Privacy Policy

Last updated: January 10, 2026

1. Introduction

InnerLoop AI ("InnerLoop," "we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered meditation mobile application and web services (collectively, the "Service"). By using InnerLoop, you consent to the data practices described in this policy.

2. Information We Collect

2.1 Information You Provide

  • Account Information: When you create an account, we collect your email address, name, and profile picture through Google or Apple Sign-In.
  • Meditation Preferences: Information you share with our AI to personalize your meditations, such as focus areas (sleep, stress, focus), preferred duration, and voice preferences.
  • User-Generated Content: Chat messages and prompts you provide to create custom meditations.
  • Payment Information: When you subscribe or purchase credits, payment is processed securely by Apple (App Store) or our payment processors. We do not store your full payment card details.

2.2 Information Collected Automatically

  • Usage Data: Meditation history, session duration, completion rates, favorites, and listening streaks.
  • Device Information: Device type, operating system version, unique device identifiers, and app version.
  • Log Data: Access times, pages viewed, app crashes, and other diagnostic data.

2.3 Information from Third Parties

  • Authentication Providers: Basic profile information from Google or Apple when you sign in.
  • App Store: Subscription status and transaction information from Apple for iOS purchases.

3. How We Use Your Information

We use collected information to:

  • Provide Our Services: Generate personalized AI meditations, play audio content, and maintain your meditation library.
  • Personalization: Tailor meditation recommendations and content to your preferences and usage patterns.
  • Process Transactions: Manage subscriptions, process credit purchases, and track your usage quota.
  • Improve Our Service: Analyze usage patterns to enhance features, fix bugs, and optimize performance.
  • Communications: Send important service updates, subscription reminders, and respond to your inquiries.
  • Safety and Security: Detect and prevent fraud, abuse, and security incidents.

4. AI-Powered Features and Content Generation

InnerLoop uses artificial intelligence to create personalized meditation content. When you interact with our AI:

  • Your prompts and preferences are processed by our AI systems (powered by Google Gemini) to generate meditation scripts.
  • Generated audio uses text-to-speech technology (ElevenLabs) to create natural voice narration.
  • We may retain conversation history to improve your experience and the quality of generated content.
  • AI-generated content is not reviewed by humans before delivery unless flagged for safety concerns.

We implement content safety measures to prevent generation of harmful or inappropriate content.

5. Third-Party Services

We share data with trusted third-party service providers:

Supabase

Database hosting, authentication, and file storage. Your data is encrypted at rest and in transit.

Google (Gemini AI)

AI model for meditation script generation. Prompts are processed to generate content but not used to train models.

ElevenLabs

Text-to-speech service for generating meditation audio narration.

Apple

In-app purchases, subscription management, and Sign in with Apple authentication.

Google OAuth

Optional authentication method for account sign-in.

These providers have their own privacy policies governing their use of your information. We only share the minimum data necessary to provide our services.

6. Data Storage and Security

We implement industry-standard security measures to protect your data:

  • Encryption: All data is encrypted in transit (TLS/SSL) and at rest (AES-256).
  • Access Controls: Strict authentication and authorization controls limit data access to authorized personnel.
  • Infrastructure: We use secure cloud infrastructure with regular security audits and monitoring.
  • Row-Level Security: Database security ensures users can only access their own data.

While we strive to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

7. Data Retention

We retain your information for as long as necessary to provide our services:

  • Account Data: Retained while your account is active. Deleted within 30 days of account deletion request.
  • Meditation Content: Your generated meditations are retained until you delete them or your account.
  • Usage Analytics: Aggregated, anonymized analytics may be retained indefinitely for service improvement.
  • Transaction Records: Retained as required by law (typically 7 years for financial records).

8. Your Privacy Rights

Depending on your location, you may have the following rights:

For All Users

  • Access: Request a copy of your personal data.
  • Correction: Request correction of inaccurate information.
  • Deletion: Request deletion of your account and associated data.
  • Data Portability: Request your data in a portable format.

For EU/EEA Residents (GDPR)

  • Right to restrict processing
  • Right to object to processing
  • Right to withdraw consent
  • Right to lodge a complaint with a supervisory authority

For California Residents (CCPA)

  • Right to know what personal information is collected
  • Right to know whether personal information is sold or disclosed
  • Right to opt-out of sale of personal information (we do not sell your data)
  • Right to non-discrimination for exercising your rights

To exercise these rights, contact us at support@innerloopai.app

9. Children's Privacy

InnerLoop is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at support@innerloopai.app. We will promptly delete such information from our records.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have different data protection laws. When we transfer your data internationally, we implement appropriate safeguards such as Standard Contractual Clauses to protect your information.

11. Do Not Track Signals

Our Service does not currently respond to "Do Not Track" signals. However, you can control tracking through your device settings and by managing your account preferences within the app.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by posting the updated policy in the app and updating the "Last updated" date. For significant changes, we may also notify you via email or in-app notification. Your continued use of InnerLoop after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: support@innerloopai.app

We will respond to your inquiry within 30 days.