Privacy Policy

Last Updated: June 7, 2026  ·  Effective Date: June 7, 2026  ·  Version 1.0

1. Who We Are

Innerly is a self-discovery and psychological assessment app developed and operated by Humos Technologies ("we", "us", "our"). By using Innerly, you agree to this Privacy Policy.

• Product: Innerly (Android app, package: com.innerlyai.app)
• Company: Humos Technologies
• Email: vrdntech@gmail.com
• Data Storage: Supabase (ap-south-1, Mumbai, India)

2. What Data We Collect

2.1 Data You Provide

• Profile Information: Name, age, gender, occupation, region, interests (collected during onboarding)
• Assessment Answers: Your responses to psychological assessment questions — the core of your Innerly experience
• Mood Journal Entries: Daily mood scores, emotion tags, and personal notes you choose to write
• AI Coach Conversations: Messages you send to the AI Coach
• Mirror Test: Invite codes and compatibility data generated when you use the Mirror Test feature

2.2 Data Collected Automatically

• Device Info: Device type, OS version, app version (for debugging and compatibility)
• Usage Data: Screens visited, features used, session duration — anonymised and aggregated
• Crash Reports: Error logs to help us fix bugs (no personal data included)

2.3 Data We Do NOT Collect

• ❌ Biometric data (face ID, fingerprint)
• ❌ Location or GPS data
• ❌ Contacts or phone book
• ❌ Camera or microphone (unless you explicitly use a feature requiring it)
• ❌ Financial information (payments handled by Razorpay/Google Play)

3. How We Use Your Data

• To generate your report: Assessment answers → AI scoring engine → personalised psychological report
• To power the AI Coach: Your report and conversation history help the AI give personalised advice
• To analyse mood patterns: Mood logs are analysed to surface emotional triggers and trends
• To improve the app: Anonymised, aggregated usage data helps us understand what works
• To send notifications: Daily reflection reminders (only if you grant permission)
• To comply with law: We retain minimum data required by Indian law

4. Data Storage & Security

Your data is stored on Supabase servers located in Mumbai, India (ap-south-1) — keeping your data within India's jurisdiction in compliance with the DPDP Act 2023.

• Encryption at rest: AES-256 encryption on all stored data
• Encryption in transit: TLS 1.3 for all data transmission
• Access control: Row-Level Security (RLS) — you can only access your own data
• Mood journal: Encrypted before transmission to our servers
• API keys: All AI provider keys stored server-side only, never in the app

5. Data Sharing

We share your data with the following third parties, only as necessary:

• Supabase: Database hosting (Mumbai, India) — stores your profile, reports, and mood logs
• Google (Gemini API): AI report generation — your assessment scores sent as anonymised JSON, no personal identifiers
• Anthropic (Claude API): Premium AI features — same anonymised format as above
• Razorpay: Payment processing — we never see your full card details
• Google Play: App distribution and subscription management

All third-party providers are contractually bound to handle your data securely and not use it for other purposes.

6. Your Rights (DPDP Act 2023)

Under India's Digital Personal Data Protection Act 2023, you have the following rights:

• Right to Access: Request a copy of all personal data we hold about you
• Right to Correction: Update inaccurate personal information in your profile
• Right to Deletion: Request complete deletion of your account and all data (processed within 30 days)
• Right to Data Portability: Export your reports and mood data in JSON/PDF format
• Right to Grievance: Lodge a complaint with our Data Protection Officer

To exercise any right: Go to Settings → Privacy → Manage My Data in the app, or email vrdntech@gmail.com.

7. Data Retention

• Active account: Data retained as long as your account exists
• Deleted account: All personal data permanently deleted within 30 days
• Anonymised analytics: Aggregated usage data may be retained indefinitely (no personal identifiers)
• Legal compliance: Minimum data retained as required by Indian law (typically 7 years for financial records)

8. Children's Privacy

Innerly is intended for users aged 16 and above. Users under 18 require verifiable parental consent before using Innerly, in accordance with DPDP Act 2023 provisions for minors. We do not knowingly collect data from children under 13. If we discover we have collected data from a child under 13, we will delete it immediately.

9. Mental Health Data — Special Protections

We recognise that mental health data is especially sensitive. We apply additional protections:

• PHQ-9 depression screening results are stored encrypted and never shared with any third party
• Crisis intervention data (scores ≥15) triggers local helpline display only — never transmitted or stored in identifiable form
• AI Coach conversations are not used to train AI models without explicit opt-in consent

10. Cookies & Tracking

The Innerly mobile app does not use browser cookies. Our website (innerly.app) uses minimal cookies for:

• Session management (required)
• Anonymous analytics via privacy-respecting tools (optional)

You can manage cookie preferences via the cookie banner on our website.

11. Changes to This Policy

We may update this policy as our app evolves. We will notify you of significant changes via in-app notification at least 14 days before they take effect. Continued use after the effective date constitutes acceptance.

12. Contact Us