Privacy Policy
1. Who we are
Inly is a product of [Logos legal entity name] (“Logos”, “we”, “us”), located at [registered address]. This Privacy Policy explains how we handle personal information when you use the Inly mobile app, the website at myinly.com, and related services (together, the “Services”).
For purposes of EU/UK data protection law, Logos is the controller of your personal data.
2. What we collect
Information you give us
- Account details: email address, name or nickname, and sign-in identifiers (for example, Sign in with Apple).
- Conversations: the messages you type and the voice recordings you make when talking to Inly, and their transcripts.
- Self Map content: the values, principles, beliefs, habits, goals, notes, and insights that you save or confirm.
- Onboarding answers: optional information such as age range, preferred tone, and what you'd like help with.
- Sign-up and support: your email address when you sign up, and anything you send to support.
Information collected automatically
- Device and usage data: device type, operating system, app version, language, time zone, crash logs, and how you use features (for example, which screens you open).
- Website data: basic analytics such as pages visited and referring source. See Cookies & analytics.
Information from others
- Payments: our payment provider (for web purchases) and Apple (for App Store purchases) tell us whether your payment succeeded and your subscription is active. We never receive or store your full card number.
3. How we use your information
| Purpose | Legal basis (EU/UK) |
|---|---|
| Provide the Services: hold conversations, transcribe voice, build and update your Self Map, generate insights | Contract; explicit consent for sensitive data |
| Personalize Inly to you (tone, context, what it remembers) | Contract |
| Manage your account and subscription | Contract |
| Keep Inly safe: detect misuse and show crisis resources when a conversation suggests someone may be at risk | Legitimate interests; vital interests |
| Improve reliability and features using aggregated or de-identified usage data | Legitimate interests |
| Send service messages and, if you opt in, product updates | Contract; consent |
| Comply with law and enforce our Terms | Legal obligation; legitimate interests |
4. AI processing
Inly uses artificial intelligence to understand what you say and respond. To do this, relevant parts of your conversation and Self Map are sent securely to our AI and speech service providers, which process them on our behalf to generate a response or transcript.
- Our providers are contractually required to use your data only to provide the service to us, and not to train their own models on it.
- We do not use your conversations to train AI models without your explicit, opt-in permission.
- AI can make mistakes. Inly's insights are reflections to consider, not facts, diagnoses, or professional advice.
5. Who we share it with
We share personal information only with:
- Service providers who help us run Inly: cloud hosting and databases, AI and speech-to-text/text-to-speech providers, analytics and crash reporting, email delivery, and customer support tools. They may use your data only on our instructions.
- Payment providers: our web payment processor and Apple, to process subscriptions.
- Authorities, when required by law or to protect someone's safety.
- A successor, if Logos is involved in a merger, acquisition, or sale of assets, in which case this policy will continue to protect your data, and we will notify you.
A current list of our key sub-processors is available on request at [email protected].
6. What we never do
- We never sell or rent your personal information.
- We never use your conversations or Self Map for advertising or share them with advertisers.
- We never let people at Logos read your conversations, except when you ask us to (for example, in a support request), when needed to investigate abuse or a security issue, or when the law requires it.
7. How long we keep it
- Conversations and Self Map: for as long as your account is active, until you delete them.
- Voice recordings: deleted after they are transcribed, unless you choose to keep them.
- Deleted accounts: your data is removed from our active systems within 30 days and from backups within 90 days.
- Sign-up emails (if you don't subscribe): up to 12 months, or until you unsubscribe.
- Legal records: only as long as required by law.
8. Security
We protect your data with encryption in transit (TLS) and at rest, strict access controls, and the principle of least privilege. No system is perfectly secure, but we work hard to protect your information and will notify you and the relevant authorities of a data breach as required by law.
9. Your rights & choices
- Access & export: download a copy of your Self Map and conversations.
- Correct: edit anything on your Self Map, anytime.
- Delete: delete individual entries, conversations, or your entire account from the app settings.
- Withdraw consent: stop processing of sensitive data by deleting it or your account.
- Marketing: unsubscribe from emails with one click.
You can also email [email protected]. We respond within 30 days (or sooner where required) and will not discriminate against you for exercising your rights.
10. US state & EU/UK rights
United States
Depending on where you live (for example, California, Colorado, Connecticut, Virginia, Washington, or Nevada), you may have the right to know, access, correct, delete, and port your personal information, and to opt out of its “sale”, “sharing”, or use for targeted advertising. We do not sell or share personal information for targeted advertising. Where state law treats information about your emotional or mental state as consumer health data or sensitive data, we collect and use it only with your consent and only to provide the Services. You may appeal any decision we make about your request by replying to our response.
EU, EEA & UK
You have the right to access, rectify, erase, restrict, and port your data, to object to processing based on legitimate interests, and to withdraw consent at any time. You may also lodge a complaint with your local data protection authority.
11. Children
Inly is intended for adults aged 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with information, contact us and we will delete it.
12. International transfers
We and our providers may process data in the United States and other countries. When we transfer personal data from the EU, EEA, or UK, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses.
13. Cookies & analytics
Our website uses only the cookies and similar technologies needed to run it, plus privacy-friendly analytics to understand how visitors find us. Where required, we ask for your consent first. The Inly app does not use third-party advertising trackers.
14. Changes to this policy
We may update this policy as Inly evolves. If we make material changes, we'll notify you in the app or by email before they take effect. The “Last updated” date shows when it last changed.
15. Contact us
Questions or requests? Email [email protected] or write to [Logos legal entity name], [registered address].