Your thoughts are personal.

1. Controller

The controller for this website and for any data processed by the provider through the INNR app is:

2. Privacy on this website

Website delivery and server logs

We host this website on a server operated by Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany. When you access the website, the server processes connection data that is technically necessary to deliver it. This may include your IP address, the date and time, the requested address, the amount of data transferred, the referrer, browser, operating system, and HTTP status.

This processing is necessary to deliver the website securely, defend against attacks, and investigate errors. The legal basis is our legitimate interest in providing a secure and reliable website in accordance with Article 6(1)(f) GDPR. Under the intended server configuration, ordinary page requests are not stored in an access log. Error and security messages may contain the data described above and are deleted after no more than seven days, unless a specific security incident requires longer retention.

No cookies or audience measurement

This website does not set its own cookies. It does not use analytics, advertising, or marketing services, and it does not load content from social networks or other external media providers when a page is opened. External services—such as Apple or the confidential listening and support services listed on our Support page—are only contacted when you choose the relevant link.

Contacting us

If you contact us by email, we process your email address and the content of your message in order to respond. The legal basis is Article 6(1)(b) GDPR where your request concerns a contract or steps taken before entering into a contract; otherwise, it is Article 6(1)(f) GDPR. Our legitimate interest is responding to inquiries and providing support. We generally delete support correspondence no later than twelve months after the matter has been resolved, unless statutory retention requirements or unresolved claims require longer storage. Please do not send us sensitive journal entries or health information.

3. Privacy in the INNR app

Local processing

Personal check-ins, selected emotions, intensity ratings, body areas, journal entries, reflections, progress, and settings are stored locally on your iPhone by default. In the current version, this personal content is not uploaded to an INNR server.

Protection and deletion

Local files use iOS Data Protection and are excluded from device backups. Deleting the app also removes this local data. You should therefore not delete the app if you want to retain your existing entries.

Local usage events and no advertising tracking

The current version of INNR contains no advertising SDKs and does not transmit your emotional entries for advertising or profiling. Technical usage events used to improve the app are currently stored only on the device and are not sent to an INNR server.

Sharing at your request

If you explicitly choose to share a summary, iOS passes the selected representation to the service or contact you choose in the iOS share sheet. Any further processing is governed by the terms of the selected recipient.

Notifications

If you enable reminders, iOS schedules local notifications. You can change this permission at any time in iOS Settings.

Purchases and subscriptions

Purchases, trial offers, and subscriptions are processed through Apple’s App Store. Through StoreKit, INNR receives the technical information required to identify the product and activation status, but not your complete payment details. Apple processes account, transaction, device, and payment information under its own responsibility. For more information, see App Store & Privacy and Apple’s Privacy Policy.

4. Recipients and international transfers

Hetzner, as our hosting provider, may receive technical website data. If you contact us, our email provider and other service providers involved in delivering the communication may process data. App purchases are processed by Apple. Apple may also process data outside the European Economic Area and, according to its own information, uses the transfer mechanisms provided for by law. Apart from this, we do not transmit personal INNR content to third parties unless you initiate this yourself through the iOS share sheet or we are legally required to do so.

5. Your rights

Where we process personal data about you and the applicable legal requirements are met, you have rights of access, rectification, erasure, restriction of processing, data portability, and objection. You may withdraw consent at any time with effect for the future.

Because your personal app content is stored locally on your device and is not received by INNR, we cannot view, export, or delete it on our servers. You manage this content directly in the app or by deleting the app.

6. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for our registered office is Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg, Stahnsdorfer Damm 77, 14532 Kleinmachnow, Germany. Further information and the complaint form are available on the supervisory authority’s website.

7. Changes to this notice

We update this notice when features, service providers, or legal requirements change. The date of the current version is shown above.