Privacy Policy

Last updated: May 14, 2026

Solena is a product developed by 20-80 Editorial Unipessoal Lda. We are committed to protecting your privacy — especially given the sensitive nature of personal health data. This policy explains exactly what we collect, how we use it, and your rights over it.

We will never sell, rent, or share your personal data or health information with advertisers or third parties. Your data exists only to serve you.

1. What we collect

Account information

Health data (entered voluntarily by you)

AI conversation data

Device and preference data

2. How we use your information

Your health data is never used to train shared AI models or benchmarks. Pattern insights are built solely from your own logged data.

3. Data storage and security

All personal and health data is stored in Supabase, a PostgreSQL database service with row-level security (RLS) enforced at the database level. This means no other user — or anyone without your credentials — can access your records, even in the event of an application-layer bug.

Data is encrypted at rest and in transit. Supabase infrastructure is hosted in EU-region servers (AWS eu-west). You can review Supabase's security practices at supabase.com/security.

Language preference is stored in your browser's localStorage and never transmitted to our servers.

4. Health data — special category

Health and menopause-related data is considered sensitive personal data under GDPR Article 9. We process it under your explicit consent, given when you create an account and begin logging. You may withdraw this consent at any time by deleting your account.

This data is used exclusively to generate your personal pattern insights and health reports. It is never disclosed to third parties, employers, insurers, or researchers without your separate, explicit written consent.

5. Third-party services

We use a limited set of third-party services to operate Solena. All processors are contractually bound to handle your data only as we instruct:

We do not use advertising networks or data brokers.

5b. Administrative access

As the operator of Solena, the founding team of 20-80 Editorial Unipessoal Lda. has technical access to the database for the purpose of operating, debugging, and maintaining the service. This access is limited, logged, and subject to strict confidentiality obligations. We will never read your conversations unless required to investigate a technical incident, and will never share what we access with any third party.

6. Your rights

7. Data retention

Your data is retained for as long as your account is active. If you delete your account, all personal information and health logs are permanently and irreversibly deleted within 30 days. Anonymised aggregate statistics (with no connection to your identity) may be retained for internal research purposes.

8. Children

Solena is intended for adults aged 18 and older. We do not knowingly collect data from anyone under 18. If you believe a minor has registered, please contact us and we will delete the account immediately.

9. GDPR (European Union)

If you are located in the European Union or European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR). The data controller is 20-80 Editorial Unipessoal Lda., registered in Portugal. Legal basis for processing: explicit consent (Article 6(1)(a) and Article 9(2)(a) for health data). You may lodge a complaint with the Portuguese data protection authority (CNPD) at cnpd.pt or with your local supervisory authority.

10. Changes to this policy

We may update this policy as the app evolves. If changes are material, we will notify you by email at least 14 days in advance. The date at the top of this page always reflects the most recent version.

11. Contact

For any privacy-related questions, data requests, or to exercise your rights, contact us at . We respond within 48 hours.