Privacy Policy

1. Who operates Sona

Sona is developed and operated by Lythorix Technologies LLC, an independent software company organized in New Mexico, United States. In this policy, “Sona,” “we,” “us,” and “our” refer to the Sona service and Lythorix Technologies LLC.

2. Information we collect

Device and account identifiers

Sona may use a system-provided app identifier or a random browser identifier to recognize a device. If you create or link an account, we may collect an email address, a securely hashed password, or a phone number used for verification and supported messaging features.

Conversations and personalization

We process the text you submit, voice-call transcripts, conversation context, summarized memories, custom memory, persona settings, character names, selected voices, and avatar images you choose to upload. This information is used to generate responses and provide continuity and personalization.

Voice and media

Microphone access is requested only when you use voice features, and photo access is requested only when you choose an image. Voice audio may be processed in real time through voice APIs. Under the current configuration, new voice-call audio is not retained by the voice API after processing; related transcripts may be retained by that API for up to 30 days.

Purchases

For app-store purchases, we receive limited transaction information such as a transaction identifier, product identifier, entitlement, and expiration date. For web purchases, when available, a payment processor handles card details and returns limited payment, status, and billing information to us. We do not receive or store complete payment-card numbers.

Technical and support information

We may process IP address, device and browser type, operating system, app version, request timestamps, diagnostic events, security events, and information you include in a support request.

3. How we use information

• Provide text chat, voice, account, memory, personalization, and synchronization features.
• Generate and deliver AI responses through AI APIs.
• Authenticate users and prevent unauthorized access.
• Grant subscriptions, credits, and other purchased entitlements.
• Detect abuse, apply safety controls, investigate reports, and protect users and the service.
• Diagnose errors, maintain reliability, and respond to support requests.
• Comply with law and enforce our terms.

We do not sell personal information and do not use Sona conversation content for third-party targeted advertising.

4. AI processing and important choices

Sona sends the information needed to fulfill a request to AI APIs and related voice APIs. Avoid sharing information you would not want processed for that purpose. AI outputs are probabilistic and can be inaccurate or inappropriate. Sona characters are fictional AI personas, not people or professional advisers.

Automated safety systems may review inputs and outputs for prohibited content, abuse, crisis-related signals, and protections involving minors. Safety review is used to protect users and the service; it does not guarantee that every harmful response will be detected.

5. Service providers and disclosures

We share only the information reasonably necessary with categories of providers that help us operate Sona, including AI and voice API providers, cloud hosting and edge-security providers, database and storage providers, account-verification and messaging providers, transactional email providers, app stores, payment processors, and support or fraud-prevention providers.

These providers may process information in countries other than your own. We require providers to handle information under contractual, security, and confidentiality obligations appropriate to their role. We may also disclose information when reasonably necessary to comply with law, prevent fraud or abuse, protect safety, or establish and defend legal rights.

6. Retention

Account details, conversations, memories, preferences, and entitlements are generally retained while the account remains active so the service can provide continuity. Voice API transcripts may be retained for up to 30 days under the current configuration. Security, fraud-prevention, support, and transaction records may be retained for a reasonable period where needed to resolve disputes, protect the service, or meet legal and accounting obligations.

When an account is deleted, Sona removes the account and associated service data from active systems, except for limited information that must be retained for security, fraud prevention, transaction integrity, legal compliance, or the establishment and defense of claims. Residual copies may remain temporarily in protected backups until they rotate out.

7. Your controls and rights

Depending on your location, you may have rights to access, correct, export, object to certain processing, withdraw consent, or delete personal information. Sona provides an authenticated data export and account-deletion control. You can also use our public Account & Data Deletion page if you cannot access the app.

Requests may require reasonable verification. Revoking microphone or photo permission in device settings prevents future access to that permission but does not delete information already provided.

8. Children

Sona is intended only for people aged 18 or older. We do not knowingly permit children to create accounts or use the service. If you believe a person under 18 has provided information to Sona, contact us so we can investigate and delete it where appropriate.

9. Security

We use safeguards designed for the nature of the information, including encryption in transit, access controls, password hashing, session controls, and service monitoring. No online service can guarantee absolute security. Protect your account credentials and notify us if you suspect unauthorized access.

10. Legal bases and regional disclosures

Where applicable, we process information to perform our contract with you, with your consent, to comply with law, and for legitimate interests such as service security, fraud prevention, support, and responsible product improvement. Residents of jurisdictions with additional privacy rights may submit a request using the contact information below. We do not sell personal information or share it for cross-context behavioral advertising.

11. Changes

We may update this policy as Sona, its APIs, or legal requirements change. We will update the effective date and provide additional notice when a change materially affects users.

12. Contact

Privacy questions and requests: [email protected]

Operator: Lythorix Technologies LLC
Jurisdiction: New Mexico, United States