics 4 data — a random analytics identifier, device/browser type, approximate (city-level) location, pages viewed, and interaction events.
As proof of your consent choice: the choice itself, the time, a random anonymous identifier, your IP address, and your browser user-agent.

We do not collect phone numbers, payment data, or any special-category data. The anonymous identifier in the consent record is not linked to your email unless you also join the waitlist.

3. Why we use it, our legal basis, and how long we keep it

To send you one launch update when Sophie is ready — on the basis of your consent (Art. 6(1)(a) GDPR: your act of submitting the form with the consent statement beside it). Kept until the update is sent, then deleted — or sooner if you withdraw consent or ask us to erase it.
To measure interest via analytics — on the basis of your consent. Analytics data is retained for 2 months. You can withdraw at any time.
To demonstrate that consent was given — to meet our accountability duty (Art. 5(2), 7(1) GDPR). The consent record is kept as proof until the waitlist data is deleted at launch.

We do not sell your data, and we do not use it for advertising.

4. Who receives your data

Your signup and consent records are stored with Google (Firebase / Cloud Firestore); analytics is processed by Google Analytics, only if you accept. At launch, your email may be exported to an email tool to send the one update. Each acts as our processor under a data-processing agreement; we do not otherwise share your data except where required by law.

5. International transfers

We are based in Israel, which the EU recognises as providing an adequate level of data protection (Art. 45 GDPR). Our processors are part of Google, which may process data in the United States; those transfers rely on the EU-U.S. Data Privacy Frameworkand, as a fallback, the European Commission’s Standard Contractual Clauses (Art. 46 GDPR). Ask us for more on these safeguards using the contact above.

6. Your rights

You can ask us to give you access to, correct, erase, restrict, or port your data, and you can object to processing. You can withdraw consentat any time — change analytics from “Cookie choices” in the footer, or contact us to be removed from the waitlist; withdrawal does not affect processing that already took place. To exercise a right, email support@mysoulm8.com; we respond within one month, free of charge.

You may also lodge a complaint with a supervisory authority: in the EU/EEA, the authority in your country (directory at edpb.europa.eu); in Israel, the Israeli Privacy Protection Authority (gov.il).

7. Cookies and similar technologies

We show a consent banner to everyone. By default, analytics storage is denied (Google Consent Mode) and nothing is set until you choose. We store your consent choice and a random anonymous identifier in your browser’s local storage so we remember your choice — these are strictly necessary and are not used to track you. Only if you accept, Google Analytics sets _ga cookies to tell visitors apart. We use no advertising or social-media tracking, no pixels, and no fingerprinting.

8. Automated decisions and AI

These waitlist sites do not carry out automated decision-making or profiling (Art. 22 GDPR). Yours is an AI companion, but these pre-launch pages only collect your email and consent — no AI system processes your personal data here.

9. How we protect your data

We use HTTPS for all connections, restrict database access to our server, write only through a server-side route (no database credentials in your browser), and block all direct client access to the database. We keep the data we hold to the minimum above.

10. Children

These sites are not directed at children and we do not knowingly collect data from anyone under 16. If you believe a child has provided us data, contact support@mysoulm8.com and we will delete it.

11. Changes to this notice

If we change how we handle your data, we will update this notice and the date below.

12. Contact

AI Companion (pending incorporation) — support@mysoulm8.com (postal address on request).

Last updated: 22 June 2026.