Privacy Policy

What We Collect

• Account information: first name and email address
• Onboarding answers: coaching focus areas, goals, preferred coaching style, chosen coach name, and how you heard about us
• Your country of residence and your preferred coaching language, which you choose during onboarding and can change in Settings
• Messages you write to the coach and the coach's responses
• Journal entries you write (text or voice-transcribed). Entries are private by default; the coach only sees an entry when you explicitly choose to share it as part of a session
• Session-end analysis: summaries, breakthroughs, insights, and next steps generated from your sessions
• Session feedback: 1-5 ratings and optional written reflection
• Satisfaction ratings: the 1-5 answers you give at signup and at the periodic check-in, so you and your coach can see how things change over time
• How you arrived at the site: the web page that referred you, any parameters in the link you followed, and the page you landed on
• Product analytics: per-user usage events tied to your account (signup, session start, session end, feedback submitted, journal entry created) with metadata only, never the content of your messages, summaries, journal entries, or written reflections. We use this to understand whether the coaching helps people return and progress over time. Events older than 180 days are deleted automatically.
• Email engagement: whether an email we sent you was delivered, opened, or had a link clicked
• Standard device and log data: IP address, browser type, basic usage patterns, error reports

Why We Use Your Data, And Our Legal Basis

European data-protection law asks us to say why we use your data and what our legal basis is for each purpose. In plain language:

• To provide the coaching service and to remember what you share, so each session builds on the last instead of starting from zero. Our legal basis is performance of our agreement with you. Coaching conversations often touch sensitive subjects such as health, mental health, or your relationships, and we handle that kind of information with your permission.
• To send you emails, including progress and service messages. We send these according to your settings, you can turn them off in Settings, and every email has an unsubscribe link.
• To keep the service safe and working, and to fix problems. This covers authentication, error tracking, debugging, improving prompts and analysis quality, and understanding whether the coaching helps people return and progress. Our legal basis is our legitimate interest in running a service people can rely on.
• To understand how many people visit our website at innerverseapp.com, which countries they come from, and whether they go on to install the app. We count this without cookies and without storing anything on your device. Our legal basis is our legitimate interest in knowing whether the site is doing its job.

We do not use your data for advertising, and we do not sell it. The only outside parties who receive it are the service providers listed below, who process it on our behalf.

Third-Party Services

InnerVerse relies on:

• Clerk for account authentication
• Supabase (Postgres) for storing your account data, sessions, and messages
• OpenAI for generating coaching responses, session-end analysis, voice-to-text transcription (used in voice sessions and when you tap the mic to dictate a journal entry), and a one-time extraction of structured patterns from your onboarding answers (your stated focus, satisfaction ratings, and the free-text note you write for your coach) when you finish onboarding. The extracted patterns are visible to you under Settings → Your focus.
• Vercel for web hosting
• Sentry for error tracking
• Resend for sending email. Resend receives your email address and the content of the emails we send you, and records whether an email was delivered, opened, or had a link clicked.
• Google for a private spreadsheet we use to run the service. It holds your first name, email address, signup and activity dates, counts of sessions and feedback, your satisfaction ratings, and counts of emails sent and opened. It does not hold your messages, journal entries, or session content.
• Vercel Web Analytics for visitor statistics on our website at innerverseapp.com. It records the page viewed, the country, the browser and device type, the page that referred you, and whether you clicked to install the app. It sets no cookies and stores nothing on your device. Visitors are counted using a temporary value derived from the request, rotated daily, so you cannot be identified or followed from one day to the next. It is not used in the app.

These providers are based in the United States, and your data is processed there. We rely on the data-protection commitments and safeguards these providers offer for personal data from Europe.

Your coach's memory

To make your coaching continuous, your coach keeps gentle notes of the lasting things you share in sessions: the people who matter to you, what you're working on, where life is happening, and challenges you've talked through together. These notes exist so each session builds on the last instead of starting from zero, the way any good coach remembers you between conversations. They are private to your account. They are never shared with other people and never used for advertising, and, exactly like your messages, they are sent to OpenAI as part of generating your coach's replies. You can see everything your coach remembers, and remove anything, under Settings → What your coach remembers.

How your coaching is personalized

From what you share, the coach builds an evolving picture of you: the themes you return to, the goals you are working on, and the context that makes your situation yours. That picture is what lets the coaching grow with you rather than restart each time. It is used to personalize your coaching and for nothing else. No automated decisions with legal or similarly significant effects are made about you. You can see what the coach remembers, and remove any of it, in Settings.

How Long We Keep Your Data

• Sessions and their analysis, the notes your coach keeps, and journal entries: kept until you delete the session, the note, or the entry, or until you delete your account
• Account information, onboarding answers, session feedback, and satisfaction history: kept until you delete your account
• Product analytics events: deleted automatically after 180 days

When you delete your account, your data is removed from our systems, including the spreadsheet described above.

Our providers keep their own short-lived copies for a while after that: our email provider keeps a record of the emails it sent you and their delivery status, our error-tracking provider keeps error reports, and OpenAI keeps request data for a short period to check for abuse under its API terms. Each of those copies is deleted on that provider's own schedule.

Cookies

In the app at app.innerverseapp.com we use cookies for login and basic functionality. Those are needed for the app to work, so they are always on, and your browser's cookie settings let you control them.

Our website at innerverseapp.com uses no tracking or analytics cookies. We count visits there with a tool that stores nothing on your device, which is why the site does not ask you to accept anything.

Your Rights

You can ask us to:

• give you access to the data we hold about you
• correct anything that is wrong
• delete your account and the data that belongs to it
• give you a copy of your data in a portable form
• restrict or object to a particular use of your data
• withdraw your permission at any time

You can do much of this yourself in the app: delete a single session, remove anything your coach remembers, delete a journal entry, turn emails off, or delete your account and everything in it, all under Settings. For anything else, email us at hello@innerverseapp.com and we will take care of it. Withdrawing your permission does not undo what was done while it was in place.

If you believe we have handled your data wrongly, you can complain to the data-protection authority for the country you live in. In Italy that is the Garante per la protezione dei dati personali.

Children

We do not knowingly collect data from anyone under 16. If you think a child has created an account, contact us.

Security

Your data is encrypted in transit and at rest. Everything you send to and from InnerVerse travels over an encrypted connection, and everything stored in our database, including backups, is encrypted on disk with AES-256. On top of that we use standard authentication and row-level database security, so one account cannot read another's data. No online service is perfectly secure.

Changes

We may update this policy as the app evolves.

Contact

Privacy questions or data requests: hello@innerverseapp.com