Welcome to Soma. These Terms of Service (“Terms”) explain how Soma supports you and your mental health provider. Please read them carefully before using the Soma mobile app (“the App”).

1. Purpose of Soma

Soma assists mental health professionals with secure documentation and offers optional self-tracking tools for clients. Soma is not a medical device and does not diagnose, treat, or prevent conditions. All clinical decisions remain with your provider.

2. Anonymity

Soma does not collect or store your name, email, or personal identity.

• Your provider uses an alias (e.g., “Client A”)
• Your provider stores your real identity in their own clinical system; Soma cannot access it
• Servers may automatically log IP addresses — but Soma does not access or use IP logs to identify you

3. Optional Features & Consent

• All optional data sharing is off by default
• You choose what to enable
• You may withdraw consent at any time
• Stopping a feature stops future sharing (past provider-received data remains in their clinical record)

4. Audio Recording & Transcription

• Only available if you are connected to a provider
• Recordings are created only to generate a transcript
• Recordings are never saved
• Transcripts and clinical note drafts are encrypted
• Soma cannot see, access, or decrypt transcripts or notes
• Transcripts and drafts are automatically deleted after 25 days
• They will never be used for any other purpose without your explicit, additional consent (default off)

5. Data Collected Through the App

Depending on what you choose to use, Soma may store:

• Mood and stress ratings
• Date, time, and completion status of activities
• Encrypted journal entries (only if shared)
• Encrypted activity details

By default, your journal entries stay only on your device. You must explicitly approve each sharing request from your provider.

Soma cannot see or decrypt your data. Decryption for product improvement requires separate additional consent and is defaulted to off.

6. Wearable Device Data

• Only available if a provider requests it
• You choose whether to connect a device
• Data may include heart rate, oxygen level, breathing rate, sleep, temperature, and activity levels
• Wearable credentials are always encrypted — Soma cannot decrypt them
• Data is summarized for your provider; Soma does not access or store identifiable information
• Product-improvement consent for wearable data is separate and default off

7. Data Privacy & Consent Categories

• Your sensitive data is always encrypted
• Soma cannot see, access, or decrypt your encrypted content
• Two separate opt-ins (both default off):
  • Sharing with your provider
  • Anonymous product-improvement consent
• PIPEDA compliant
• Data is never sold or shared with third parties

8. Data Storage and Security

• All data stored securely on servers located in Canada
• Audio is never stored
• Transcripts and drafts deleted after 25 days
• Encrypted data cannot be read without your explicit consent
• No session prompts or content are logged

9. Connecting to Your Provider

• You control what is shared
• Journal entries and activity details remain on your device until you approve sharing
• Provider may request access — you choose whether to approve
• Automated sharing only if you provide additional consent (default off)
• Disconnecting stops future sharing

10. No Medical Advice

The App provides self-tracking and summaries only. Always consult your provider for clinical decisions.

11. Your Responsibilities

• Use Soma lawfully
• Do not interfere with or reverse engineer the App
• Keep your device secure

12. Changes to Terms

• We may update these Terms periodically
• We will notify you in the App
• Continued use means you accept updates

13. Contact Us

Soma Health Solutions Inc.
Email: support@soma-health.ca

By tapping “I Agree,” you consent to these Terms and to the collection and use of your data as described.

View our Privacy Policy.