INNER STUDIO APP

Privacy Policy

PRIVACY POLICY

Last updated: 14 September 2026

This Privacy Policy explains how Inner Studio collects, uses, shares, stores, and protects personal data when you use the Inner Studio mobile application (the App), and the choices and rights available to you.

1. Who is responsible for your data?

Inner Studio is operated by Daya Rani Singh, a business registered in Belgium (the Controller, we, us, or our).

• Registered business address: Westkantstraat 39, 8020 Ruddervoorde, Belgium • KBO/BCE enterprise number: 0691.957.517
• VAT number: BE 0691.957.517
• Privacy contact: innerstudioapp@gmail.com

2. Personal data we collect

2.1 Account and profile data

• Your name and email address.
• An optional profile photo.
• Authentication information processed through Supabase and, if you choose that option, Google Sign-In.

2.2 Private content you create

Depending on how you use the App, this may include somatic journal entries; 34 Senses reflections; nervous-system state selections; Solo Session, Writing Tool, and Performance Tool responses; and Resource Library names, categories, notes, and photos. This content is intended to remain private to your account unless the App clearly asks you to share it.

2.3 Community data

This may include posts, creative wins, prompt responses, comments or reactions, connection requests, reports, and the audience or visibility setting you choose. Content shared in the Community is visible to other users according to the selected setting. Other users may save or capture content that you share, so do not post information you want to keep private.

2.4 Wellness-related data

Some entries may reveal information about your emotional or physiological state and may, depending on their content, constitute health-related or other sensitive personal data. You choose whether to provide this information. Where applicable, we rely on your explicit consent to process it for the requested reflective or creative feature. You may withdraw that consent by deleting the relevant content or your account, or by contacting us. Withdrawal does not affect processing that was lawful before withdrawal.

2.5 Subscription data

Apple or Google processes your payment. We do not receive or store full payment-card details. We may receive subscription status (such as trial, active, expired, or cancelled), the subscription product, renewal or expiry information, and a transaction reference needed to provide access and resolve purchase issues.

2.6 Device, notification, and preference data

  • A push-notification token and basic platform information, used through Firebase Cloud Messaging when you enable notifications.

  • ATMOS sound-mix volume settings and Learn & Grow onboarding/progress information, which the current version of the App stores locally on your device.

  • Limited technical and security information generated when you connect to the service, such as timestamps, identifiers, and logs needed to operate and protect the App.

Purpose

  • Create and administer your account; provide requested App features; maintain subscription access

  • Store and display content you intentionally submit or share

  • Send optional push notifications

  • Secure the App, prevent abuse, moderate Community content, and diagnose service problems

  • Maintain legally required financial or transaction records and respond to lawful requests

Legal basis

  • Performance of our contract with you

  • Contract; and explicit consent where content constitutes sensitive data

  • Consent, which you can withdraw in device settings

  • Our legitimate interests in a safe and reliable service

  • Compliance with legal obligations

We do not sell your personal data or use private journal content for advertising.

4. When we share personal data

We share personal data only as needed to operate the App, comply with law, protect users, or complete a business transfer. Current service providers include:

• Supabase - database, authentication, and file storage.
• Firebase Cloud Messaging (Google) - push-notification delivery.
• Apple App Store and Google Play - payments, subscriptions, and purchase verification. • Google Sign-In - optional authentication.

These providers act under their own terms and privacy notices and, where applicable, as our processors under contractual data-protection obligations. We may also disclose information when legally required, to protect rights or safety, or in connection with a merger, sale, or transfer, subject to appropriate safeguards.

5. International transfers

Some providers may process data outside Belgium or the European Economic Area. Where GDPR requires it, we use an approved transfer mechanism, such as an adequacy decision or the European Commission's Standard Contractual Clauses, together with supplementary safeguards where appropriate. Contact us for more information about the safeguards relevant to your data.

6. How long we keep data

  • Account and private App content: while your account remains active, unless you delete specific content sooner.

  • Community content: until you delete it, your account is deleted, or it is removed through moderation. Limited copies may remain where another user has independently saved or reposted content.

• Push tokens: until notifications are disabled, the token expires, or the account is deleted.

• Technical/security logs: only for the period reasonably needed for security, troubleshooting, and legal compliance.

• Transaction and legal records: for the period required by applicable tax, accounting, or other law.

You can initiate account deletion inside the App. You may also contact innerstudioapp@gmail.com. After verifying the request where necessary, we aim to delete or anonymise associated personal data within 30 days, except for information that must be retained by law or briefly remains in protected backups. Backup copies are isolated from ordinary use and removed according to the applicable backup cycle.

7. Security

We use reasonable technical and organisational measures designed to protect personal data. No method of storage or transmission is completely secure, and we cannot guarantee absolute security. Protect your login credentials and contact us if you believe your account has been compromised.

8. Your data-protection rights

Subject to applicable law, you may have the right to access, correct, erase, or receive a copy of your personal data; restrict or object to certain processing; withdraw consent; and lodge a complaint with a supervisory authority. Where processing is based on legitimate interests, you may object based on your particular situation. Where processing is based on consent, you may withdraw it at any time.

To exercise a right, email innerstudioapp@gmail.com. We may ask for information needed to verify your identity. You also have the right to complain to the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorite de protection des donnees) or the supervisory authority where you live or work.

9. Age requirement

Inner Studio is intended only for people aged 16 or older. We do not knowingly collect personal data from anyone under 16. If you believe a person under 16 has created an account, contact us so we can investigate and delete the account where appropriate.

10. Changes to this Privacy Policy

We may update this Policy when the App, our practices, or the law changes. We will post the updated version and revise the date above. If a change materially affects your rights, we will provide appropriate notice in the App or by email before it takes effect where required.

11. Contact

Daya Rani Singh
Westkantstraat 39, 8020 Ruddervoorde, Belgium KBO/BCE: 0691.957.517 | VAT: BE 0691.957.517 Email: innerstudioapp@gmail.com