Docs / Account & Support
Data & Privacy: Where Your Content Lives
This page covers the factual "where data lives, who can see it, and how to delete it." The legal terms are in the Privacy Policy.
This page covers the factual "where data lives, who can see it, and how to delete it." The legal terms are in the Privacy Policy.
At a Glance
| Data | Where it lives | Synced to cloud? |
|---|---|---|
| Past sessions, message text | Your browser + Soniva database | ✅ Synced after login |
| Your settings (brand/voice/speech rate) | Your browser + Soniva database | ✅ Synced after login |
| Images uploaded for image translation | Only in the current browser's memory | ❌ Never uploaded |
| API keys you entered | Your browser (by default) | ⚠️ Synced encrypted only if you opt in |
| Synthesized audio | Your browser cache | ❌ Not uploaded |
| Usage records (credits deducted) | Soniva database | ✅ |
Images: Never Uploaded, and That's Deliberate
An image you upload for image translation never enters Soniva's database.
It exists only in the current browser session's memory and is gone once you refresh the page; it also doesn't sync with your session to other devices. The translated text is kept normally — the image itself isn't.
Why this design: screenshots often carry far more sensitive info than the main body — account names, chats, document watermarks, surrounding windows… not storing it is the most thorough protection. It also happens to save storage cost, a win on both sides.
Where Read-Aloud Text Travels Through
This must be stated honestly: cloud AI voice synthesis happens on the upstream brands' servers, so the text you want read aloud is sent to the brand you selected (Alibaba Cloud, Microsoft, ElevenLabs…).
This is a common premise of every cloud TTS product — if the text isn't sent over, speech can't be synthesized.
If your content is sensitive and you don't want it passing through any third party:
- Use system built-in voice — synthesized entirely locally on your device, not a single character leaves your device, and it's free.
Does Soniva Record the Text You Input
Yes, and we state it plainly: usage records save each request's input text to analyze real user scenarios (what kind of content people read, what features they need).
You can turn it off — there's a toggle in Settings. With it off, usage records keep only the billing-necessary fields — "when, which brand, how many chars, how many credits" — and don't store the text content.
This is also written in the Privacy Policy.
How API Keys Are Stored
If you use Bring Your Own Key (BYOK):
- By default stored only in your current browser's local storage, not uploaded.
- Only when you proactively check "Sync to account" is it stored under your account encrypted with AES-256-GCM. The database holds ciphertext; the decryption key exists only server-side, so neither the browser nor the database can get the plaintext.
- Synthesis requests are forwarded by Soniva's server to upstream on your behalf (because the eight vendors' signature/auth protocols differ, this must be handled server-side). Your key is used only for your own requests.
- Logging out clears all locally saved keys. You can also manually clear them in Settings anytime.
Payment Information
Soniva's servers neither store nor touch your card information.
Collection, invoicing, and tax compliance are all handled by the payment provider (Paddle or Dodo Payments); card numbers only travel between you and the payment provider. See payment & invoice info.
How to Delete Your Data
| What to delete | How |
|---|---|
| A single message / single session | Delete it directly in the UI |
| Locally saved API keys | Clear manually in Settings, or log out (auto-clears) |
| Locally cached audio | Clear browser cache |
| All data + account | Settings → Privacy & Data → Delete account (email code required) |
Account deletion is confirmed with a 6-digit code emailed to your registered address. After confirming, there's a 30-day grace period during which signing back in cancels the deletion; only after those 30 days are your sessions, messages, and settings permanently deleted. Note: deletion isn't a refund — for a refund, first apply per the Refund Policy.
Data Export
There's currently no one-click export. If you need to export all your session data, email soniva.cde@gmail.com and we'll handle it manually.
Related Documents
Was this article helpful?
Anonymous feedback is enabled when you allow analytics and the service is available. You can also report an issue by email.
The email includes this article. You can also copy the details and send them to soniva.cde@gmail.com