Privacy Policy

1. Data Controller

MB Services GmbH (Marke: Solantara)
Jahnstr. 25, 80469 München, Deutschland
E-Mail: mail@solantara.com
Managing Director: Martin Bauer
Register: AG München, HRB 131948

2. Registration and User Account

When registering and using Solantara, we collect and process the following personal data:

• Name and email address
• Profile and onboarding responses
• Chat history with the AI coach
• Diary entries
• Mood tracking entries
• Courage training progress

This data is stored encrypted at Supabase GmbH in the EU region Frankfurt am Main (Germany). Legal basis: Art. 6(1)(b) GDPR (performance of contract).

3. Data Processors

We use the following service providers to operate Solantara:

4. Data Transfer to Third Countries

Some of our data processors are headquartered in the USA. In these cases, data processing is safeguarded as follows:

• Supabase / Vercel: Data processing in EU regions (Frankfurt / EU). Additionally: Standard Contractual Clauses (SCCs) per Art. 46(2)(c) GDPR.
• Resend: US infrastructure. Safeguarded via SCCs and technical measures (TLS encryption, minimal data transmission).
• Stripe: European entity (Dublin), data processing within the EU.
• Mistral AI: Headquartered and servers in France (EU), no third-country transfer.

5. Use of AI Services

Our coaching service uses the language model from Mistral AI SAS (Paris, France). Your conversation content is transmitted to the Mistral API.

6. Payment Processing

For Pro subscriptions we use Stripe Payments Europe Ltd. (Dublin, Ireland). Payment data is transmitted directly to Stripe. We do not store complete credit card numbers. Legal basis: Art. 6(1)(b) GDPR.

7. Cookies and Local Storage

Solantara uses the following technically necessary cookies and local storage:

• Session cookie for Supabase authentication (technically necessary, Art. 6(1)(f) GDPR)
• localStorage: Language preference (locale)
• Stripe: Sets its own cookies during checkout (technically necessary for payment processing)

No third-party tracking cookies or analytics tools are used.

8. Data Retention

• Account data (name, email, profile): Until account deletion by the user
• Chat history and diary entries: Until deletion by the user or account deletion
• Server log data (IP addresses, access logs): 14 days
• Payment data at Stripe: Per tax retention requirements (10 years)

9. Your Rights

You have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)

You can delete your account and all associated data at any time in the account settings. You also have the right to lodge a complaint with a data protection supervisory authority.

10. Health Advisory Notice

Solantara is not a medical product and does not replace professional therapy or medical treatment. AI-generated content does not constitute medical diagnosis or treatment recommendations. For severe anxiety or mental health conditions, please consult a qualified therapist or crisis hotline.

11. Privacy Contact

For questions about data protection, contact us at:
E-Mail: mail@solantara.com