Last updated: 28 October 2026 [TODO: confirm on publication]
Who we are
SuperStudies Ltd (“we”, “us”), company number 16694082, registered office 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom, is the controller of the personal data described here. ICO registration number: [TODO]. Contact: admin@superstudies.co.uk.
The short version
Sohamlab is a desktop app. Your birth details, chart, journals, goals, check-ins, workflow results and companion history are stored in an encrypted database on your own computer. We do not receive them, and we cannot read them.
We hold only what we need to run your account: your email address, your plan and payments, the devices you have signed in on, and counts of AI usage.
What we collect
| Data | Why | Lawful basis |
|---|---|---|
| Email address (we sign you in with a one-time code sent to it) and, if you switch on two-step sign-in, the secret your authenticator app shares with our sign-in provider | To create and secure your account | Contract |
| Your 18+ and terms confirmation, with a timestamp | To record that you accepted the terms | Legal obligation and legitimate interests |
| Device name, app version and when each device last checked in | To issue your licence and let you sign devices out | Contract |
| Plan, subscription status, payment references and invoices (no card numbers) | To take payment and unlock Soham Pro | Contract; legal obligation for tax records |
| Counts of Sohamlab AI usage per licence | To apply your plan’s AI allowance | Contract |
| The text of a Sohamlab AI request, in transit only | To return the model’s answer. It is not stored or logged | Contract |
| IP address, browser details and request logs | To deliver and secure the website and services | Legitimate interests |
What we never do
- We do not sell personal data.
- We do not use your content to train, fine-tune or evaluate any AI model.
- We do not ask about religion, and Sohamlab is not a religious service.
Who processes data for us
| Provider | What for | Where |
|---|---|---|
| Supabase | Accounts, licences and payment records | UK (London region) [TODO: confirm on project creation] |
| Cloudflare | This website, sign-in functions and Sohamlab AI | Global edge network [TODO: transfer mechanism] |
| Dodo Payments | Payments and tax, as merchant of record | [TODO: confirm] |
If you choose “your own key” for AI, requests go from your computer straight to that provider under your own agreement with them. A model on your own computer sends nothing anywhere.
How long we keep it
Account data is kept while your account is open and deleted within 30 days of closing it, except payment records we must keep for tax (usually six years). [TODO: confirm retention schedule.]
Your rights
You can ask to access, correct, delete, restrict or port your data, and object to processing based on legitimate interests. Email admin@superstudies.co.uk. You can complain to the Information Commissioner’s Office at ico.org.uk.
Data on your computer is under your control: delete it from within the app, or uninstall the app and remove its data folder.
Age
Sohamlab is for adults aged 18 or over.