Capsoul

Shared memory capsule

Privacy Policy

Last updated: August 1, 2026

Capsoul is a shared memory capsule for preserving ordinary fragments and reopening them with people you trust. This policy explains what we collect, why we use it, and the choices available to you.

1. Information we collect

2. How we use information

We use information to authenticate accounts; seal, store, release, and deliver Capsouls; show shared opening progress; process verified purchases and balances; send service notifications; provide optional features; prevent abuse; investigate reports; enforce blocks; support account deletion; and meet legal obligations.

We do not sell or rent personal data, and we do not share it with third parties for advertising.

3. Storage and service providers

Capsoul uses Tencent CloudBase and related Tencent Cloud services for authentication support, database, functions, object storage, email, SMS, and optional AI features. Apple provides Sign in with Apple, App Store purchases, and Apple Push Notification service (APNs). Providers process information only as needed to supply these services.

Access controls limit a shared capsule to its sender and designated recipients under the product’s release rules. Opened Shared capsules may be saved as local documents and removed from cloud storage as described in the Paid Preservation Policy.

Personal Capsouls are encrypted on-device with AES-256-GCM and stored in local .capsoul packages excluded from cloud backup. Capsoul does not upload the Personal payload or media, provide cloud discovery or synchronization for it, or receive plaintext through encrypted export/import. CloudBase processes only the limited quota and wrapped-key metadata described above.

4. Reports and blocks

A report sends a limited snapshot needed for review: reporter, reported account, relevant capsule reference, category, optional description, and service metadata. Reported users are not told who reported them. Selecting “also block” creates a separate block relationship; blocking can also be managed independently in the app.

Report records and their review history are normally retained for 180 days from closure, and may be kept longer only when reasonably needed for ongoing safety, fraud prevention, dispute handling, or legal compliance. Blocking records remain while the block is active.

5. Retention and deletion

Account data and unopened capsule content remain while needed to provide the service, subject to the paid-preservation and release rules. Opened content may become local-only. Verification codes, upload sessions, delivery logs, and other transient records use shorter operational retention periods.

You can request account deletion in the app (Profile → Delete Account) or through Support. Following verification, we delete or anonymize account data and associated content within 30 days unless limited records must be retained for security, purchase accounting, safety, dispute, or legal reasons. Local documents already saved on a recipient’s device are controlled by that device and are not removed remotely.

Signing out removes the signed-in account’s Personal key material from the device and may leave only opaque encrypted packages unless you choose to delete them. After server-side account deletion succeeds, Capsoul attempts to remove that account’s Personal packages, keys, and temporary plaintext from the device. If local cleanup fails, the app reports that the device’s app data should be cleared. If server-side deletion fails, the app keeps the session, packages, and keys so the failure does not destroy local access prematurely.

6. Your choices

You may access or correct profile data, omit optional media and location, disable notifications in system settings, withdraw an unopened capsule under the app’s rules, unblock an account, and request deletion. A sender controls whom they invite; every user remains responsible for content they save or share.

7. Children

Capsoul is not directed to children under 13, and we do not knowingly collect their personal information. Contact us if you believe a child has provided information so we can review and delete it.

8. Security and international processing

We apply access controls, verified server operations, and data minimization appropriate to the service. No system can guarantee absolute security. Information may be processed where our service providers operate, subject to applicable safeguards and law.

9. Changes and contact

We may update this policy and will provide appropriate notice of material changes. Questions or privacy requests may be sent to support@capsoul.chat.