Legal

Privacy notice

How SuperStudies Ltd handles personal data for Sohamlab, under the UK GDPR and the Data Protection Act 2018.

Draft — needs legal review. This page is a working draft that has not yet been reviewed by a qualified lawyer. Items marked [TODO] need to be confirmed before it is relied on.

Last updated: 28 October 2026 [TODO: confirm on publication]

Who we are

SuperStudies Ltd (“we”, “us”), company number 16694082, registered office 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom, is the controller of the personal data described here. ICO registration number: [TODO]. Contact: admin@superstudies.co.uk.

The short version

Sohamlab is a desktop app. Your birth details, chart, journals, goals, check-ins, workflow results and companion history are stored in an encrypted database on your own computer. We do not receive them, and we cannot read them.

We hold only what we need to run your account: your email address, your plan and payments, the devices you have signed in on, and counts of AI usage.

What we collect

DataWhyLawful basis
Email address (we sign you in with a one-time code sent to it) and, if you switch on two-step sign-in, the secret your authenticator app shares with our sign-in providerTo create and secure your accountContract
Your 18+ and terms confirmation, with a timestampTo record that you accepted the termsLegal obligation and legitimate interests
Device name, app version and when each device last checked inTo issue your licence and let you sign devices outContract
Plan, subscription status, payment references and invoices (no card numbers)To take payment and unlock Soham ProContract; legal obligation for tax records
Counts of Sohamlab AI usage per licenceTo apply your plan’s AI allowanceContract
The text of a Sohamlab AI request, in transit onlyTo return the model’s answer. It is not stored or loggedContract
IP address, browser details and request logsTo deliver and secure the website and servicesLegitimate interests

What we never do

  • We do not sell personal data.
  • We do not use your content to train, fine-tune or evaluate any AI model.
  • We do not ask about religion, and Sohamlab is not a religious service.

Who processes data for us

ProviderWhat forWhere
SupabaseAccounts, licences and payment recordsUK (London region) [TODO: confirm on project creation]
CloudflareThis website, sign-in functions and Sohamlab AIGlobal edge network [TODO: transfer mechanism]
Dodo PaymentsPayments and tax, as merchant of record[TODO: confirm]

If you choose “your own key” for AI, requests go from your computer straight to that provider under your own agreement with them. A model on your own computer sends nothing anywhere.

How long we keep it

Account data is kept while your account is open and deleted within 30 days of closing it, except payment records we must keep for tax (usually six years). [TODO: confirm retention schedule.]

Your rights

You can ask to access, correct, delete, restrict or port your data, and object to processing based on legitimate interests. Email admin@superstudies.co.uk. You can complain to the Information Commissioner’s Office at ico.org.uk.

Data on your computer is under your control: delete it from within the app, or uninstall the app and remove its data folder.

Age

Sohamlab is for adults aged 18 or over.