SOLUNHEIR PRIVACY POLICY

1. INFORMATION WE COLLECT

We collect information you provide directly, including:

• your email address and password (your password is handled by our authentication provider and is never visible to SOLUNHEIR);
• account and authentication information, such as your account identifier, email-verification status, and sign-in sessions;
• your agreement to the Terms of Use and Privacy Policy, the version you accepted, your confirmation that you are 18 or older, and when you provided them;
• information you enter while completing onboarding, such as your language, text-size, and motion preferences;
• Life Check responses;
• Priority Finder responses, priorities, and selections;
• First Move information;
• 24-7-30 Plan information and plan activity, such as items you add, complete, or change;
• items you identify as “Not Fixing Yet”;
• Facts / Story / Unknown responses;
• Control Map information;
• Support Map entries;
• Decision Record information;
• Come Back Here and other reflection responses;
• a reminder setting, which is created with your account and stored as turned off because reminders are not currently offered;
• purchase and access information, such as the email address used at checkout, the amount and currency paid, Stripe checkout and payment identifiers, and your access status;
• communications you send us, such as emails to connect@solunheir.com;
• other information you choose to provide through the Service.

SOLUNHEIR does not ask for your name, date of birth, government identification numbers, or full payment-card details.

Because SOLUNHEIR is a self-guided tool for organizing life priorities, the information you choose to enter may concern personal or potentially sensitive areas of your life, such as health and wellness, finances, relationships, family, safety, or other circumstances. You decide what to enter. SOLUNHEIR does not request or collect medical records and is not a health-care provider. We treat what you write as private account content and use it only as described in this Policy.

SOLUNHEIR’s application database also keeps limited operational records, such as timestamps, account status, and account-activity events (for example, that an account was created or that deletion was requested). These records are designed not to contain your assessment answers, safety responses, or plan text.

Our hosting and infrastructure providers automatically generate technical information when you use the Service, such as IP address, browser and device type, operating system, pages requested, referring page, and request times. Vercel generates this information in hosting logs and through Vercel Analytics, and Supabase generates it in authentication and database logs. SOLUNHEIR does not copy this technical information into its own application database. See Sections 6 and 11.

2. HOW WE USE INFORMATION

We use information to:

• create and maintain your account;
• authenticate you and keep you securely signed in;
• provide the SOLUNHEIR experience and generate your results, priorities, plans, prompts, and other features;
• save your progress and maintain your plans and history;
• process and verify purchases, activate access, recover access, and process refunds;
• send account-related and transactional messages;
• provide customer support and respond to your requests;
• protect the security and integrity of the Service;
• prevent misuse, unauthorized access, and fraud;
• understand aggregate site traffic and maintain and improve the functionality and reliability of the Service;
• comply with applicable legal obligations.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

3. PRIVATE USER CONTENT

SOLUNHEIR is designed so that authenticated members access their own private account information and responses.

The Service uses access controls intended to prevent one member from accessing another member’s private records.

Certain administrative credentials may be used for limited operational functions, such as securely deleting an authentication account. The Service is designed so that such administrative functionality does not require general administrative reading of members’ private saved reflection responses.

No Internet-connected system can be guaranteed to be completely secure. We use reasonable technical and organizational safeguards appropriate to the nature of the Service.

4. ASSESSMENTS, REFLECTIONS, AND RESULTS

SOLUNHEIR processes answers you provide to produce priorities, plans, prompts, recommendations, reflections, and other application results.

Internal calculations, rules, weighting, scoring, decision logic, and methodology information are used to generate those results. That internal proprietary scoring and methodology data is not included in customer-facing displays or data exports.

5. PAYMENT INFORMATION

Payments are processed by Stripe, Inc. (“Stripe”) on a checkout page hosted by Stripe. You enter your card details directly with Stripe. SOLUNHEIR does not receive or store your full payment-card number, security code, or other full card credentials. Stripe collects and processes payment information under its own privacy policy (https://stripe.com/privacy) and terms.

SOLUNHEIR receives transaction-related information from Stripe, such as the email address used at checkout, the amount and currency, payment and refund status, and Stripe checkout and payment identifiers. We use it to confirm payment, activate access, recover access, process refunds, and address payment issues.

Stripe keeps its own transaction records independently of SOLUNHEIR, as described in Section 9.

6. SERVICE PROVIDERS

We use the following service providers to operate the Service:

• Supabase, Inc. — database hosting and account authentication. Supabase stores your account and the information you enter in SOLUNHEIR, sets the sign-in cookies described in Section 11, and generates authentication and database logs.
• Stripe, Inc. — payment processing on a Stripe-hosted checkout page.
• Vercel Inc. — website hosting and deployment, and Vercel Analytics (described in Section 11). Vercel generates hosting logs.
• Resend — delivery of transactional and authentication email, such as email-verification and password-reset messages, sent through our authentication provider. Resend processes your email address and the content of those messages in order to deliver them.

We may also use domain-registration and similar infrastructure services needed to operate the website.

These providers process information as reasonably necessary to perform services for us and are subject to their own contractual and legal obligations. Their own privacy policies also apply: Supabase (https://supabase.com/privacy), Stripe (https://stripe.com/privacy), Vercel (https://vercel.com/legal/privacy-policy), and Resend (https://resend.com/legal/privacy-policy).

7. EMAIL COMMUNICATIONS

We send account-related and transactional messages, such as email verification, password reset, security, purchase, account, and service-related messages.

SOLUNHEIR does not currently send reminder messages.

If SOLUNHEIR later sends optional promotional or marketing communications, applicable unsubscribe or preference controls will be provided as required by law.

8. DATA EXPORT

Signed-in members can download a copy of their information at any time from the Account page of the SOLUNHEIR dashboard.

The download is a machine-readable JSON file containing your account details (account identifier, email address, and account creation date) and your personal information and content, including your profile and preferences, your agreement, age-confirmation, and health-data consent records, a summary of your purchase (product, status, amount, currency, purchase email, and date), Life Check responses, Priority Finder results, plans, plan items and plan activity, “Not Fixing Yet” items, reflections, and your reminder setting.

The export does not include internal operational records, such as internal proprietary scoring, weighting, or methodology data used to generate results; security, account-activity, and audit logs; internal deletion-processing records; payment-processor reference identifiers; fraud-prevention or authorization data; or information about any other person’s account. If you want information that is not included in the export, you can request it by emailing connect@solunheir.com, and we will respond as required by applicable law.

9. ACCOUNT DELETION

You can permanently delete your account at any time from the Account page of the SOLUNHEIR dashboard. You can also request deletion by emailing connect@solunheir.com.

When you delete your account, SOLUNHEIR immediately deletes your sign-in account and the associated records in its application database, including your profile, preferences, consent records, assessment responses, results, plans, plan activity, “Not Fixing Yet” items, reflections, your reminder setting, and SOLUNHEIR’s own purchase and access records. Deleting your account ends your access to the Service.

Account-activity events are retained with the link to your account removed. These events are designed not to contain your answers or written responses.

Deletion is permanent and has no recovery period. Download any information you want to keep before deleting your account.

Deleting your SOLUNHEIR account does not delete records kept independently by our service providers. In particular, Stripe retains its own transaction records under its legal and financial obligations. Infrastructure providers may also keep logs and backups for limited periods under their own retention schedules before those are overwritten or removed.

10. DATA RETENTION

We keep the information in your account for as long as your account is active, so the Service can maintain your plans and history. If you delete your account, we delete it as described in Section 9.

We may keep limited information for longer when reasonably necessary to comply with legal, tax, or accounting obligations; to resolve disputes; to prevent fraud or abuse; to protect the security of the Service; or to enforce our agreements. When information is no longer needed for these purposes, we delete it or remove its link to your identity.

Emails you send to connect@solunheir.com are kept for as long as needed to respond and to maintain reasonable business records.

Information held by service providers, including Stripe transaction records and infrastructure logs, is retained according to those providers’ own retention practices.

11. COOKIES AND SIMILAR TECHNOLOGIES

SOLUNHEIR uses cookies set by our authentication provider, Supabase, to keep you securely signed in and to protect your account. These cookies are strictly necessary for the Service to work.

SOLUNHEIR does not use your browser’s local storage or session storage to hold your information. Your preferences are saved to your account in our database.

Stripe uses its own cookies and similar technologies on its hosted checkout page.

On the live website, SOLUNHEIR uses Vercel Analytics to measure aggregate page traffic, such as which pages are visited, referring pages, and general browser, device, operating-system, and country information. Vercel Analytics does not use cookies, does not track you across other websites, and does not record what you enter in SOLUNHEIR. We use it only to understand and improve how the site operates, not for advertising.

We do not use advertising cookies or cross-site tracking technologies. Additional information appears in our Cookie Notice at https://www.solunheir.com/cookies.

12. INFORMATION SECURITY

We use safeguards intended to protect information against unauthorized access, alteration, disclosure, or destruction.

These measures include authenticated access, database access controls, row-level security, encrypted network connections, security headers, credential protections, and account isolation.

Despite these measures, no system can guarantee absolute security.

13. ADULTS ONLY

SOLUNHEIR is intended only for adults age 18 and older. Creating an account requires confirming that you are 18 or older. We do not knowingly collect personal information from anyone under 18.

If we learn that a person under 18 has created an account or provided personal information, we will delete it. If you believe this has happened, contact connect@solunheir.com.

14. YOUR PRIVACY CHOICES AND REQUESTS

You can view and change most of your information directly in SOLUNHEIR, download a copy of it (Section 8), and delete your account (Section 9).

You can also email connect@solunheir.com to ask a privacy question or to request access to, correction of, deletion of, or a copy of your information.

We may need to verify your identity before fulfilling a request, usually by confirming that the request comes from the email address on your account. You may use an authorized agent where applicable law allows; we may ask for proof of the agent’s authority and may ask you to verify your identity directly.

We will not discriminate against you for exercising your privacy rights.

Additional rights that may apply to residents of certain states are described in Sections 15 and 16.

15. CALIFORNIA PRIVACY RIGHTS

This section applies to California residents. It describes our practices and the rights that may be available to you under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, and its regulations (“California privacy law”), to the extent California privacy law applies to Crestmere LLC. Whether a particular provision applies depends on statutory thresholds and other conditions.

Categories of personal information we collect. In the past 12 months we have collected:

• Identifiers, such as your email address, account identifier, and Stripe checkout and payment identifiers;
• Customer records, such as your email address and purchase information;
• Commercial information, such as your purchase of SOLUNHEIR access;
• Internet or other electronic network activity information, such as pages visited, referring pages, sign-in events, and browser and device type, generated by our hosting, analytics, and authentication providers;
• General location, such as country, derived from IP address by our hosting provider;
• Inferences, meaning the priorities, plans, and results the Service generates from your answers, used only to provide your SOLUNHEIR experience;
• Sensitive personal information, consisting of your account login credentials (email address and password), and any sensitive information you choose to include in your responses, such as information about your health, finances, or relationships;
• Other information you choose to provide, such as your responses, reflections, and communications with us.

Sources. We collect personal information from you, from your use of the Service, and from our service providers (for example, payment status from Stripe).

Purposes. We use personal information for the purposes described in Section 2.

Disclosures. We disclose personal information for business purposes to the service providers described in Section 6, and as described in Section 17.

Sale and sharing. We do not sell personal information and do not share it for cross-context behavioral advertising, and we have not done so in the past 12 months. We do not knowingly sell or share the personal information of consumers under 16.

Sensitive personal information. We use sensitive personal information only to provide the Service you request, to keep the Service secure, and for other purposes permitted by California regulations. We do not use it to infer characteristics about you. Because we use it only for these permitted purposes, we do not offer additional controls to limit its use.

Retention. We keep each category of personal information for the periods and under the criteria described in Section 10.

Your rights. To the extent California privacy law applies, you may have the right to:

• know and access the personal information we have collected about you, including the categories of information, sources, purposes, and the categories of third parties to whom it was disclosed;
• delete personal information we collected from you, subject to legal exceptions;
• correct inaccurate personal information;
• receive a copy of your personal information in a portable format;
• opt out of the sale or sharing of personal information (we do not sell or share it);
• limit the use and disclosure of sensitive personal information for purposes beyond those permitted by law (we do not use it for those purposes);
• exercise these rights without unlawful discrimination or retaliation.

How to exercise your rights. Email connect@solunheir.com with “California Privacy Request” in the subject line, or use the in-product export and deletion controls. We verify requests as described in Section 14 and respond within the time required by law. You may use an authorized agent as permitted by California privacy law.

California Civil Code Section 1798.83. We do not disclose personal information to third parties for their own direct-marketing purposes.

16. OTHER U.S. STATE PRIVACY RIGHTS

Residents of certain other states may have additional privacy rights under applicable state law. Whether a particular state privacy law applies to Crestmere LLC depends on that law’s thresholds and conditions.

Depending on applicable law, these rights may include the right to confirm whether we process your personal information and to access it; to correct inaccuracies; to delete it; to obtain a copy in a portable format; and to opt out of certain processing, such as targeted advertising, sale, or profiling that produces legal or similarly significant effects.

We do not sell personal information, use it for targeted advertising, or use it for profiling that produces legal or similarly significant effects.

Crestmere LLC will honor applicable rights as required by law. To submit a request, email connect@solunheir.com. We may reasonably verify your request. If we decline your request, we will explain why, and where applicable law provides a right to appeal, you may appeal by replying to our decision with “Appeal” in the subject line.

17. DISCLOSURE OF INFORMATION

We may disclose information:

• to service providers supporting operation of the Service;
• when reasonably necessary to process a transaction or provide a requested service;
• when required by law, court order, or valid legal process;
• when reasonably necessary to protect rights, safety, security, or the integrity of the Service;
• in connection with a merger, acquisition, financing, reorganization, sale of assets, or similar business transaction, subject to applicable law.

We do not sell personal information, and we do not disclose private user content for advertising purposes.

18. BUSINESS TRANSFERS

If Crestmere LLC or SOLUNHEIR is involved in a merger, acquisition, restructuring, financing, sale, or transfer of some or all relevant assets, information associated with the Service may be transferred as part of that transaction, subject to applicable law and applicable privacy obligations.

19. CHANGES TO THIS POLICY

We may update this Privacy Policy as the Service changes.

When we do, we will update the effective date. When appropriate, we will provide additional notice of material changes, and we will obtain your agreement where required by law.

20. CONTACT

Email connect@solunheir.com with privacy questions or requests.