Snuggli

Privacy Policy

Last updated: April 29, 2026

At Snuggli, we take your privacy seriously. This Privacy Policy explains how we collect, use, and protect your information. We believe you should always know what data we collect and how we use it, and that you should have meaningful control over both.

Information We Collect

Account Information

When you create an account, we collect your email address, name, and basic profile information like age range and country for personalization.

Wellness Data

This includes mood logs, journal entries, conversations with Araba, and wellness goals you create. This data is yours and helps personalize your experience.

First-Party Product Analytics

We collect basic in-app product analytics (such as which features you use and how often you check in) strictly to improve Snuggli. This data stays within Snuggli, is never combined with data from other apps or websites, and is never shared with advertisers or data brokers.

No Cross-App Tracking (App Tracking Transparency)

We Do Not Track You

Snuggli does NOT track you across other companies' apps or websites. We do not use Apple's Advertising Identifier (IDFA), we do not embed third-party advertising SDKs, and we do not share your activity with data brokers or advertising networks.

No ATT Prompt Needed

Because Snuggli does not engage in any activity that Apple defines as "tracking," we do not need to request App Tracking Transparency permission, and you will never see a tracking permission prompt from Snuggli. The only analytics we collect are first-party, in-app usage metrics used to improve the product.

No Advertising

Snuggli does not show ads, does not sell ad space, and does not share your data for advertising purposes — ever.

How We Protect Your Data

Strong Encryption at Rest

Your most sensitive data—journal entries, mood notes, and Araba conversations—is encrypted using AES-256-GCM before being stored. This is the same standard used by banks and healthcare providers.

Honest About Our Model

We use server-assisted encryption: a unique key is derived per user on our servers using HKDF-SHA256 and delivered to your device over HTTPS. This means your data is strongly protected from external breaches. However, Snuggli (as the operator) could theoretically access your key if legally compelled. We are transparent about this because we believe honesty builds more trust than marketing claims of "zero-knowledge" that are not technically accurate. We will never voluntarily access your private data.

AI Conversations

When you chat with Araba, your message is sent (in cleartext) to a third-party AI model to generate a response. The response is then encrypted before being stored. Our AI provider operates under strict data-processing agreements and does not use your data to train its models. We encrypt the stored record — but the AI itself sees your message content to do its job.

Access Controls

Your data is protected by row-level security. Only you can access your personal content unless you explicitly choose to share something publicly in the community.

Tamper Detection

AES-256-GCM includes a 128-bit authentication tag on every encrypted record. If anyone modifies your stored data, decryption will fail and you will be notified — preventing silent data tampering.

Key Management

Encryption keys are never stored on disk — they exist only in memory during your session and are automatically cleared when you log out or close the app. Our master key is stored in a secured environment variable, never in our codebase or database.

AI & Araba

How Araba Works

Araba uses AI to provide supportive conversations. Your messages are sent to a third-party AI provider to generate responses — this is necessary for Araba to understand and respond to you. Your conversations help Araba personalize responses within your session, and we do not use your data to train AI models shared with others. Stored conversation history is encrypted at rest.

Not a Therapist

Araba is an AI companion, not a licensed mental health professional. She provides supportive conversation and wellness guidance, but is not a substitute for professional care.

Data Sharing

We Never Sell Your Data

Your personal information is never sold to third parties. Period.

Limited Sharing

We only share data with service providers necessary to run Snuggli (like hosting services), and only the minimum required. All providers are bound by strict confidentiality agreements.

Community Content

If you choose to post in the community, that content is visible to other users. You control what you share publicly.

Your Rights & Choices

Access Your Data

You can view and export all your data at any time from your Settings.

Delete Your Data

You can delete your account and all associated data. This action is permanent and cannot be undone.

Control Notifications

You choose what notifications you receive and can update preferences anytime.

Youth Privacy

Age Requirements

Snuggli is designed for users 15 years and older. Users between 15-17 should have parental or guardian awareness.

Extra Protections

We take extra care with youth data, including limited data collection and enhanced privacy defaults.

Questions About Your Privacy?

If you have questions about this Privacy Policy or how we handle your data, please contact us:

hi@snuggli.io
View Terms of Service

© 2026 Snuggli. All rights reserved.