Privacy Policy

1. Who We Are

InnerStatesTherapy.com is a UK-based business providing therapeutic tools and resources, including our Inner States app. For the purposes of the UK GDPR and Data Protection Act 2018, we are the data controller.

2. What Data We Collect

We may collect the following types of personal data:

• • Name, email address, and login credentials
• • Usage data, such as pages visited, features used, and time spent
• • Device information (IP address, browser type, operating system)
• • Subscription and payment status (processed securely via third parties)

3. How We Use Your Data

We only use your data to:

• • Provide and maintain our services
• • Improve app functionality and performance
• • Communicate with you (e.g. account updates, support)
• • Process payments and subscription access
• • Monitor usage for analytics and bug-fixing (non-identifiable)

4. Sensitive Information & Clinical Data

We do not collect or store any personally identifiable clinical records. Users must not input data that identifies clients or patients directly or indirectly. This is your responsibility under data protection laws. The app is a tool for reflection and visual exploration — it is not a medical records system.

5. How We Store & Protect Your Data

We use secure servers and industry-standard encryption and firewalls. However, no method of transmission is 100% secure. We cannot guarantee absolute security and you accept this risk when using our services.

6. Sharing Your Data

We do not sell or rent your data. Your data may be shared with:

• • Service providers (e.g. payment processors) under strict data handling terms
• • Legal authorities if required by law

7. Cookies & Tracking

We use cookies and similar technologies for analytics and to improve user experience. You can control cookies via your browser settings.

8. Your Rights (UK & EU)

You have the right to:

• • Access, correct, or delete your personal data
• • Restrict or object to data processing
• • Complain to the Information Commissioner's Office (ICO) if you're in the UK

To exercise any of your rights, contact us at: support@innerstatestherapy.com

9. Data Retention

We retain your data only as long as necessary to deliver the service and comply with legal obligations. Deleted accounts are purged after a set period.

10. International Users

By using our Services outside the UK, you agree to your data being transferred and processed in the UK in accordance with UK data protection laws.

11. Children's Privacy

Our services are not intended for users under 16. We do not knowingly collect data from minors.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we'll update the "Effective Date" and notify users where appropriate.