Privacy Policy
Your privacy matters — especially with something as personal as brain health. In plain terms: your risk-profile answers stay in your browser by default and are only sent to our servers if you subscribe and turn on cloud backup. We never sell your data. We use Stripe for payments (we never see your full card number) and Supabase for accounts. This page explains exactly what we collect, why, and the rights you have over it.
Who we are. Solenna ("Solenna", "we", "us") is a dementia risk-reduction web application operated by Solvion Solutions, a sole proprietorship based in Sweden. For any privacy question or request, contact us at hello@solenna.io. This policy applies to solenna.io and its subdomains (the "Service").
1. The information we collect
- Account information. When you create an account we collect your email address and authentication details. We use Supabase for authentication; your password is stored by Supabase in hashed form and is never visible to us. If you sign in with Google, we receive your email address and a Google account identifier — not your Google password.
- Payment information. Paid subscriptions are processed by Stripe. Stripe collects and stores your card details directly; we never receive or store your full card number. We store a Stripe customer identifier and your subscription status, plan, and renewal date so we know whether your account is active.
- Your risk profile and cognitive data. Your risk-profile answers, Brain Score results, and daily check-ins are stored locally in your browser by default (in local storage on your device). If you are a paying subscriber and cloud backup is enabled, this data is synced to our database (Supabase) so you can access it across devices. For free users, this data never leaves your browser.
- Optional email at the end of the free risk profile. If — and only if — you choose to enter your email address on the result screen, we store that address so we can send you your priority levers and follow-up guidance. This is entirely optional; the profile and your result work fully without it. We store the address and the names of your top levers (for example "movement", "social contact") so the email can be relevant. We do not send or store your answers, your factor map, or anything describing your health — those stay on your device as described above. Lawful basis: your consent. You can withdraw it at any time via the unsubscribe link in any email or by emailing hello@solenna.io, and we will delete the address.
- Technical and usage information. Like most websites, our hosting provider (Vercel) automatically records standard server logs such as IP address, browser type, and pages requested, for security and reliability. We use essential cookies / local storage to keep you signed in and remember preferences.
- Analytics and advertising. We may use privacy-respecting analytics and advertising-measurement tools (for example, to understand traffic and the performance of ads on platforms such as Meta/Facebook). Where these use non-essential cookies or similar technologies, we ask for your consent where the law requires it. We do not use your health-related data for advertising.
2. How we use your information
- To provide the Service — create and secure your account, generate your risk profile and Brain Score, and track your progress.
- To process and manage your subscription and billing (via Stripe).
- To sync your data across your devices, if you are a subscriber with cloud backup enabled.
- To communicate with you about your account, security, and important service updates.
- To maintain, secure, and improve the Service, and to detect and prevent abuse.
- To comply with legal obligations.
We do not sell your personal information, and we do not use your health-related answers to target advertising.
3. Legal bases (EU/UK/EEA users)
Where the GDPR or UK GDPR applies, we process your data on these bases: performance of a contract (to provide the Service you sign up for), consent (for optional cookies, marketing, and cloud backup of sensitive data), legitimate interests (to secure and improve the Service, where not overridden by your rights), and legal obligation. Because risk-profile data can relate to health, we treat it as sensitive and rely on your explicit consent before storing it on our servers via cloud backup.
4. Who we share it with
We share data only with service providers who help us run Solenna, under contracts that limit their use of it:
- Supabase — authentication and database (accounts, subscription status, and cloud-backed data for subscribers).
- Stripe — payment processing and subscription management.
- Vercel — website hosting and delivery.
- Google — only if you choose to sign in with Google.
- Amazon Web Services (Amazon SES) — email delivery. This covers account and security emails, and the follow-up emails you receive only if you chose to enter your address at the end of the free risk profile. AWS receives your email address and the message we send you. It does not receive your risk-profile answers, because we never hold them.
We may also disclose information if required by law, to protect our rights or users' safety, or in connection with a business transfer. We do not sell personal data.
5. International transfers
Some of our providers (such as Supabase, Stripe, Vercel, and Amazon Web Services) may process data on servers located in the United States or other countries. Where we transfer personal data out of the EEA/UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
6. How long we keep it
We keep account and subscription data for as long as your account is active and as needed to comply with legal, tax, and accounting obligations. Locally-stored data lives on your device until you clear it (there is a reset control in the app). If you delete your account, we delete or anonymise your associated server-side data within a reasonable period, except where we must retain it by law.
7. Your rights
Depending on where you live, you have some or all of these rights: to access your data, correct it, delete it, export it (portability), object to or restrict processing, and withdraw consent at any time. EEA/UK users may lodge a complaint with their local data-protection authority. California residents have the right to know, delete, and opt out of "sale" or "sharing" of personal information (we do not sell it) and not to be discriminated against for exercising these rights. To exercise any right, email hello@solenna.io. Much of your health-related data is under your direct control in the app and can be cleared by you at any time.
8. Cookies
We use a small number of essential cookies / local storage to keep you signed in and remember settings — these are required for the Service to work. Any non-essential cookies (for analytics or advertising measurement) are used only where permitted, and where the law requires, with your consent. You can control cookies through your browser settings.
9. Children
Solenna is intended for adults and is not directed at anyone under 18. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.
10. Security
We use industry-standard measures — including encryption in transit, hashed passwords, and access controls that restrict each account to its own data — to protect your information. No method of transmission or storage is perfectly secure, but we work to protect your data and to keep sensitive health data on your device wherever possible.
11. Changes to this policy
We may update this policy from time to time. We will change the "Last updated" date above and, for material changes, take reasonable steps to notify you.
12. Contact
Questions or requests: hello@solenna.io, or Solvion Solutions, Sweden.
Solenna provides educational, risk-reduction information and is not a medical diagnosis, treatment, or device. It does not prevent, treat, or cure Alzheimer's disease or any form of dementia. See our Medical Disclaimer and Terms of Service. This document is provided for transparency and is not legal advice.