Privacy Policy
Last updated: 24 June 2026
Your privacy matters to us. This policy explains what data we collect, how we use it, and how we protect it.
1. Data we collect
1.1 Data you provide
- Your name (optional, for personalization)
- Your preferred language tone
- Selected focus areas and challenges
- Mood check-ins
- Rituals and goals you create
- Journal entries
- Notification preferences
1.2 Data collected automatically
- Anonymous user identifier (Firebase Auth)
- Anonymized usage data (Firebase Analytics)
- Device information (type, iOS version) — for compatibility only
1.3 Data we do NOT collect
- Email address (unless you contact us)
- Location
- Contacts
- Photos
- Payment information (handled exclusively by Apple)
2. How we use data
- Personalizing affirmations and content
- Saving your progress and preferences
- Sending the notifications you enabled
- Improving the app through anonymized analytics
- Syncing data across devices (optional)
We do not sell, rent or share your personal data with third parties for marketing purposes.
3. Where we store data
Local storage
Most data is stored locally on your device using UserDefaults. This data does not leave your device unless you enable sync.
Firebase (Google Cloud)
If you use an account, data may be synced through Firebase Firestore (Google servers). Firebase is GDPR-compliant and provides adequate data protection.
4. Third-party services
The app uses the following third-party services:
- Firebase Authentication — anonymous sign-in and Sign in with Apple
- Firebase Firestore — data sync (optional)
- Firebase Analytics — collects anonymized usage data: screens viewed, actions taken (mood check-ins, affirmations viewed, meditations completed), session length, device type and iOS version. It does not collect personally identifiable data.
- Apple StoreKit — subscription management
- Google Gemini (Firebase AI Logic / Vertex AI) — powers the "Lola" AI companion's replies for consenting Pro users only (see section 4.2).
Each service has its own privacy policy:
4.1 Sharing data with widgets
If you use the InnerKind home-screen widget, the app shares a minimal set of data (the affirmation of the day, your current mood) through Apple's App Groups mechanism. This data stays exclusively on your device and is never sent to external servers.
4.2 The "Lola" AI companion (Google Gemini)
For Pro users only who choose to use the AI chat: to generate replies, Lola sends your messages and a short snippet of the recent conversation to Google's AI model (Gemini, via Firebase AI Logic / Vertex AI). Processing happens on Google's servers.
Before your first use of the AI chat, we ask for your explicit consent in the app. You can decline — in that case Lola replies locally, on your device, without sending anything to Google.
- We send only your message text, your tone preference, and your language — we do not send your name, journal, mood history, or other profile data.
- Conversations are not used to identify you and are not used for advertising or tracking.
- Free users, and Pro users who haven't consented, use only locally generated replies.
- Lola is not a therapist and does not replace professional care.
Data sent is subject to Google's Privacy Policy.
5. Data retention
We keep your data only as long as needed to run the service:
- Local data (UserDefaults) — stored on the device until you delete the app or your account
- Firebase Firestore data — kept until you delete your account. On account deletion, all data is permanently removed within 30 days at most.
- Firebase Analytics data — anonymized and aggregated, retained per Google's policy (14 months at most)
You can request deletion of all data at any time (see section 7).
6. Your rights
Under GDPR and Romanian law, you have the right to:
- Access your personal data
- Correct inaccurate data
- Delete all your data (from Settings > Account > Delete account)
- Restrict data processing
- Port your data
- Object to data processing
To exercise these rights, contact us at the address below.
7. Deleting your data
You can delete all your data at any time:
Deletion is permanent. All data in Firebase and on the device will be removed.
8. Security
We protect your data with:
- Encrypted communication (HTTPS/TLS)
- Firebase Firestore security rules
- Local on-device storage (protected by iOS)
- No password storage (Sign in with Apple)
9. Children
The app is not intended for children under 13. We do not knowingly collect data from children under this age.
10. Changes
We may update this policy from time to time. Changes will be posted on this page with the update date.