Privacy

Souffle works without an account or a central profile database. Your programs, plans, journal and progress remain in the browser or installed application on your device.

The essentials in three points

On your device

What you enter and your progress are stored locally. Souffle does not centralise them on a server.

No account

No email address or identity is required to use the programs, sessions or journal.

Under your control

You can export, import or erase your data from the application settings.

What the application stores

Souffle stores the following locally in your browser storage:

your start date and the figures entered during setup;
your “if–then” plans and the commitments you selected;
your completed-session history, day by day;
your counters, lapses and their context;
your journal: feelings and free-form notes;
your settings: voice, soundscape, animation, reminder and appearance.

This information is stored unencrypted on the device. Someone with access to your unlocked device and browser data could therefore see it. “Erase everything” removes it from local storage.

Local storage is not an online backup. Clearing browser data, uninstalling the application or changing devices may remove your progress. Installation reduces some browser-clearing risks but does not replace regular exports.

After a programme is set up, Souffle may ask the browser to place its data in persistent storage. If granted, this reduces the risk of automatic eviction under storage pressure. It never prevents deletion requested by the user and does not replace a backup. On iPhone, installing Souffle before setting up a programme is particularly recommended because Safari data and installed-app data may be separate.

What may leave the device

Minimal usage measurement

To understand which content is actually used, Souffle counts a few usage steps. Measurement is enabled by default on first use, unless your browser sends Global Privacy Control. You can disable it at any time in settings.

Library open (library_open): event type only.
Program start (programme_start): event type and technical program name.
Setup completed (onboarding_complete): event type and technical program name.
Session start or completion (session_start, session_complete): event type, technical program name and technical session name.
Programme milestone reached (programme_day_reached): technical programme name and the J3, J7 or J14 milestone, counted once on the device.
Program completed (programme_complete): event type and technical program name.
Installation and reminder (app_installed, reminder_created): installation detected without device details; reminder creation with the technical programme name only.
Optional closed answer (feedback_answer): technical programme name, question moment and selected answer number. No free-form comment is sent.

The request is sent without a cookie or login identifier to /api/usage. It contains no text you enter, journal entry, personal plan, setting, email address, precise date or device characteristic. The only progress indicators sent are the aggregate J3, J7 and J14 milestones described above. As with any web request, network metadata may nevertheless be processed by the hosting provider.

Each event is recorded with only the dimensions listed above and retained for three months. Souffle views aggregate totals. Without an application identifier, separate actions cannot be linked to the same person.

Hosting and performance

The site and application use Cloudflare for hosting, delivery and security. Technical request data may therefore be processed—including IP addresses, requested URLs, errors, caching and security events—to deliver and protect the service.

Cookie-free traffic and performance measurement is also enabled. It receives neither your journal, your plans nor your progress. It may process the path without query parameters, referrer, estimated country, browser, operating system, device category and loading metrics. Detailed data is retained for seven days and then aggregated; statistics remain available for six months.

Voices and audio files

Souffle does not request microphone access or record your voice. “Souffle Voice” packs are generated in advance: downloading and playing them triggers no remote voice generation and transmits no personal text.

The system voice is supplied by your device or browser. Some system voices may use their provider’s servers. In that case, only generic scripts may be transmitted; sentences from your personal plans remain on screen. If the browser cannot determine whether a voice is local, Souffle applies the same precaution.

Calendar, email and external services

The daily reminder is a calendar file you choose to add. It then follows your calendar’s rules—for example, iCloud or Google synchronisation—and may be visible in a shared calendar.

Writing to Souffle opens your email application; your provider then processes the address and content you choose to send. Closed feedback answers are counted by the minimal usage measurement only after you select an answer. Free-form feedback still opens your email application.

Backing up and transferring your data

Settings let you export your data to a file and later import it again. The file is saved where you choose and is not sent to Souffle.

The standard export is a readable plain-text JSON file. A protected export encrypts its content with AES-GCM using the password you choose. Souffle neither knows nor can recover that password. Keep the file and its password separately, particularly before changing devices.

Accessing, correcting or erasing data

Because progress data remains local, you can view and edit it directly in the application. You can erase one program or all data from settings. Removing browser data or data from the installed application also erases it.

Usage-measurement events are recorded without an application identifier that could recognise a person. They therefore cannot be linked to your identity for an individual request. For questions about hosting or an email exchange, write to bonjour@souffle.app.

Content and responsibility

Souffle is an adult wellbeing and support tool. It is not a treatment or medical device and makes no claim of cure. Never use a session while driving, walking or operating machinery. If you have epilepsy, schizophrenia or a history of psychosis, seek professional medical advice before using sessions. If you are pregnant, receiving treatment or have a particular medical situation, ask for advice if uncertain.

Legal notice

Contact: bonjour@souffle.app
Domain name: souffle.app
Hosting: Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, United States — Cloudflare Pages.
Last updated: 4 September 2026