SOLOMON is a personal assistant for your whole life. You give it access to parts of your life — calendar, email, bank accounts, journal entries and, if you turn faith mode on, your Scripture reading and prayers — so it can help you look after them well. This page describes what we collect, why, where it lives, and the rights you keep over it.
One sentence
Your data is stored on an encrypted volume on a server in the United States; it goes to an outside service only when a feature you use needs that service (an AI model to answer you, Plaid for your bank, Google Calendar, Telegram, and so on), none of those services may use it to train AI models, and you can export or delete everything at any time.
Who runs SOLOMON
SOLOMON is operated by Bethel Ventures, LLC. You can reach us at support@hellosolomon.com for any privacy question.
What we collect
Account information
- Email address and password hash (for sign-in)
- Name and self-described role (founder, pastor, parent, etc.)
- Time zone, language preference, faith mode
- Two-factor authentication secret if you enable it
Content you create
- Journal entries, prayer logs, reflections, receipts, photos you upload
- Tasks, habits, goals, OKRs, decision logs
- People and relationships you choose to track
- Conversations with SOLOMON in chat, voice transcripts, command history
- Memories SOLOMON extracts from those interactions to be helpful over time
Financial data (when you connect your bank)
If you choose to connect a bank account, we use Plaid Inc. as our credential broker. You authenticate directly with Plaid; we never see your bank username or password. Plaid returns to us:
- Account names, types, last-4 mask, current and available balances
- Transaction history (date, amount, merchant, category)
- The institution's name (e.g. "Chase")
We use this data only to display your finances inside SOLOMON, calculate net worth and cash flow, and tag expenses to your businesses for tax preparation. We do not sell it, share it, or use it for advertising. Plaid's own privacy policy is at plaid.com/legal.
Connected services (only with your permission)
When you connect a third party (each is optional and individually revocable):
- Google — calendar events, Gmail messages, Drive files, YouTube uploads
- Telegram — chat messages between you and SOLOMON on Telegram
- WhatsApp — chat messages between you and SOLOMON on WhatsApp
- Home Assistant — the devices and their states in the Home Assistant you connect, and the commands you ask SOLOMON to send to it
- Hospitable — short-term rental reservations + guest messages
- Buffer — your scheduled social posts
- Apple HealthKit / health wearables — sleep, activity, vitals you choose to share
Google user data
If you connect a Google account, SOLOMON asks only for the access the features you use need. You can disconnect at any time from Settings → Connectionsor from your Google account's security page.
- Gmail (read and modify) — to triage your inbox (archive, label, or suggest a reply), spot inquiries such as speaking or partnership requests, and draft replies for you to review. To sort your inbox, the sender, subject line and first 260 characters of each new message are sent to an AI model once; the result is saved so the same message is never sent twice. Full message bodies are sent to an AI model only for senders on your allowlist (anyone in your People list or domains you add), or when a message looks like a speaking, partnership or booking inquiry. SOLOMON never deletes or sends mail on its own unless you turn that on.
- Gmail (send) — to send a reply only after you approve it, or automatically only if you have turned that on for a specific contact or category.
- Google Calendar — to read your schedule for your daily briefing and to create events, for example when someone books time with you.
- Google Drive and YouTube — not requested from customer accounts.
SOLOMON's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular: Google user data is used only to provide the features above to you; it is never sold, never used for advertising, and never used to train or improve any AI model; it is transferred to an AI provider only to perform a task you asked for; and no person at Bethel Ventures, LLC reads it unless you ask us to for support, it is needed for security or to comply with the law.
Where your data lives
SOLOMON runs on Fly.io. Its database is a SQLite file on a private encrypted volume, on a server in the United States (Chicago). Connections between your browser and SOLOMON are HTTPS-only. On top of the volume encryption, the credentials SOLOMON holds for you are individually encrypted at rest with AES-256-GCM, using a key derived from a passphrase only the operator holds: your Plaid bank-connection tokens, Google and brokerage OAuth access and refresh tokens, bot tokens, API keys and mailbox passwords you enter for integrations, and your two-factor (TOTP) secret. Your SOLOMON password is never stored; we keep only a bcrypt hash of it. Nightly backups are encrypted with the same passphrase before they leave the server, and a copy of each is kept in separate off-site storage. The newest 14 are kept.
Third-party processors
When SOLOMON takes an action you asked for, the relevant data goes out to the service performing that action:
- AI models through OpenRouter — most requests. Your message and the context SOLOMON adds (recent chat, recalled memories, the item you're working on) go to OpenRouter, which passes them to the model host. SOLOMON sets OpenRouter's routing on every request: Claude models may only run on Anthropic, Amazon Web Services (Bedrock) or Google Cloud (Vertex AI); open models such as DeepSeek may only run on US inference hosts (Fireworks, Together, DeepInfra, Lambda, Baseten, Parasail), never on DeepSeek's own servers; hosts that store or train on prompts are excluded ("deny data collection"); and if no allowed host is free the request fails rather than going elsewhere.
- Groq (United States) — used when OpenRouter can't serve a request, and to turn voice recordings into text.
- Google AI (Gemini) — a fallback for reading receipt photos and documents you upload, when OpenRouter can't.
- Your own AI keys — if you add your own key for Anthropic, OpenAI, Google, DeepSeek or OpenRouter, requests for your account go to that provider under your own agreement with them.
- SOLOMON itself never trains any AI model on your data.
- Plaid — bank connection broker. See above.
- Stripe — payment processing for paid plans. Stripe receives your email and payment details directly; SOLOMON never sees or stores your full card number, only Stripe's customer and subscription IDs and your plan status.
- Brevo — transactional email (sign-in verification, password resets, and notices you've turned on). Brevo receives your email address and the content of those messages.
- Google — Calendar and Gmail, including sending mail you approve, when you've connected Google.
- Telegram and WhatsApp (Meta) — the messages you exchange with SOLOMON there, when you've connected them.
- Home Assistant — your own Home Assistant server, at the address and with the token you provide, when you connect it.
- Voice — SOLOMON's standard voice (Kokoro) runs on our own server, so the text it reads never leaves it. If you turn on ElevenLabs voices, the text being read is sent to ElevenLabs.
- Tavily and Brave Search — web search queries, when SOLOMON answers a question that needs current information.
- fal and Pexels — the description of an image you ask SOLOMON to make (fal), or search words for a stock photo on a slide (Pexels).
- Crossway (ESV) and API.Bible — Bible verse lookups (just the reference, not your reading list).
- Apple Push / FCM — when push notifications are enabled.
We do not sell your data, run advertising on you, or share data between SOLOMON users without your explicit setup of a shared household.
How long we keep it
- Account record and content you've created: until you delete it or your account.
- Session tokens: 30 days from last use.
- Sign-in activity (successful and failed attempts): 90 days, for security audit.
- Receipts and bank transactions: retained as long as you keep the account, since they're often needed for past-year tax filings.
- Activity log (what SOLOMON did and when): 90 days. Record of actions SOLOMON took for you (sent, booked, approved): 180 days.
- Encrypted backups: the newest 14 nightly backups; older ones are overwritten.
- Inbox sorting results (a category and one-line reason per Gmail message — never the message itself): 90 days, and deleted at once when you disconnect your last Google account. Disconnecting also revokes SOLOMON's access at Google.
Your rights
You can, at any time:
- Export your entire dataset as JSON from /settings. Exports include everything you created and everything SOLOMON stores about you, but never credentials (tokens, keys, password hashes or two-factor secrets).
- Delete any single item, any entire surface, or your whole account from /settings. Deleting your account takes effect immediately: SOLOMON cancels your subscription with Stripe, asks Plaid to sever every bank connection, revokes its access to your Google account, and then erases your profile, content, sessions, bank data, audit logs and uploaded files. Encrypted backups that were taken before the deletion are kept for up to 14 days after it and then permanently overwritten; they are never used to restore your account unless you ask.
- Disconnect any third-party integration from /settings → Connections. Disconnecting Plaid scrubs every account, every transaction, every receipt link associated with the institution.
- See what SOLOMON has remembered about you on /memory, and remove anything you don't want kept.
GDPR and CCPA
Wherever you live, you have the same rights here. If the EU or UK General Data Protection Regulation (GDPR) or the California Consumer Privacy Act (CCPA, as amended by the CPRA) applies to you, these are how SOLOMON meets them:
- Access and portability — see what we hold and take a copy: the JSON export in /settings, or ask us.
- Correction — edit anything in the app, or ask us to.
- Deletion — delete items or your whole account in /settings, or ask us.
- Objection, restriction and withdrawing consent — disconnect any service, turn features off, or ask us to stop a particular use.
- No sale or sharing — we do not sell personal information or share it for cross-context behavioral advertising, so there is nothing to opt out of.
- No discrimination — using these rights never changes your price or service.
Why we use your data (GDPR legal bases): to provide the service you signed up for (contract); for the connections and optional features you turn on (consent, which you can withdraw by disconnecting or turning them off); and to keep SOLOMON secure and working (legitimate interests). Your data is stored and processed in the United States. To use any of these rights, email support@hellosolomon.com; we may need to confirm it's your account first, and we reply within one month. In the EU or UK you may also complain to your data protection authority.
Cookies
We use a single session cookie (solomon.session) to keep you signed in. It's HttpOnly, Secure, and SameSite=Lax. No analytics cookies, no ad cookies, no third-party trackers.
Children
SOLOMON is not directed at children under 13. If you become aware that a child has signed up, please email us and we'll delete the account.
Changes
When we materially change this policy we'll update the date at the top and surface a notice the next time you sign in. Continued use after that constitutes acceptance.
Contact
Privacy questions, data export requests, deletion requests, or disputes: support@hellosolomon.com.