Privacy Policy

Inner.codes is an audio app published by Ensonova LLC ("Ensonova", "we", "us"). This Privacy Policy explains what the app collects, what it does not, who else receives anything, and what you can turn off. It covers the iOS, macOS and Android versions of the app and no other product or website.

1. The short version

• There is no account. You never create one, and the app never asks for your name, email address or password.
• Your journal entries, goals, vision board images and any audio you record stay on your device.
• We collect anonymous usage analytics through Mixpanel and Google Firebase Analytics so we can see which parts of the app work.
• There is no advertising in the app, and we do not sell your information or share it with data brokers.
• Audio sessions are downloaded from Google Cloud Storage as you need them, which is what keeps the app small.

2. There is no account

Inner.codes has no sign up, no sign in, and no user accounts of any kind. We hold no profile for you, no email address and no password, and there is nothing on a server to log in to. An earlier version of this policy described account creation, account information and account deletion. None of that ever existed in this app, and it has been removed.

For the same reason, the app does not collect contact information, and it has never had access to your location. An earlier version of this policy mentioned location and cookies. Neither applies, and both have been removed.

3. Information stored only on your device

Your journal entries, goals and their progress, vision board images and written affirmations, any audio you record yourself, your listening history, streaks and preferences are all stored on your device. None of that content is transmitted to us or to anyone else. If you delete the app or wipe your device, it is gone.

4. Analytics

We use two analytics services to understand which parts of the app are used and where they fail. Both receive activity about how the app is used, never the content you create in it.

4.1 Mixpanel

Mixpanel acts as a sub processor under contract. It receives events describing app activity, such as starting a session, finishing a day of a program, or completing a purchase, along with the app version and standard device and app context. The first time the app runs it generates a random identifier and stores it on your device; that identifier is sent with each event so events from the same install can be grouped. It is not your name, your email, your Apple ID, your Google account, or an advertising identifier. Reinstalling the app generates a new one and earlier activity is not linked to it.

4.2 Google Firebase Analytics

The app also includes Google Firebase Analytics, which records app activity such as the app being opened and screens being used, along with device and app context and an identifier Firebase generates for the install. Google processes this under its own privacy policy at policies.google.com/privacy. Firebase Analytics is enabled when the app starts. There is no advertising in this app, and we do not use Firebase to build advertising audiences.

4.3 What neither service receives

• The text of any journal entry, affirmation, goal or note you write.
• Vision board images, or any photo or audio you record or add.
• Your name, email address, phone number, postal address, or any contact details.
• Your contacts, calendar, or location.
• Any payment information.

5. Audio downloads

The app ships small and downloads audio sessions as you choose them, from Google Cloud Storage. When a download happens, Google receives the request for that file along with your IP address, in the same way as any request for a file on the internet. We do not attach your analytics identifier to those requests, and the list of what you have downloaded is kept on your device.

6. Permissions the app asks for

Each permission is requested only when you use the feature that needs it, and each can be revoked in your device settings at any time:

• Microphone. Only if you record your own affirmations. Recordings are saved on your device and are never uploaded.
• Photos and camera. Only to add images to your vision board. Those images stay on your device.
• Notifications. Only if you turn on reminders.

The app does not request location or contacts, and it does not read Apple Health or Google Fit.

7. Purchases

Inner.codes is free to download with a set of modules unlocked permanently. An optional in app purchase unlocks the full library. Payment is handled entirely by Apple on the App Store or by Google on Google Play, and those companies are the data controllers of the payment details you give them. We never receive your card number, your billing address, your Apple ID, or your Google account. Your entitlement is stored on your device and restored through the store you bought it from.

8. How long information is kept

Mixpanel analytics events are retained for up to twenty four months and then deleted on a rolling basis. Aggregate statistics derived from them may be kept longer for product planning. Data received by Google through Firebase Analytics and Cloud Storage is retained under Google's own policies, which we do not control. Anything stored on your device stays there until you delete the app or clear its data.

9. Sharing

We share product analytics with Mixpanel, which acts as a sub processor under contract, and with Google through Firebase Analytics. We do not share information with data brokers, and we do not sell information. There is no advertising in the app and no advertising network receives anything from it. If we are required by law, by valid legal process, or to protect our rights or the safety of users, we may disclose information to the extent required.

10. Wellness content, not medical care

Inner.codes offers hypnosis, meditation, affirmation and visualisation audio for general wellbeing. It is not a medical device, not therapy, not a diagnosis, and not a substitute for professional care. It does not collect clinical health data. Do not listen to hypnotic or meditative sessions while driving or operating machinery. If you are being treated for a mental health condition, speak to your clinician before adding this kind of practice. If you are in crisis, contact your local emergency services or a crisis line; in the United States you can dial or text 988.

11. Children

Inner.codes is not directed to children under thirteen. The app has no account system and does not ask for a name, an email address or any other personal information. We do not knowingly collect personal information from children under thirteen within the meaning of the Children's Online Privacy Protection Act or comparable laws elsewhere. If you are a parent or guardian and believe a child has provided personal information we should remove, write to us and we will act promptly.

12. Your choices

• Stop analytics. Deleting the app removes the locally stored identifier and stops all analytics. We do not currently offer an in app analytics switch. We are considering adding one and will update this page if we do.
• Delete your content. Because everything you write and record stays on your device, deleting an entry in the app or deleting the app itself removes it. We hold no copy to delete on your behalf.
• Notifications and permissions. Revoke microphone, photo or notification access at any time in your device settings.

Depending on where you live you may have rights under laws such as the General Data Protection Regulation, the United Kingdom GDPR, or the California Consumer Privacy Act, including rights of access, correction, deletion and objection. Because the only thing we hold that could relate to you is a random per install identifier with no name attached, the practical scope of those rights is limited. You can still send any privacy request to the address in section 15 and we will respond within the time your jurisdiction allows.

13. International transfers

Ensonova LLC is based in the United States. Mixpanel and Google process data in the United States and in other countries where they operate. If you use the app from outside the United States, the information described above will be transferred to and processed in those countries. Where required by law we rely on appropriate transfer mechanisms such as the European Commission's Standard Contractual Clauses.

14. Security

Analytics events and audio downloads are sent over encrypted HTTPS connections. We use commercially reasonable safeguards to protect information against unauthorized access, alteration, disclosure and destruction. No method of transmission over the internet and no method of electronic storage is completely secure, and we cannot guarantee absolute security.

15. Changes and contact

If our practices change we will update this page and the date at the top. Material changes will be highlighted here. For privacy questions or requests, write to Ensonova LLC at support@ensonova.com with the subject line "Inner.codes privacy".