Soellix Privacy Policy

Introduction

Soellix is a mobile creative application operated by LB HEALTH AND PHYSICAL THERAPY, LLC. It offers tools such as AI portrait creation, old photo restoration, image quality enhancement, and AI-assisted video generation. This Privacy Policy explains how personal information is handled when you use the Soellix mobile application and its related services (collectively, the "Service", "we", or "us").

This policy applies from the moment you open or browse the Service and continues through account registration, sign-in, purchases, use of creative tools, and permanent account deletion. We use appropriate technical and organizational safeguards to protect personal information and ask that you read this policy carefully, especially the bold text.

Your consent to this policy indicates your agreement to the collection and processing of the personal information necessary for the Service's core functions, including account login, AI image/video processing, and payment for paid features.

I. How We Collect, Store, and Use Your Personal Information

(1) Account and Security

1. Registration and Login

You may create an account with an email address and password or sign in through Google or Facebook. For email registration, we collect your email address and protect the associated password credential using security safeguards rather than storing it in plain text. For Google or Facebook sign-in, we receive the account identifier and profile information that you authorize the provider to share, which may include your email address, display name, and profile image. We do not receive your Google or Facebook password. Optional profile details are not required for the Service's core creative functions.

2. Providing Network and Operational Security

To ensure the security of your account and to prevent phishing, fraud, abuse, and malicious activity, we collect your IP address, browser type and version, operating system, device type, and access timestamps when you use the Service. This information is used for security purposes and is de-identified where possible so as not to identify any specific user.

3. Maintaining Product Security and Troubleshooting

To maintain the normal operation of the Service, safeguard your account, troubleshoot issues, and improve and optimize our services, we collect log information such as your IP address, request records, error logs, browser and system information, and referring pages. This information is necessary for providing the Service.

(2) AI Image and Video Processing

When you use AI portrait creation, old photo restoration, image quality enhancement, video generation, or related image-transformation tools, the images, videos, and prompts you choose to submit are transmitted to our servers and contracted processing providers so the selected feature can be performed. These materials may contain faces or other personal content. They are protected during transmission and storage and are processed only to provide the tool you requested. After processing is complete, the uploaded source content is cleared from our processing servers. Generated results remain in your account history for your convenience; if you delete a result, it is cleared from our systems within 24 hours.

(3) Payment and Paid Features

When you purchase a weekly package, monthly package, or credits, payment is processed by the applicable app store platform (Apple App Store or Google Play) or by third-party payment service providers (which may include payment gateways and e-commerce or checkout platforms), depending on where you complete the purchase. Purchases completed through our third-party payment providers are one-time payments and do not automatically renew. Subscriptions purchased through the Apple App Store or Google Play are billed by that store and renew automatically until you cancel them in your store account settings. In that case the store, not Soellix, manages the recurring charge and your payment credentials, and shares transaction records with us.

Where payment card details are required, you enter them directly on the payment provider's secure page. We do not collect or store your full payment card number, expiry date, or CVC. We receive from the payment provider or platform only the information needed to fulfill and record your order, such as a transaction identifier, payment status, payment method summary, billing country, amount, and currency. We use this information to activate your purchased package or credits, provide receipts and customer support, handle refund requests (which we respond to within 48 hours, as described in our Terms of Service), respond to payment disputes or chargebacks raised with a payment provider, and comply with our tax and anti-fraud obligations.

(4) Message Notifications and Communications

We may send notifications to the email address associated with your account, such as identity or security verification, transaction and receipt confirmations, package expiry reminders, product updates, benefits, marketing information, or surveys. If you do not wish to receive marketing emails, you can unsubscribe using the link in the email, or by adjusting the notification settings in your account. Transactional and security messages are necessary for the Service and cannot be unsubscribed while your account is active.

(5) Personalized Content and Recommendations

To recommend features, materials, or content that may interest you and to improve your experience, we may process your account identifier, IP address, language and region preference, and your interactions within the Service (such as features used). You can adjust related preferences in your account settings.

(6) Indirectly Obtaining Your Personal Information from Third Parties

When you choose Google or Facebook sign-in, the provider sends us the information you have authorized for account creation and authentication, such as a provider-specific account identifier, email address, display name, or profile image. We use this information only within the scope of your authorization to identify your account and provide the Service. You can disconnect a linked provider from your account settings where that option is available.

II. How We Use Cookies and Similar Technologies

To ensure the normal operation of the Service, we store small data files called Cookies (and use similar technologies such as local storage) on your browser or device. Cookies typically contain identifiers, the site name, and some numbers and characters. We use the following categories of Cookies:

• Strictly necessary Cookies: Essential for the Service to function, such as keeping you signed in, remembering your preferences, and securing your session. These cannot be disabled.
• Analytics Cookies: Help us understand how you use the Service so we can improve it. These collect aggregated, anonymized usage data.
• Marketing Cookies: Used to recommend content that may interest you and to measure the effectiveness of our communications.

You can manage your Cookie preferences through the Cookie settings available in the Service, or through your browser settings. Most web browsers allow you to manage or block Cookies and to clear Cookies already saved. If you block or clear strictly necessary Cookies, you may need to re-enter settings or re-authenticate each time you visit, and some features may not work properly. We will not use Cookies for any purpose beyond those stated in this policy.

III. How We Transfer, Share, and Publicly Disclose Your Personal Information

(1) Sharing

We will not share your personal information with any company, organization, or individual, except in the following situations:

1. Sharing with Explicit Consent

After obtaining your explicit consent, we will share your personal information with other parties.

2. Sharing Under Legal Conditions

We may share your personal information in accordance with laws and regulations, litigation dispute resolution needs, or mandatory requirements lawfully put forward by government or judicial authorities.

3. Sharing with Service Providers and Partners

To operate the Service, we share the minimum necessary personal information with service providers acting on our behalf, including: app store platforms or third-party payment service providers (such as payment gateways and e-commerce or checkout platforms) to process your payments; cloud infrastructure and AI computing providers to host the Service and perform image/video generation; email and communication providers to send notifications; and analytics and security providers. We share only the personal information necessary for the relevant service, based on principles of legality, legitimacy, necessity, and good faith. We require these recipients to be bound by strict confidentiality and data protection obligations, and they have no right to use the information for any other purpose.

(2) Transfer

We will not transfer your personal information to any company, organization, or individual, except in the following situations:

1. With Your Explicit Consent

With your explicit consent, we will transfer your personal information to other parties.

2. In Case of Mergers, Acquisitions, or Bankruptcy Liquidation

If personal information transfer is involved in a merger, acquisition, or bankruptcy liquidation, we will inform you of the name and contact information of the recipient and require it to continue to be bound by this policy. If the purpose, method, or scope of processing changes, we will re-seek your consent where required by law.

(3) Public Disclosure

We will only publicly disclose your personal information: (1) after obtaining your individual consent; or (2) based on the mandatory requirements of laws, regulations, judicial organs, or administrative authorities.

(4) Circumstances for Processing Personal Information Without Separate Consent

According to relevant laws and regulations, we may process your personal information without your separate consent in the following situations:

1. Necessary for concluding or performing a contract to which you are a party;
2. Necessary for fulfilling statutory duties or obligations;
3. Necessary for responding to public health emergencies or protecting the life, health, and property safety of a natural person in an emergency;
4. Processing personal information within a reasonable scope for news reporting, public opinion supervision, or other acts for the public interest;
5. Processing, within a reasonable scope, personal information that you have voluntarily made public or that is otherwise lawfully published;
6. Other circumstances stipulated by laws and administrative regulations.

IV. How We Protect Your Personal Information

1. We use industry-standard security measures to protect your personal information against unauthorized access, disclosure, use, modification, damage, or loss. For example, data exchanged between your browser and the Service is protected by SSL/TLS encryption; we provide HTTPS access; we use encryption to protect data confidentiality; we deploy access controls so that only authorized personnel can access personal information; and we provide security and privacy training to our staff.
2. We follow updates to relevant laws, regulations, and standards and make our best efforts to resist and handle information security threats. We commit to fulfilling the security obligations required by applicable laws (such as GDPR and other data protection laws). In the event of a data breach, we will promptly initiate emergency response, notify affected users, and report to regulatory authorities as required by law. We shall not bear liability for losses directly caused by: unforeseeable and irresistible network attacks such as hacking or exploitation of unknown vulnerabilities; security incidents caused by your improper password management; or compliance failures of third-party service providers (such as cloud infrastructure providers), provided that we have fulfilled our own security obligations under applicable law.
3. Retention period: We retain your personal information only for as long as necessary to achieve the purposes stated in this policy or as required by law. Specifically: account information is retained for as long as your account is active and deleted or anonymized within 30 days of account closure; usage logs and security data are retained for up to 12 months; transaction and payment records are retained for no less than the period required by applicable tax and accounting laws (typically 7 years). When the retention period expires, we delete or anonymize the information.
4. Images and videos you upload for AI processing are protected by encryption during transmission and storage and are used only to generate your requested results, as described in Section I(2).
5. Generated content is stored in the corresponding data center so you can retrieve your history; after you delete it, the system clears it within 24 hours.
6. The Internet is not an absolutely secure environment. We strongly recommend that you use a strong, unique password and keep your account credentials confidential.
7. In the unfortunate event of a personal information security incident, we will inform you in accordance with legal requirements of the basic situation and potential impact, the measures we have taken or will take, suggestions for you to prevent and reduce risk, and remedial measures, by email, notification, or other means. Where individual notice is difficult, we will issue a reasonable and effective public announcement, and we will report to regulatory authorities as required.

V. Your Rights

(1) Access, Correct, and Delete Your Personal Information

1. Access and correction: You can access and correct your account information (such as nickname, avatar, and bound email) in your account settings.
2. Generated content: You can view and delete the images or videos you have generated in your account history at any time.
3. Third-party binding: You can view or unbind connected third-party accounts in your account settings.
4. Export a copy: If you wish to obtain a copy of your personal information, you can request it in your account settings or by emailing us; after verification, we will provide it to your registered email within a reasonable time.
5. We will delete the relevant personal information, and you may also request deletion, in the following situations:
   1. The processing purpose has been achieved, cannot be achieved, or is no longer necessary;
   2. We have stopped providing the product or service, or the retention period has expired;
   3. You have withdrawn consent;
   4. We have processed personal information in violation of laws, regulations, or our agreement;
   5. Other circumstances stipulated by laws and administrative regulations.
   If a retention period required by laws or regulations has not expired, we will cease processing other than storage and necessary security measures.

(2) Withdraw Your Authorization

You can withdraw a previously granted consent through the relevant settings in your account, or by contacting us using the contact information in this policy. After we receive your request, we will stop the corresponding processing within a reasonable time. Withdrawing certain authorizations may make related features unavailable; your withdrawal will not affect processing already carried out based on your prior authorization.

(3) Permanent Account Deletion

You can initiate permanent account deletion from the account settings in the Service or submit a request using the contact information below. Account deletion is irreversible. Once completed, you will no longer be able to sign in, and personal information associated with the account, including account details and stored creative history, will be deleted or anonymized in accordance with this policy. We may retain limited records where required for tax, accounting, fraud prevention, security, dispute resolution, or other legal obligations, and those retained records will not be used for unrelated purposes.

(4) Our Commitment to Your Requests

We commit to verifying and processing your requests to access, correct, delete, or export your personal information, withdraw consent, or close your account within 15 working days (or within the period required by applicable law).

VI. Additional Rights for Users in Specific Regions

(1) European Economic Area, United Kingdom, and Switzerland (GDPR)

If you are located in the EEA, UK, or Switzerland, you have the following additional rights under the General Data Protection Regulation (GDPR) or equivalent local law:

• Data portability: You have the right to receive a copy of your personal information in a structured, commonly used, and machine-readable format (such as JSON or CSV), and to transmit that data to another controller.
• Right to object: You have the right to object to the processing of your personal information based on our legitimate interests, including profiling. We will cease processing unless we demonstrate compelling legitimate grounds.
• Automated decision-making: You have the right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects or similarly significantly affects you. You may request human review of any such decision.
• Right to lodge a complaint: You have the right to lodge a complaint with your local data protection supervisory authority.

Our legal bases for processing your personal information include: performance of our contract with you (providing the Service), your consent (where obtained), our legitimate interests (such as security and service improvement), and compliance with legal obligations.

(2) California, United States (CCPA/CPRA)

If you are a California resident, you have the following additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the sources, the purposes, and the categories of third parties with whom we share it.
• Right to delete: You have the right to request deletion of your personal information, subject to certain exceptions.
• Right to opt out of sale or sharing: We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising. If this practice changes in the future, we will provide a clear "Do Not Sell or Share My Personal Information" mechanism.
• Right to non-discrimination: We will not discriminate against you for exercising any of your CCPA rights.

To exercise any of these rights, please contact us at soellix-support@lbphysical.com.

VII. How We Handle Minors' Personal Information

1. The Service is intended for users aged 16 or older and is not directed to children under 16.
2. If you are under 16, you must not create an account or use the Service.
3. If you are 16 or 17, you should read this policy together with your parent or legal guardian and obtain their consent before using the Service where required by the laws of your place of residence.
4. Where applicable law requires parental or guardian consent for a user aged 16 or 17, we will process that user's personal information only after obtaining the required consent or where otherwise permitted by law.
5. If you are a parent or legal guardian and believe that a child under 16 has provided personal information to us, please contact us. After verifying the request, we will delete the information as soon as reasonably practicable unless retention is required by law.

VIII. How Your Personal Information Is Transferred Globally

The Service relies on cloud infrastructure and service providers that may be located in different countries or regions, and your personal information may be processed and stored in jurisdictions other than your own. When a cross-border transfer is involved, we will carry out the assessments, safeguards, and consents (including your individual consent where required) mandated by applicable laws to ensure your personal information receives an adequate level of protection.

IX. How This Policy Is Updated

This policy may change from time to time due to business adjustments or changes in laws, regulations, or policy. Without your explicit consent, we will not reduce the rights you are entitled to under this policy. After an update, we will publish the revised version and, before it takes effect, remind you of material changes through in-product notice, email, announcement, or other appropriate means. If a change involves the purpose, method, or types of personal information processed, we will re-obtain your consent where required by law. If you do not agree with the revised policy, you should stop using the Service. If you have questions about an update, please contact us using the information below.

X. Our Contact Information

The developer and operator of the Service is LB HEALTH AND PHYSICAL THERAPY, LLC.

Company Name: LB HEALTH AND PHYSICAL THERAPY, LLC

Company Address: 14 Newburg St, Roslindale, MA 02131-2807, United States

Official App Domain: https://soellix.lbphysical.com

If you have any questions, comments, suggestions, or complaints about this policy, please email our personal information protection specialist at: soellix-support@lbphysical.com

XI. Governing Law

This Privacy Policy shall be governed by and construed in accordance with the laws of the Commonwealth of Massachusetts, United States, without regard to its conflict of law principles. Nothing in this section deprives you of any mandatory protections afforded by the laws of your place of residence.