Effective from: 23 August 2026
1. Who we are
InnerMe is operated by Escienta Ltd ("we", "us", "our"), a company registered in England and Wales.
| Registered address | 26 Woods Road, Grove, Wantage, OX12 0RQ, United Kingdom |
| Company number | 11263048 |
| Contact | support@escienta.com or innerme@escienta.com |
Escienta Ltd is the data controller for the personal information described in this policy. This means we decide how and why your information is used, and we are responsible for looking after it.
2. The short version
We think you should be able to understand this without reading all of it, so:
- We store what you record. Your written or spoken thought becomes text, and that text is stored in your account so you can read it back and so we can show you patterns over time.
- We do not keep your voice. Audio you record is transcribed and then discarded. We never store a recording of your voice.
- An AI reads your thought in order to reply to it. That means your words are sent to OpenAI, our AI provider, who process them on our behalf. They are not used to train anyone's AI models.
- We never sell your data, and we never share your thoughts with advertisers, data brokers, insurers, or employers.
- Usage analytics are off unless you turn them on, and even then they never include what you wrote or how you felt.
- You can delete everything, permanently, from inside the app, at any time.
The rest of this policy explains all of that properly.
3. Information we collect
3.1 Information you give us
| What | Why we have it |
|---|---|
| Email address | To create your account and sign you in |
| First name (optional) | Only to greet you in the app |
| Your thoughts, written or spoken | The core purpose of the service |
| Your answer to "how do you feel now?" | To measure whether a reflection helped |
| Messages you send us | To answer your question or fix your problem |
3.2 Information created when you use InnerMe
| What | Why we have it |
|---|---|
| The transcript of a spoken thought | Produced by speech-to-text so it can be reflected on and shown to you |
| The AI reflection written in response | So you can read or replay it |
| An emotion category and sentiment score | To build the patterns shown in Insights |
| An audio file of the reflection being read aloud | So you can listen rather than read |
| Language of the thought | So the reply comes back in the same language |
| Date and time of each entry | So patterns can be shown over time |
3.3 Information we do not collect
To be explicit, InnerMe does not collect or store:
- A recording of your voice. Spoken thoughts are transcribed and the audio is discarded. It is never written to our storage.
- Your precise location
- Your contacts, photos, calendar, or health app data
- Advertising identifiers, or any cross-app tracking data
- Payment card details (see section 6)
- Your age, gender, ethnicity, or any other demographic information
4. Special category data — and why we ask your permission
What you record in InnerMe is likely to say something about your mental health. Under the UK GDPR and EU GDPR that is "special category data", which receives stronger legal protection.
We rely on your explicit consent (Article 9(2)(a)) to process it. You give that consent by agreeing to these terms when you create an account and by choosing to record a thought.
You can withdraw that consent at any time by deleting your account, which erases everything (section 9). Withdrawing does not affect anything we did lawfully beforehand.
5. Why we use your information, and our legal basis
| Purpose | Legal basis |
|---|---|
| Creating and running your account | Performance of a contract |
| Transcribing, reflecting on, and storing your thoughts | Explicit consent (special category data) |
| Showing you your history and Insights | Performance of a contract |
| Detecting language that may indicate a crisis, and showing support resources | Substantial public interest / vital interests |
| Enforcing the free daily limit and preventing abuse | Legitimate interests — keeping the service viable |
| Taking payment and managing subscriptions | Performance of a contract |
| Anonymous usage analytics | Consent, which you may refuse or withdraw |
| Answering your support messages | Legitimate interests — supporting our users |
| Security, fraud prevention, and keeping backups | Legitimate interests / legal obligation |
6. Artificial intelligence, and who processes your words
InnerMe cannot work without sending your thought to an AI provider. We think you should know exactly what that involves.
We use OpenAI, L.L.C. as a processor for three things:
- Speech to text — converting a spoken thought into text
- Reflection — writing the response you receive
- Classification — assigning an emotion category and sentiment score
- Text to speech — reading the reflection aloud
Your thought is sent to OpenAI's API each time you record one. Under our agreement with OpenAI, data submitted through their API is not used to train their models, and is retained by them only briefly for abuse monitoring before deletion.
Important limitation, stated plainly: because your words must be readable by our systems and by OpenAI in order to produce a reflection, InnerMe is not end-to-end encrypted. We do not offer, and do not claim to offer, encryption that would make your thoughts unreadable to us.
7. Who else we share information with
We never sell your personal information. We share it only with the service providers below, each acting on our instructions under a written agreement.
| Provider | What they handle | Where |
|---|---|---|
| Supabase | Database, file storage, authentication | United Kingdom (London, eu-west-2) |
| OpenAI, L.L.C. | Speech-to-text, reflections, classification, text-to-speech | United States |
| Amazon Web Services (SES) | Sending sign-in codes and support emails | Europe (eu-west-1) |
| PostHog | Anonymous usage analytics, only with your consent | European Union |
| "Sign in with Google", if you choose it | United States / global | |
| Apple, Google | App Store and Play Store payments | United States / global |
| RevenueCat | Subscription management | United States |
We may also disclose information where we are legally required to, or to establish, exercise or defend legal claims. If we are ever compelled to disclose your data, we will tell you unless legally prohibited from doing so.
8. International transfers
Some of our providers are located outside the UK and European Economic Area, principally in the United States. Where information is transferred there, we rely on one of the following:
- the UK Extension to the EU–US Data Privacy Framework, where the provider is certified under it; or
- the UK International Data Transfer Addendum together with the European Commission's Standard Contractual Clauses.
We keep a record of which mechanism applies to each provider, and we review it at least once a year.
If you would like details of the safeguards in place for any of our providers, email us at support@escienta.com and we will provide them.
9. How long we keep information
| Data | Retention |
|---|---|
| Your thoughts, reflections and reflection audio | Until you delete them, or until you delete your account |
| Your account details | Until you delete your account |
| Support messages | Up to 24 months, then anonymised |
| Anonymous analytics (if consented) | Up to 12 months |
| Backups | Up to 30 days after deletion, then overwritten |
Deleting your account deletes your data. Profile → Account → Delete account permanently removes your thoughts, reflections and stored audio. It cannot be undone and there is no recovery.
Support messages are kept but stripped of anything identifying you, so a bug report stays useful while ceasing to be about you.
10. How we protect your information
- All traffic between the app and our servers is encrypted in transit (TLS)
- Data is encrypted at rest by our infrastructure providers
- Your audio files are held in private storage, reachable only through short-lived signed links, and stored in a folder keyed to your account
- Database access is governed by row-level security, so one account cannot read another's data
- Access to production systems is limited to staff who need it
No service can promise perfect security, and we do not. If a breach occurs that is likely to result in a risk to your rights, we will notify the ICO within 72 hours and tell you without undue delay.
11. Analytics, and how consent works
InnerMe uses PostHog (EU region) to understand which parts of the app people use. This is off by default. We ask you once, inside the app, and you may say no. You can change your answer at any time in Profile → Usage data.
If you consent, we record events such as "a thought was recorded", "the paywall was shown", or "the insights screen was opened".
We never send:
- what you wrote or said
- the AI's reflection
- your emotion category or sentiment score
- how you answered "how do you feel now?"
- your email address or name
Analytics events are linked only to a random account identifier, never to your email. If you refuse or withdraw consent, collection stops immediately.
We do not use advertising trackers, and we do not track you across other apps or websites.
12. Notifications
Reminders are scheduled entirely on your device. Nothing about them passes through our servers, and no notification ever contains your thoughts or reflections — notifications appear on lock screens, and we treat that as a place your writing must never appear.
They are off unless you turn them on, in Profile → Notifications.
13. Your rights
Under UK and EU data protection law you have the right to:
- Access the personal data we hold about you
- Correct anything inaccurate
- Erase your data ("right to be forgotten")
- Restrict or object to our processing
- Portability — receive your data in a machine-readable format
- Withdraw consent at any time, for anything based on consent
- Not be subject to solely automated decisions with legal or similarly significant effects. InnerMe does not make such decisions about you.
Most of these you can exercise yourself in the app. For anything else, email support@escienta.com and we will respond within one month.
If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113), or to your local supervisory authority if you are in the EEA.
14. Age limit
InnerMe is for adults. You must be 18 or over to create an account. We do not knowingly collect information from children. If you believe a child has created an account, contact us and we will delete it.
15. Changes to this policy
If we change this policy in a way that materially affects you, we will tell you in the app or by email before the change takes effect. The date at the top always shows the current version.
16. Contact us
Escienta Ltd
26 Woods Road, Grove, Wantage, OX12 0RQ, United Kingdom
support@escienta.com ·
innerme@escienta.com