Create Future · Last updated: September 2026
Create Future is owned and built by Somtoo Solutions (www.somtoosolutions.com), and “we”, “us” and “our” in this policy mean Somtoo Solutions. We operate the Create Future mobile and web application — an AI-powered emotional transformation platform that helps you become the person you are meant to be.
Somtoo Solutions is the controller of the personal data described in this policy within the meaning of Article 4(7) GDPR.
We have not appointed a data protection officer, as we are not required to under Article 37 GDPR. Data protection enquiries go to the address above and are handled by us directly.
We collect only what is necessary to deliver a personalised, meaningful experience:
Under Article 6(1) GDPR we rely on the following grounds:
Your mood logs, emotional tone and the reflections you write may reveal information about your mental wellbeing. We treat this as special category data under Article 9 GDPR and process it only on the basis of your explicit consent under Article 9(2)(a), given when you choose to record a mood, write an entry or start a coaching conversation. You are never required to provide it — the Service works without it, with less personalisation — and you may withdraw that consent at any time by deleting the entries or your account.
We use your data solely to provide, improve, and personalise the Create Future experience:
We do not sell your data. We do not use your data for advertising. We do not share your data with third parties except as described in Section 5.
To deliver Create Future, certain data is processed on our behalf by specialised providers. Each acts as a processor under Article 28 GDPR, bound by a data processing agreement, and may use your data only on our instructions:
Our providers do not use your content to train their models. A full and current list of sub-processors is available on request at support@createfuture.app.
Your account data and everything you save is stored in the European Union. Some of the providers listed in Section 5 are established in the United States, so delivering generated content, voice, imagery and notifications involves transferring personal data outside the EU/EEA.
Those transfers are made on the basis of the European Commission’s Standard Contractual Clauses under Article 46(2)(c) GDPR, together with the supplementary measures agreed in each provider’s data processing agreement, or — where the provider is certified under the EU–US Data Privacy Framework — on the basis of the Commission’s adequacy decision for that framework.
The United States does not have a general adequacy decision, and US authorities may in certain circumstances be able to compel disclosure of data held there. We keep transfers to the minimum needed to run the feature you asked for: your journal entries are never sent in full, and nothing is transferred for advertising or profiling.
Your data is stored on infrastructure hosted in Frankfurt, Germany (EU). All data is encrypted in transit (TLS 1.2+) and at rest. Row-level security policies ensure that each user can only access their own data.
Your saved meditation audio files are stored securely and are only accessible to your authenticated account.
While we implement industry-standard security measures, no system is 100% secure. We encourage you to use a strong, unique password and to notify us immediately at support@createfuture.app if you suspect any unauthorised access.
We retain your data for as long as your account is active. If you delete your account, all your personal data — including your profile, mood logs, sessions, affirmations, vision board, journal entries, saved meditations, and notification tokens — is permanently deleted within 30 days.
Records of completed purchases are retained for as long as tax and commercial law requires, which in Germany is up to ten years under § 147 AO and § 257 HGB. These are financial records and are not used to identify you within the Service after deletion.
Anonymised, aggregated usage statistics may be retained for internal analytics after account deletion, but these cannot be linked back to you.
If you are in the EU or EEA, the GDPR gives you the following rights over your personal data:
To exercise any of these rights, contact us at support@createfuture.app. We will respond within one month, as Article 12(3) requires, and will tell you if we need longer because a request is complex. Exercising these rights is free.
You also have the right to lodge a complaint with a supervisory authority, under Article 77. Ours is the Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59-61, 10555 Berlin. You may instead complain to the authority where you live or work.
Create Future generates content automatically — meditations, coaching replies, affirmations, insights and imagery are produced by AI models from what you tell us. This shapes what the Service says to you, and nothing more.
We do not carry out automated decision-making that produces legal effects concerning you or similarly significantly affects you within the meaning of Article 22(1) GDPR. Nothing the app generates decides anything about your access, your money or your rights, and no profile built here is used outside the Service.
Create Future is not intended for children under the age of 16 (or 13 in jurisdictions where that is the applicable minimum age). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at support@createfuture.app and we will delete it promptly.
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and, where the changes are material, notify you via email or in-app notification. Your continued use of Create Future after changes take effect constitutes your acceptance of the updated policy.
If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us:
Somtoo Solutions · Christian Somtoo Obichukwuma