Your data, protected by design.

Under the EU General Data Protection Regulation (GDPR), the data controller for Inner Navigation is:

All privacy requests — access, rectification, erasure, objection, portability — are handled at the address above. We respond within 30 days, as required by GDPR Article 12.

GDPR Article 6 requires a lawful basis for every processing activity. Ours are narrow and explicit:

• 01
  Consent (Art. 6(1)(a))

  Contributing to the collective dataset (pseudonymized at rest, aggregated with k-anonymity before publication). You opt in separately from personal cloud backup. You can withdraw consent at any time — one tap, no questions.

• 02
  Explicit consent for health data (Art. 9(2)(a))

  Your mood, sleep, illness and well-being logs — and, if you fill in those fields, your intimate-life logs (libido, sexual activity) — may constitute data concerning health or sex life, special categories under GDPR Article 9. We process such data only on your explicit consent under Article 9(2)(a), given through the in-app toggles: the cloud-backup consent before any health log leaves your device for storage; the AI health consent before structured indicators are sent to an AI provider (for analyses or the AI coach); the separate free-text-notes consent before any journal note joins an AI payload; and the dedicated persistent-AI-memory opt-in. Each consent can be withdrawn at any time, independently of the others.

• 03
  Contract (Art. 6(1)(b))

  Operating your account (if you create one), delivering the Premium subscription or the AI credit packs you purchase, and enforcing the corresponding AI usage quotas (daily coach message limits, analysis credits).

• 04
  Legitimate interest (Art. 6(1)(f))

  Minimal crash telemetry to keep the app working. Balanced against a privacy-respecting architecture — no identifiers, short retention.

• 05
  Legal obligation (Art. 6(1)(c))

  Where accounting, tax, or consumer-protection law requires us to retain certain transaction records.

Any data that leaves your device — pseudonymized contributions, account credentials — is stored exclusively on EU-based infrastructure:

No data is transferred outside the European Economic Area without explicit consent and a valid transfer mechanism — the one opt-in exception being AI analysis, detailed just below.

AI features use separate, granular consents: a first one to send structured well-being indicators (mood, sleep, activity, symptoms, intimate life if you fill in those fields), a second, distinct consent for including your free-text journal notes, and a dedicated opt-in for persistent AI memory. Without the notes consent, your written notes are not added to any AI payload. When you opt in, the selected data — analysis context, your AI coach messages, and memory distillation runs — is sent to our AI providers (Google Gemini Flash by default, Anthropic Claude as an alternative) hosted in the United States, under EU Standard Contractual Clauses (Commission Decision 2021/914). These transfers occur only for the duration of the inference and only when you explicitly enable the relevant AI feature in the app. The distilled AI memories themselves are stored on Supabase EU (Dublin), not with the AI providers. Separately, requests to the AI proxy and IAP verification pass through Cloudflare’s global edge network, which processes personal data in transit (but does not store it outside Supabase), also under Standard Contractual Clauses. The full list of sub-processors and their transfer mechanisms is in the Sub-processors section below. We will notify you before adding any new sub-processor or materially changing the purpose of an existing one.

Under GDPR, you have the following rights over your personal data. Most of them are exercisable directly from the app, in one or two taps. The rest are handled by email at privacy@innernavigation.app.

We use a small, deliberately-chosen set of service providers. Each one is listed here, with a data processing agreement (DPA) and, for any transfer outside the EEA, the European Commission’s Standard Contractual Clauses (SCCs) plus technical safeguards (encryption, data minimization).

Sub-processor update policy. We keep an internal register of sub-processors and their safeguards up to date. If this list changes materially — a new or replacement provider that affects your data — we update this page (date and version at the top) and, for a substantial change, notify active users in the app. The current list is also available on request at the contact below.

This website uses strictly necessary cookies only: the Supabase session cookies required to keep you signed in and to sync your own data. They are essential to the service and are never used for advertising or profiling.

We do not use advertising cookies, marketing trackers, fingerprinting, or non-essential analytics. No third-party analytics tool runs without your prior consent. If we ever add one, it will only load after you have given consent through a banner or choice screen, and you will be able to refuse it.

The mobile app follows the same principle: no advertising identifiers, no fingerprinting, no third-party trackers — only the session tokens needed to sign in and sync.

The service is not directed at children under the age of 15. We do not knowingly collect personal data from anyone under 15. If you believe a minor has created an account, please contact us at privacy@innernavigation.app and we will delete the account and associated data.

This policy may evolve as the project grows. When we make material changes — anything that affects your rights, how we use your data, or who we share it with — we will:

This English version belongs to the same legal document set as the French, Spanish, Portuguese, and German versions planned for app distribution. Those versions must remain aligned on the same version number and review date before publication in those languages.

• Update the "Last updated" date at the top of this page.
• Notify active users in-app and, where we have an email address, by email.
• Preserve previous versions of this document in our public changelog.

Minor changes — typo fixes, clarifications that don’t alter substance — will be made silently, but still reflected in the date stamp.

This privacy policy is governed by French law, together with the GDPR and the French Data Protection Act (Loi Informatique et Libertés), which apply directly.

For users acting as professionals (non-consumers), any dispute relating to this policy falls to the French courts of the publisher’s registered office — Mont-de-Marsan, Landes. If you are a consumer, nothing in this clause deprives you of the mandatory protections of the law of your country of residence, or of your right to bring proceedings before the courts of the place where you live.

None of this limits your right to lodge a complaint with your data-protection authority at any time — the CNIL in France, or the authority of your own country.