SOLYS

Privacy Policy

Effective August 22, 2026  ·  Last updated August 22, 2026

This Privacy Policy explains how Brightloop LLC, doing business as Solys ("Solys," "we," "us," or "our"), collects, uses, shares, and protects information when you use the Solys mobile application, website, and related services (the "Service"). This Policy is incorporated into, and should be read alongside, the Solys Terms of Service.

1. Information We Collect

Plain-English: We collect what it takes to run your account, what you choose to post, what Spark Gifting requires to work, and basic device/usage data. We don't collect more than that on purpose.

Account information. Name, email address, and any profile information you provide (photo, bio). Consistent with Solys's real-identity policy, we don't support anonymous or pseudonymous accounts.

Age information. A birth year or birthdate, collected specifically to enforce the 18+ eligibility requirement described in the Terms of Service and Community Guidelines.

User Content. Hard Thing posts, Wins, Sparks, Support Cards, Rally Messages, comments, photos, videos, Vault contents, and anything else you post or share through the Service. Some of this content — particularly Hard Thing posts — can reveal sensitive information about your health, emotional state, or personal circumstances. We treat this category with extra care; see Section 4.

Spark Gifting & transaction data. Purchase history, Spark balances, gift-sent/gift-received records, and transaction metadata. We do not receive or store your actual payment card details — those are handled entirely by Apple, Google, or our designated web payment processor (see Section 3).

Device and usage data. Device type, operating system, app version, crash logs, and general usage patterns (features used, session activity) collected automatically to keep the Service running and to fix problems.

Communications. If you contact support or report content, we keep a record of that communication to respond to you and to maintain a record of moderation decisions.

2. How We Use Your Information

Plain-English: To run the app, keep it safe, process Spark purchases, and improve it. Not to build an ad profile on you.

We use the information above to: operate and maintain the Service; authenticate your account and enforce the age and identity requirements described in the Community Guidelines; process Spark Gifting purchases and transfers; respond to support requests and enforce our content policies; detect and prevent fraud, abuse, and safety violations; and understand overall usage patterns so we can fix bugs and improve the product.

We do not use your information to serve third-party targeted advertising, and we do not build advertising profiles on you for sale to third parties.

3. How We Share Your Information

Plain-English: A short, specific list of who sees your data — payment processors, our infrastructure provider, and legal exceptions. We don't sell it.

We do not sell your personal information, as that term is defined under state privacy laws, and we do not share it with third parties for their own targeted-advertising purposes.

We share information only in these specific circumstances:

4. Sensitive Information — Hard Thing Posts

Plain-English: Hard Thing posts can reveal real health and emotional information. We treat that category as sensitive, not as ordinary content.

Several state privacy laws single out health, mental-health-adjacent, and similarly sensitive categories of data for stricter handling. Because Hard Thing posts can reveal exactly this kind of information, we treat this content as sensitive personal information: it's visible only to the audience you choose when posting (your Circle, or wherever else you direct it), it is never used for advertising or shared with any third party for their own purposes, and it receives the same content-moderation protections described in the Community Guidelines.

5. Data Retention

Plain-English: We keep your data as long as your account is active and you're using the feature it's tied to. When you delete something, we delete it — with narrow, specific exceptions.

We retain your information for as long as your account is active, or as needed to provide the Service. When you delete a piece of User Content or your account, we delete the underlying data, except: (a) database backups are retained on a rolling 7-day basis before being automatically purged, and a deleted item could theoretically be restored from a backup within that window in the event of a disaster-recovery restore, though this is not part of normal operation; (b) media you upload (photos, videos) is stored separately from the database and is not included in these backups at all — once deleted, it is not recoverable; (c) where content was already shared with and saved by another user in a way that reasonably continues (for example, a Support Card saved to someone else's Vault); or (d) where we're required to retain something for legal, safety, or dispute-resolution reasons.

6. Your Privacy Rights

Plain-English: Depending on where you live, you may have the right to see what we have on you, correct it, delete it, or ask us not to sell it (we don't sell it regardless). Contact us to use any of these.

Depending on your state of residence, you may have rights to: access the personal information we hold about you; correct inaccurate information; delete your information; opt out of the sale or sharing of your information (Solys does not currently sell or share personal information for cross-context advertising, so this is not currently applicable, but you can still make the request); and receive a portable copy of your data.

To exercise any of these rights, contact us using the information in Section 10. We will respond within the timeframe required by applicable law (typically 45 days).

If you're a California resident, we honor the Global Privacy Control browser signal as a valid opt-out request where applicable. If you're a Texas or Nebraska resident, note that those states' privacy laws apply to businesses like Solys regardless of size — you have the same rights described above.

7. Children's Privacy

Plain-English: Solys is 18+. We don't knowingly collect data from anyone under 18, and if we find out we have, we delete it.

Solys is not directed to, and is not intended for use by, anyone under 18. We do not knowingly collect personal information from anyone under 18. If we learn that we've collected information from someone under 18, we will delete that information and the associated account, consistent with the age policy described in the Community Guidelines and Terms of Service.

8. Security

Plain-English: We take reasonable steps to protect your data. No system is perfectly unbreakable, and we'll tell you if something goes wrong.

We use reasonable administrative, technical, and physical safeguards designed to protect your information, including access controls on our database (row-level security scoped to your own data) and secure handling of payment information by our third-party processors. No system is completely secure; if we experience a breach affecting your information, we will notify you as required by applicable law.

9. Changes to This Policy

Plain-English: We can update this document. If it's a meaningful change, we'll actually tell you.

We may update this Privacy Policy from time to time. For material changes, we'll provide reasonable advance notice (such as an in-app notification or email) before the change takes effect. Continuing to use the Service after a change takes effect means you accept the updated Policy.

10. Contact Us

Questions about this Policy, or requests to exercise your privacy rights, can be sent to andy@solysapp.com.

You can also read our Terms of Service, which this Policy is incorporated into.

Brightloop LLC (d/b/a Solys)

Hermitage, PA