Privacy Policy & Zero-Storage Guarantees
Solstice: Heatwave Buddy is engineered with strict zero-storage principles to protect user safety and health confidentiality.
1. No GPS Coordinates Stored
When you choose 'Use my current location' or search a city, geographic coordinates are processed temporarily in volatile memory solely to fetch hourly weather metrics from Open-Meteo. No GPS coordinates are ever stored, logged, or retained on our servers or databases.
2. No Exact Age or Health History Stored
We never ask for or store your exact date of birth or exact age. Your medical history (such as heatstroke history, exhaustion, migraines, or physical fatigue) and any typed custom health notes are strictly never stored on a server or logged. They are used in-memory solely to tailor your safety plan and remain entirely local to your device.
3. Supabase Cloud Storage & Google Sign-In
If you sign in via Google Sign-In to sync preferences across sessions, Supabase stores only your default city, occupation, age bracket, and favorite cities. Sensitive health records, typed notes, and GPS coordinates are strictly barred from the database. All Supabase tables enforce strict Row Level Security (RLS).
4. Strict Under-18 Privacy Lock
If a user selects 'Under 18', cloud synchronization and local device persistence are completely locked out. No data is stored, synced, or retained for minors under 18 under any circumstances.
5. Amazon Polly Audio Synthesis
When you click 'Listen to Plan', speech synthesis is handled securely server-side via Amazon Polly using the bilingual Kajal Neural voice (hi-IN and en-IN). No personal identifiers or health histories are stored by Amazon Polly. If Amazon Polly is unavailable or rate-limited, speech automatically falls back to your device's browser voice.
6. Google Gemini AI Advisory
Personalized heat safety tips are structured in-memory via Google Gemini with zero-retention API configurations. No personal identifiers or account credentials are exchanged with Google Gemini, and no user inputs are permanently logged or utilized for model training. If the API is rate-limited or offline, Solstice falls back gracefully to its deterministic rule-based safety plan.