Privacy Policy

Effective: October 24, 2026 Who we are: Sulla Mobile ("Sulla", "we", "us") is provided by Merchant Protocol LLC. This policy covers the Sulla iPhone app and the Sulla Cloud services it uses. Sulla Desktop has its own privacy policy at https://sulladesktop.com/privacy.

1. Summary

• We collect what we need to run your account, your chats and your plan. We don't sell your data, show ads, or track you across other companies' apps and websites.
• When you chat or talk with Sulla, your messages go to an AI provider so it can answer. We ask your permission before that happens, and you can turn it off.
• Your Passwords vault is end-to-end encrypted. Sulla Cloud stores only ciphertext and can't read your passwords.
• You can delete your account in the app at any time.

2. Information we collect

Account information. Your name and email address, from Sign in with Apple or email sign-up. If you use Sign in with Apple, we receive an Apple user identifier and, if you choose, a private relay email address. We store a hashed password if you sign up with email.

Your content in Sulla Cloud. Messages you send to Sulla in Sulla Cloud and Sulla's replies. Photos and documents you attach to a chat. Instructions you set for a chat's scheduled check-ins ("heartbeat"). Support tickets you send us. We store these so you can see your conversation history on your devices.

Voice. Push-to-talk and voice mode turn your speech into text on your iPhone. That audio isn't sent to us. The text is sent like any other message. Replies are read aloud by a voice that runs on your iPhone. If you use Premium Voice (available with a plan), your live audio is streamed through Sulla Cloud to xAI to hold the conversation.

Files. If you turn on Files sync in Sulla Desktop, Sulla Cloud stores your file list (names, folders, sizes, dates and similar details) so the app can show it. The contents of your synced files are stored end-to-end encrypted. When you open a file in the app, Sulla Cloud asks your Mac for it and passes the file to your iPhone. That temporary copy is deleted shortly after.

Passwords. If you turn on Passwords sync in Sulla Desktop, Sulla Cloud stores an encrypted copy of your vault. It's encrypted on your devices with keys that never leave them, so we can't read, recover or reset it. To add a new iPhone to your vault, we email you a one-time code.

Devices and sync. A device identifier the app creates, your device name and type, push-notification tokens, and whether your Mac is online. We need these to route messages and approvals between your devices.

Synced Studio data. If you turn it on in Sulla Desktop, Sulla Cloud stores your workflows, skills, agents, use cases, usage summaries and live-agent status so the app can show them. Your Desktop memory is stored end-to-end encrypted.

Purchases. Your subscription plan, App Store transaction identifiers, renewal status and AI usage. Apple processes payment, and we never see your card details.

Usage analytics. Events such as which screens you open, sign-in and purchase steps, and settings you change, linked to your account and device. We use them only to run and improve Sulla. You can turn them off in Settings › About › Share usage analytics.

What we don't collect: your location, your contacts, your photo library (only the photos you choose to send), health data, or advertising identifiers. The app has no ads and no ad-tracking SDKs.

3. How we use information

To provide Sulla: sign you in, answer your messages, sync your devices, show your Files, Passwords and Studio, send notifications you turned on, process your plan and usage, respond to support requests and reports, keep the service secure, prevent abuse, and fix problems. We don't use your content for advertising. We don't use your chats to train AI models.

4. AI providers and when we share your data with them

Before Sulla sends anything to an AI provider, the app asks for your permission ("Before Sulla answers"). You can withdraw it any time in Settings › About › AI data sharing. Chat and voice pause while it's off.

With your permission, we send your message, your conversation so far, any files you attached, and the context Sulla needs to answer, to the provider running the model:

• Sulla Cloud models: Anthropic, OpenAI, or Cloudflare Workers AI (open models hosted by Cloudflare), depending on the model you or your plan uses. Free messages use Anthropic.
• Premium Voice: xAI (live audio and transcripts).
• Chats routed to your Mac: they pass through Sulla Cloud to your Mac, and then to whichever provider you set up in Sulla Desktop, which may be a model running on your Mac. That provider's terms apply.

We use these providers' business and API services. Anthropic says API inputs and outputs are automatically deleted within 30 days, subject to policy-enforcement, legal, and separately agreed retention exceptions, and its commercial terms govern API processing. OpenAI says API data isn't used for training by default and abuse-monitoring logs may be retained for up to 30 days, subject to documented endpoint and legal exceptions. Cloudflare says Workers AI customer content isn't used to train models and standard inference content isn't retained after processing, subject to stateful-feature, safety, security, and legal exceptions. xAI says API inputs and outputs aren't used for training without explicit permission and are retained for 30 days by default for abuse and misuse auditing. Provider practices can change; current processing is governed by each provider's API terms and policies.

5. Other service providers

• Cloudflare: hosts Sulla Cloud (servers, databases, storage, real-time connections, email delivery).
• Apple: Sign in with Apple, in-app purchases, push notifications and AutoFill.
• GitHub: the app downloads its on-device voice models from public GitHub release pages. GitHub sees your IP address for that download. No account data is sent.

Every provider that handles your personal data must protect it at least as well as this policy does and use it only to provide its service to us.

6. Sharing

We don't sell or rent your personal information, and we don't share it for cross-context behavioral advertising. We share data only:

• with the providers in §4 and §5 to run Sulla;
• with people you invite to your workspace, who see the workspace's shared data according to their role;
• when the law requires it, or to protect the rights, safety and security of users and the service;
• with a buyer or successor if Merchant Protocol LLC is involved in a merger or sale, under this policy.

7. Security

Data travels over encrypted connections (TLS). Your Passwords vault, your synced files' contents and your Desktop memory are end-to-end encrypted. Chats you have with Sulla Cloud are stored in Cloudflare D1 and Durable Object storage, which Cloudflare documents as encrypted at rest, but they aren't end-to-end encrypted, because Sulla Cloud has to read them to answer you. No system is perfectly secure.

8. Retention and deletion

• While your account is open: we keep your Sulla Cloud conversations until you delete them and your synced data until you turn off sync or delete it in Sulla Desktop. Deleting a conversation, or using Settings › About › AI data sharing › Clear All Chats, soft-deletes the selected conversations and their messages on your iPhone and queues deletion tombstones that soft-delete the corresponding Sulla Cloud conversation and message records and remove them from other synced devices. Vault device-approval codes expire after a short time.
• Deleting your account: go to Settings › Profile › Delete account. Deleting your account immediately signs out every device, revokes Sign in with Apple, and deletes your sign-in details, emails, devices, push tokens, Sulla Cloud conversations and attachments, usage analytics, encrypted vault and synced Studio data, and starts deletion of your synced Files. A workspace you own alone is deleted. You leave shared workspaces, and messages you posted in them are removed.
• What we keep after deletion: your name, the email address you last used, and your subscription, purchase and support-ticket records. We keep these for billing, tax, refunds and fraud prevention, for as long as required for tax and legal obligations.
• Deleting your account doesn't cancel an Apple subscription. Cancel it in your Apple ID settings.
• Data on your Mac stays in Sulla Desktop until you remove it there.

9. Your choices and rights

• Turn AI data sharing, notifications, sync types and usage analytics on or off in the app or in Sulla Desktop.
• Access, correct or delete your data: use the app, or email [email protected].
• California residents have the right to know, delete, correct, opt out of sale or sharing (we don't sell or share), and limit the use of sensitive information, plus non-discrimination for using these rights. Submit a request on our California privacy request page or email [email protected]. We respond within 45 days.
• Residents of other places may have similar rights. Contact us and we'll honor them as required by law.

10. Children

Sulla is for adults. You must be 18 or older to use it (see the Terms). We don't knowingly collect information from anyone under 18. If we learn we have, we delete it.

11. Changes

If we change this policy, we'll post the new version here with a new effective date. If the change is significant, we'll tell you in the app or by email before it takes effect.

12. Contact

Merchant Protocol LLC. Privacy: [email protected]. Support: [email protected].