Legal

Privacy Policy

Last updated: 14 April 2026

Summary: SomaticAI collects only the minimum data needed to operate the platform. Motion data is anonymised at the sensor level — it contains no audio, video, GPS, or biometrics. We never sell your personal data. Workers retain the right to access, correct, and delete their information at any time.

1. Overview

SomaticAI (Pty) Ltd ("SomaticAI", "we", "us", or "our") operates the platform accessible at somatic-ai.com and its associated mobile application (collectively, the "Platform"). This Privacy Policy explains how we collect, use, disclose, and protect information about you when you use the Platform. By accessing or using the Platform, you agree to the terms of this Privacy Policy.

2. Information We Collect

2.1 Information You Provide

When you register as a Worker or Enterprise user, we collect your name, email address, phone number, job category, and location (city and country). Workers who elect to receive payouts provide bank account details, which are stored in encrypted form and used solely for disbursement purposes.

2.2 Motion and Sensor Data

Workers who activate data-capture sessions contribute inertial measurement unit (IMU) data — accelerometer and gyroscope readings — generated by the sensors in their mobile device. This data captures movement patterns associated with physical work activities. Critically, this data does not include audio, video, photographs, GPS coordinates, or any biometric identifiers. It cannot be used to identify an individual.

2.3 Automatically Collected Information

We automatically collect device type, operating system version, browser type, IP address (truncated to the /24 subnet for anonymisation), session timestamps, and interaction logs. This information is used for platform security, performance monitoring, and fraud prevention.

2.4 Payment Information

Payment card details are processed exclusively by Stripe, Inc., our third-party payment processor. SomaticAI does not store, process, or transmit full card numbers, CVV codes, or expiry dates. We retain only the Stripe Customer ID and Payment Intent ID for reconciliation purposes.

3. How We Use Your Information

We use the information we collect to: (a) operate and improve the Platform; (b) process Worker earnings and Enterprise purchases; (c) train and validate machine learning models using anonymised motion data; (d) communicate with you about your account, payouts, and platform updates; (e) detect and prevent fraud, abuse, and security incidents; (f) comply with applicable laws and regulations; and (g) generate aggregated, non-identifiable analytics about platform usage and data quality.

4. Data Sharing and Disclosure

We do not sell your personal information. We may share information in the following circumstances:

  • Service Providers: We share information with trusted third-party vendors (including Stripe for payments, ElevenLabs for voice synthesis, and cloud infrastructure providers) under data processing agreements that restrict their use of your data.
  • Enterprise Customers: Motion datasets sold to Enterprise customers are fully anonymised and aggregated. No personal information, device identifiers, or Worker identities are included in any dataset.
  • Legal Obligations: We may disclose information if required by law, court order, or governmental authority, or if we believe disclosure is necessary to protect the rights, property, or safety of SomaticAI, our users, or the public.
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the successor entity, subject to the same privacy protections.

5. Data Retention

We retain personal account information for as long as your account is active or as needed to provide services. Motion data contributed by Workers is retained indefinitely in anonymised, aggregated form for model training purposes. Workers may request deletion of their personal account data at any time; however, anonymised motion data that has already been incorporated into datasets cannot be individually extracted or deleted. Payment records are retained for seven years to comply with financial reporting obligations.

6. Worker Data Rights

Workers have the right to: (a) access a copy of the personal information we hold about them; (b) correct inaccurate personal information; (c) request deletion of their account and associated personal data; (d) withdraw consent for data collection at any time by deactivating the capture session in the app; and (e) receive a portable copy of their contribution history. To exercise these rights, contact us at [email protected].

7. Security

We implement industry-standard security measures including TLS 1.3 encryption in transit, AES-256 encryption at rest for sensitive fields, role-based access controls, and regular security audits. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security but are committed to protecting your information using commercially reasonable means.

8. Children's Privacy

The Platform is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a minor has provided us with personal information, we will delete it promptly. If you believe a minor has registered on the Platform, please contact us at [email protected].

9. International Transfers

SomaticAI is headquartered in South Africa and operates under the Protection of Personal Information Act, 2013 (POPIA). Data may be transferred to and processed in countries outside South Africa, including the United States, where our cloud infrastructure and third-party service providers are located. We ensure that such transfers are subject to appropriate safeguards consistent with POPIA requirements.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page with an updated effective date and, where appropriate, by sending an in-app notification or email. Your continued use of the Platform after any changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, please contact our Information Officer at: [email protected]. Postal address: SomaticAI (Pty) Ltd, South Africa.