Hey Human!
You're here because you value your privacy, especially when it comes to sharing your deepest thoughts
with a computer program. Protecting your privacy is incredibly important to us, as both the creators
and regular users of InnerEcho.
Our Commitment
Your privacy isn't just something we care about. It's central to our mission to provide a safe and private journaling experience. When you share sensitive, personal information with us, we take that responsibility seriously and are committed to keeping it secure, private, and protected, while still offering you the best features and services.
Transparency is key to building trust, which extends to our relationship with you. We're committed to clear and open communication about how we handle your data, so you can make informed decisions about its use within InnerEcho.
1. What We Collect (and What We Don't)
Your journal entries and check-ins stay private. We never receive or store the content you write. Your entries live on your device and sync only through your own private iCloud account (Apple's CloudKit), which we have no ability to access or read.
Sign in with Apple: if you choose it, we ask only for your first name, which is kept on your device to personalize the app. We do not request your email address, and Apple does not share your Apple ID with us.
Anonymous usage data: we collect product analytics — which features are used and in-app purchase events — along with basic device information such as device type and operating system version, to understand how the app performs and where to improve it. This never includes your journal entries or check-in content.
2. How AI Features Use Your Words
The only time the text you write leaves your device is when you choose to use a cloud AI feature — such as insights, Echo chat, or dream analysis. That specific text is sent directly to OpenAI to generate your response. It does not pass through our servers, and we never store it.
You're in control. AI is enabled by default but can be switched off at any time in Settings — with it off, nothing is ever sent for AI processing. On supported devices you can also choose on-device AI, which runs entirely on your iPhone so your words never leave it. On-device processing is more private, with the trade-off that it is somewhat less in-depth than the cloud model.
3. Insights, Analytics & Third-Party Services
Your journaling content stays on your device and in your iCloud. Where your device supports Apple Intelligence, AI features run on-device — your words never leave your phone. We work with a small number of service providers, and this is the complete list:
- OpenAI — powers cloud-based AI features such as insights, Echo chat, and dream analysis. Your text is sent to OpenAI only when you use these features with AI enabled, and you can turn it off anytime. OpenAI does not use data sent through its API to train its models, and retains it for at most 30 days for abuse monitoring before deleting it.
- PostHog — product analytics, including purchase events, so we can understand how features are used and improve the app. Analytics never include your journal entries or check-in content.
- Apple — processes App Store purchases, and stores and syncs your data via iCloud (CloudKit) and connects with HealthKit where you've enabled it. Your journal entries are stored with encryption, so only you have access to them.
4. Non-Disclosure of Sensitive Journal Data
We stand firmly in our commitment to safeguard your sensitive journal data. Beyond the service providers listed above, we do not share, sell, or distribute your data to any third parties unless absolutely required by law. Your privacy is our priority.
5. Security
We employ a variety of measures to safeguard your information:
Data Encryption: All data transmitted between you and our services is secured using strong encryption protocols, including Secure Socket Layer (SSL) technology. Apple's CloudKit automatically encrypts all data stored and synced across your devices.
6. Changes to This Privacy Policy
We reserve the right to modify this privacy policy at any time. If we make material changes to this policy, we may notify you here or by means of a notice within the app.
7. Contact Us
If you have any questions regarding this Privacy Policy or the practices of InnerEcho, please contact us.
support@upaway.dev