Privacy Policy

Soult is a secure digital vault. It is a tool — not a service that stores your data for its own benefit.

You use Soult to organise the things that matter most to your family: financial records, important documents, personal memories, and the people you trust. Soult provides the structure and the security. Everything inside is yours.

Soult does not read, analyse or interpret the content you store in your vault, and our staff do not access it in routine operation. Most vault content is encrypted with keys managed by our systems, so that your executors can be given access when the time comes. Passwords you protect with Advanced protection are encrypted on your device with a key only you hold, and Soult cannot decrypt them.

This Privacy Policy applies to the Soult mobile application on Android and iOS. The website www.soultdigital.com is mainly informational: you can manage your subscription there, but your vault is accessed only through the Soult app. Website forms (such as contact and deletion requests) and the chat assistant process the details you enter, as described in Data Storage & Location.

Everything in your vault is placed there by you. We do not add, enrich, or pull in data from any external source. The table below lists what types of information you may choose to add, and what each is used for at a technical level.

All fields except your name, phone number, and email are optional. All information is self-declared by you. Soult does not verify, validate, or enrich any of it. It is stored exactly as you provide it.

Users may store information about their family members, including minor children, inside their vault — for example, nominee details or personal messages addressed to children. This is entirely user-generated content under your own control and responsibility. Soult does not read or use this content.

Security is not a feature — it is the foundation of what Soult is. Your vault is protected by multiple independent layers.

• AES-256 encryption at rest — your data is encrypted on our servers using AES-256, a widely used, independently vetted encryption standard
• TLS encryption in transit — all data moving between your device and our servers is encrypted
• MPIN and biometric access — your vault opens with your MPIN or your phone's biometric unlock; biometric data never leaves your device
• Role-based access controls — internal access to infrastructure is strictly limited, audited, and logged
• Audit trail — changes to your vault are time-stamped and recorded, and you're emailed whenever an executor signs in

For your most sensitive passwords, Advanced protection now gives you sole custody — encrypted on your device with a key only you hold, so even Soult cannot decrypt them. Everywhere else, AES-256 encryption at rest, an extra AWS KMS layer for sensitive fields and strict access controls form the protection layer. That part of your vault is recoverable by design, so your family is never locked out; extending on-device encryption beyond Password Keeper is on our technical roadmap.

SOULT DIGITAL PRIVATE LIMITED is a company incorporated under the Companies Act, 2013, with its registered office at Door No 4-1-143/1A(2), Vertex Workspace, Gateway Building, Above Kalyan Jewellers, MG Road, Mangalore – 575003, Karnataka, India.

We process your information on the following legal bases:

• Your consent — you provide information voluntarily during onboarding and at every step of using the App. You may withdraw this consent at any time by deleting your account.
• Compliance with Indian law — including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023.
• Legitimate interests — limited to security monitoring, fraud prevention, and ensuring the reliability of the App. This does not extend to access or use of your vault content.

Your vault content is stored and processed on AWS infrastructure in India, in the Mumbai (ap-south-1) region. This is our own choice; the DPDP Act, 2023 does not impose a general data-localisation requirement.

To run the service we use a small number of providers, some of which may process limited data outside India: Google Firebase (app analytics, crash reports and push notifications), Meta (app event measurement, and WhatsApp if you choose to use it), SMS and email providers for one-time codes and reminders, Razorpay for payments, and website analytics tools. They receive only what they need for that job — for example an event name, a device identifier, or your phone number for an OTP. They do not receive your vault content, with one exception you control: a file you send to Soult through WhatsApp passes through WhatsApp's servers before it is saved to your vault.

• Your data is held for as long as your account remains active.
• When you delete your account, we delete your login and vault records from our databases and remove your files from active storage straight away. This cannot be undone.
• Before anything is deleted, the app pauses for 10 seconds and asks for your MPIN. Please download copies of anything you want to keep first.
• Some information is kept after deletion: a record of any payment you made, with your name and contact details removed, for tax purposes; a minimal note that the account was deleted; and system and security logs, backups and earlier file versions, which are not erased instantly.
• If a paid plan ends and is not renewed, nothing is deleted: your vault becomes read-only, so you can still open and view everything, and you can renew at any time. The free Basic plan remains available.

You can edit or delete any information inside your vault at any time from within the App. Once confirmed, deletion from our live systems is immediate and cannot be undone.

When you first visit soultdigital.com we ask what you are comfortable with. Until you choose, the website loads no analytics or advertising tools and sets no cookies other than the strictly necessary ones listed below. If you choose “Reject all”, that stays true for as long as your choice lasts.

You can change your mind at any time with the “Cookie settings” link at the bottom of every page. If you withdraw consent, we stop loading those tools, delete the cookies and browser storage of theirs that we are able to delete, and tell Google, Meta and Microsoft to stop. We keep your choice for 12 months, and ask again sooner if we change the tools we use. If your browser sends a Global Privacy Control signal, marketing stays off unless you switch it on yourself. In line with the principles of India’s Digital Personal Data Protection Act, 2023, you can also contact us at any time to ask what is collected — see the Contact section.

Strictly necessary (always on)

These keep the site working and are set without asking. None of them is used to track you.

Fonts for Indian languages load from Google Fonts, and the small news-outlet logos on our press pages come from Google’s favicon service. These requests share your IP address with Google but set no cookies.

Cookieless measurement (always on)

These count visits and clicks on our own domain without storing anything on your device and without any third-party advertising service.

Analytics (only if you allow)

These load only after you switch on Analytics or choose “Accept all”. They record aggregate, de-identified usage — pages viewed, clicks and scroll depth — with text and form inputs masked. They never capture anything you store inside the Soult app.

Marketing (only if you allow)

These load only after you switch on Marketing or choose “Accept all”. They tell us which of our ads lead to visits and app downloads.

Google, Meta, LinkedIn and Microsoft may also read or set cookies on their own websites when their tools load (for example IDE on doubleclick.net, NID on google.com, fr and datr on facebook.com, bcookie, lidc, UserMatchHistory, AnalyticsSyncHistory and li_sugr on linkedin.com, and MUID, ANONCHK, SM and CLID on clarity.ms and bing.com). We cannot see or delete those; your browser settings control them, and many browsers block them by default.

In the Soult app, we use Google Firebase Analytics and Crashlytics to understand which features are used and to fix crashes, and the Meta App Events SDK to measure which of our ads lead to installs and sign-ups. These services receive event names (for example, that a document was added, with its category), device and app details, and a device advertising identifier where your device settings allow it. Crash reports currently also include your account email and user ID, so we can investigate problems. They never receive the contents of your vault or your ID numbers. You can limit ad tracking or reset your advertising ID in your device's privacy settings.

We want to be specific about this, not just general.

Soult does not:

• Read, analyse, or interpret the contents of your vault in routine operation
• Sell your personal data, or share your vault content with advertisers, marketers or data brokers (the app sends limited usage events to Google and Meta to measure our ads, and the website sends visit data to Google, Meta and LinkedIn for the same purpose only if you allow marketing cookies — see Cookies & Analytics)
• Sell or monetise your personal information in any form
• Integrate with banks, insurance companies, government registries, or any third-party data systems
• Pull or verify data from any external source
• Use your content for AI training, profiling, or automated analysis

Your data may be accessed only in the following limited circumstances:

• By you — through your authenticated session
• By the executors you name — an emergency executor at any time, read-only, and other executors only after a death claim is verified and approved
• By our infrastructure providers — AWS provides the storage layer. They operate under strict data processing agreements and do not have access to your vault contents.
• When required by Indian law — in response to a lawful government order or court direction
• By a small number of authorised Soult staff — only when reviewing a death claim, to check the documents in the account concerned, with each such access logged

Soult provides users with document templates and help guides — such as Will templates, nominee designation guides, and emergency information formats. These are offered as self-help tools and informational resources only.

These guides and templates do not constitute legal advice.

Soult does not review, validate, interpret, or verify any information you enter into these templates. Documents created using Soult are entirely user-generated and under your full control. Soult does not read what you write.

You are responsible for ensuring the accuracy, completeness, and legal validity of any documents you create. Laws governing Wills, nominations, powers of attorney, and related instruments vary by jurisdiction and change over time.

We strongly encourage you to consult a qualified legal professional before relying on any document created using Soult for legal purposes, particularly for Wills, property transfers, and medical directives.

Soult is an information layer — it provides structure and secure storage. It does not execute legal actions, file documents with authorities, notify banks, or take any action on your behalf. Any steps required to give legal effect to a document remain entirely with you and your advisors.

As a user in India, you have the following rights:

• Right to access — request a summary of the personal data we hold about you and how it is being processed
• Right to correction — request correction of inaccurate or incomplete personal data
• Right to erasure — request deletion of your personal data; subject to any legal obligations requiring retention
• Right to grievance redressal — raise a concern with our Grievance Officer at grievance@soultdigital.com; we acknowledge it within 24 hours and resolve it within 15 days
• Right to nominate — designate a person to exercise these rights on your behalf in the event of your death or incapacity
• Right to withdraw consent — withdraw your consent at any time; this does not affect the lawfulness of prior processing

Soult is an Indian product, operated and governed under Indian law. If you access the App from outside India, your data is processed and stored in India. Depending on the laws of your country of residence, you may have additional rights — including portability, restriction, and objection — where applicable law requires us to honour them, we will do so in good faith.

To exercise any of these rights, email us directly. We will acknowledge your request within 24 hours and resolve it within 15 days.

Email: privacy@soultdigital.com

Please include your registered email, the right you wish to exercise, and enough detail to identify your request. We may need to verify your identity first.

Soult Digital Private Limited is incorporated and operates in India. The App is governed by Indian law, including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023.

If you use the App from outside India, you acknowledge that your data is processed and stored in India. By using the App, you consent to this. The governing law and jurisdiction for any dispute is as set out in our Terms and Conditions.

This Policy does not represent an offer to provide services in any jurisdiction where doing so would be unlawful or would require registration not currently held by Soult.

The Soult App is for users aged 18 and above. We do not knowingly allow anyone under 18 to create an account. If we become aware that a user is under 18, their account will be closed and their data deleted promptly.

Users may store information about their minor family members inside their vault — such as memory messages addressed to children, or nominee details involving minors. This is user-generated content under your own responsibility. Soult does not read this content or use it in any form.

We may update this Privacy Policy from time to time. If changes are significant, we will notify you through the App before they take effect. The date at the top of this page always reflects when the policy was last updated.

Your continued use of the App after any update means you accept the revised policy. If you do not agree, you may delete your account at any time.

For any privacy-related questions or concerns, reach us at: