Privacy Policy

Last updated: February 3, 2026.
‍
This Privacy Policy explains how Inner Child (the “App”) collects, uses, shares, and protects information. When we say “we”, “us”, or “our”, we mean the operators of the App.

‍

Age Requirement (18+)

The App is intended for adults. It is not intended for children or anyone under the age of 18.

We do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has provided personal information, contact us at admin@healyourinnerchild.app and we will take steps to delete it.

Information We Collect

Information you provide
  • Account information: email address and name (if provided). If you sign up with email/password, we ask for a name. If you sign in with Apple or Google, we may receive a display name (or none).
  • User-generated content: journal entries you write in the App.
  • Support requests: information you include when you contact us (for example, in an email requesting account deletion).
Information collected automatically
  • Usage and interaction data: app feature usage, screen views, button taps, and related interaction events.
  • Device/app information: device identifiers, app version, OS version, language/region, and similar technical data.
  • Diagnostics: crash reports and error logs.
Information related to wellness features
  • Program progress: sessions started/completed and playback position.
  • Mood ratings: “before” and “after” mood ratings for programs.
  • Quiz result: your “core wound” selection/result used to personalize the experience.
Purchases and subscriptions
  • Subscription/purchase status: entitlement status and purchase-related metadata needed to provide premium access (handled via our payments/subscription providers).

How We Use Information

We use information to:

  • Provide and operate the App (authentication, content playback, journaling, progress tracking, and mood journey features).
  • Personalize your experience (for example, showing content related to your quiz result).
  • Process purchases and manage subscription access.
  • Maintain security, prevent abuse, and troubleshoot issues.
  • Analyze usage to improve features and performance.
  • Communicate with you, including onboarding/updates and responding to support requests.

Journal Encryption (Important)

Journal entry text is encrypted on your device before it is stored.

  • The App encrypts journal text locally using AES-GCM.
  • The encryption key is stored in the iOS Keychain. The App attempts to store the key in iCloud Keychain when available; otherwise, it stores a device-only key.
  • We store the encrypted journal text (ciphertext) in our database. This means we are generally not able to read the content of your journal entries in plaintext.
  • If you lose the encryption key (for example, due to device reset or uninstall without key restoration), some encrypted entries may become unreadable. Because the encryption key relies on the device's keychain, the user is responsible for key backup and restoration via services like iCloud Keychain. If the key is permanently lost, the encrypted journal text stored in our database may become permanently unreadable.

‍
How We Share Information

We share information with service providers who help us run the App. They may process information on our behalf in accordance with their own terms and this Privacy Policy.

Service providers we use
  • Firebase (Google)
    • Authentication (sign-in), database storage (Account information, Program progress, Encrypted journal text), and analytics.
  • RevenueCat
    • Subscription/paywall functionality and entitlement management (Subscription/purchase status).
  • Amplitude
    • Product analytics (Usage and interaction data). We also use Session Replay; sensitive areas (including journal text) are masked in replays.
  • LogRocket
    • Session replay/debugging to diagnose issues. Journal text input is redacted.
  • Sentry
    • Crash reporting and error diagnostics (Diagnostics).
  • MailerLite
    • Email communications (Account information (email)). New users are automatically subscribed when an account is created. You can unsubscribe using the link in any email we send.
  • Webflow
    • Content source for in-app blog posts (retrieved server-side and delivered to the App).
Legal or safety reasons

We may disclose information if we believe it is reasonably necessary to:

  • Comply with law, regulation, legal process, or governmental request.
  • Protect the rights, property, and safety of our users, us, or others.
  • Detect, prevent, or address fraud, security, or technical issues.

‍

Data Storage and Retention

  • Account and app data (such as progress, mood history, quiz result, and encrypted journal entries) is stored in our backend database.
  • On-device data: some information is stored locally on your device (for example, an 18+ confirmation flag and other app preferences).
  • We retain information for as long as needed to provide the App and for legitimate business purposes (such as security, debugging, and legal compliance). If you request deletion, we will delete information as described below, subject to limited exceptions (for example, legal requirements or backups).

‍

Your Choices and Rights

Account deletion requests

You can request deletion of your account and associated data by emailing admin@healyourinnerchild.app. The App also provides an in-app email request option that opens your email client and includes your account identifiers to help us locate your data.

When we process an account deletion request, we will take steps to delete:

  • your authentication account,
  • your user profile data (email/name stored in our database, if provided),
  • your progress and mood history records,
  • your journal entry records (including encrypted journal text stored as ciphertext),
  • and related internal identifiers where feasible.

Some third parties (for example, analytics, crash reporting, subscription providers, and email providers) may retain information according to their own retention policies. Where supported, we will also take steps to delete or de-identify data in those systems when reasonably possible.

Marketing emails

If you receive marketing emails from us, you can unsubscribe using the link in the email.

Analytics and diagnostics

Some analytics and diagnostic collection may be limited through your device settings (where supported). We may still collect essential diagnostics necessary to keep the App secure and functioning.

Security

We use administrative, technical, and organizational measures designed to protect information. However, no security measure is perfect, and we cannot guarantee absolute security.

International Data Transfers

Our service providers may process information in countries other than where you live. These countries may have different data protection laws.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will update the “Last updated” date above and may provide additional notice in the App where appropriate.

Contact Us

For questions, privacy requests, or account deletion requests, contact:

‍