Privacy Policy

The information we collect depends on how you use InnerRoomSpace. It may include:

• Account information such as your name, email address, authentication details, account ID and account preferences.
• Subscription information such as your plan, subscription status, billing period, Stripe customer or subscription identifiers and usage allowances.
• Profile and onboarding information such as your selected companion, preferences, goals, areas of focus and answers you provide during setup.
• Service activity such as sign-in activity, reply counts, feature usage, progress activity and technical events needed to operate the service.
• Technical information such as browser, device, approximate location derived from network information, request logs and security information processed by our hosting and infrastructure providers.
• Support information such as your name, email address, subject and message when you contact us.

InnerRoomSpace is built around information you choose to add to your personal space. Depending on the features you use, this may include:

• conversation messages and companion replies;
• journal entries and journal sharing preferences;
• memories, photographs, dates, places and people you tag;
• goals, stages, updates and achievements;
• mood and wellbeing check-ins;
• voice recordings or transcripts when you use voice features;
• information about relationships, work, family, habits, confidence, emotions and other parts of your life that you choose to discuss.

You do not need to provide information that you are uncomfortable sharing. Please also take care before adding sensitive information about another person.

We may use personal information to:

• create, authenticate and manage your account;
• provide conversations and companion features;
• connect relevant memories, goals, journal information and previous conversations where you have chosen to make that information available to the feature;
• generate personalised summaries, progress information, reminders, check-ins and continuity across your six companions;
• process subscriptions, billing and usage allowances;
• respond to support requests and feedback;
• protect accounts, prevent abuse, investigate technical problems and maintain service security;
• understand aggregated usage and improve reliability, design and performance;
• comply with legal obligations and establish, exercise or defend legal claims where necessary.

UK data-protection law requires us to have a lawful basis for using personal information. The basis depends on what we are doing.

Some information you choose to share may reveal health information or other information treated as special category dataunder UK data-protection law.

Withdrawing consent does not affect processing that was lawful before withdrawal, but it may mean that certain optional personalisation or memory features can no longer use that information.

InnerRoomSpace is designed so that your six companions can share a continuing understanding of the information you choose to make available. This can include relevant conversation history, memories, goals, personal preferences, important life events and journal information where sharing is enabled.

• Memory is used to improve continuity and avoid making you repeat information unnecessarily.
• Journal entries are only made available to companion features where the relevant sharing control allows this.
• We may create derived information such as topic summaries, progress indicators or context signals to help organise your experience.
• Automated systems may sometimes misunderstand or summarise information imperfectly. You should not treat a stored summary or progress indicator as a clinical assessment.

We use specialist providers to run InnerRoomSpace. They process information only for the services they provide to us and subject to their contractual and legal obligations.

When content is sent through the OpenAI API, it is processed under OpenAI's API/business data terms. OpenAI states that API data is not used to train its models by default unless the API customer explicitly opts in.

Some of our service providers operate internationally, so personal information may be processed outside the United Kingdom.

Where data-protection law requires safeguards for an international transfer, we use an appropriate lawful transfer mechanism, which may include UK adequacy regulations or approved contractual safeguards.

InnerRoomSpace uses limited browser storage where it is needed for the service to work properly. This can include authentication/session information and local or session storage used to remember preferences, dismissals or choices such as whether a particular popup should be shown again.

We do not currently use advertising cookies through Vercel Web Analytics. If we introduce optional analytics, advertising or other non-essential tracking that requires consent, we will update our notices and consent controls before using it.

We keep personal information only for as long as reasonably necessary for the purpose it was collected, taking account of account status, legal obligations, security, disputes, backups and the type of information involved.

• Account and personal-space information is generally kept while your account remains active and is removed or anonymised following account deletion, subject to lawful backup or retention requirements.
• User-created content is normally kept until you delete it, delete your account or it is otherwise removed under our retention process.
• Billing and transaction records may be retained for longer where required for tax, accounting, fraud prevention or legal obligations.
• Support correspondence may be kept for a reasonable period so we can resolve issues, maintain an appropriate record and deal with follow-up questions.
• Security and technical logs are kept for limited periods determined by security, troubleshooting and provider requirements.

Deletion may not remove information instantly from encrypted backups. Backup copies are protected and are removed as they rotate out of our normal backup cycle, unless longer retention is legally required.

We use technical and organisational safeguards intended to protect personal information against unauthorised access, loss, misuse or alteration.

• authenticated account access and session controls;
• database access controls, including row-level security intended to separate one user's private records from another user's;
• encrypted network connections where supported;
• restricted server-side access to sensitive service credentials and payment keys;
• monitoring, backups and operational controls designed to support service reliability and incident response.

No internet service can guarantee absolute security. Please use a strong password, protect access to your device and contact us promptly if you believe somebody has accessed your account without permission.

Depending on the circumstances and the lawful basis we rely on, UK data-protection law may give you rights to:

• ask for a copy of personal information we hold about you;
• ask us to correct inaccurate or incomplete information;
• ask us to erase personal information in certain circumstances;
• ask us to restrict how information is used;
• object to certain processing;
• receive certain information in a portable format where the right to data portability applies;
• withdraw consent at any time where consent is the basis for processing.

To exercise a privacy right, email support@innerroomspace.com. We may need to verify your identity before acting on a request.

We may send service emails that are necessary to run your account, such as email verification, password reset, payment, security and important service notices.

If you join an early-access list or choose to receive promotional or launch updates, we use your email address for that purpose. Where consent is required, you can withdraw it or unsubscribe at any time. Service messages that are necessary for your account may still be sent.

InnerRoomSpace uses automated systems to generate companion responses, summaries, memory/context signals, progress information and other personalised features.

These features are designed to support your experience; they are not used to make solely automated decisions about you that produce legal or similarly significant effects. Personal growth or wellbeing indicators should not be treated as medical or clinical assessments.

InnerRoomSpace is intended for adults aged 18 and over. We do not knowingly offer paid accounts to children. If we become aware that an account has been created in breach of the age requirement, we may restrict or close the account and take appropriate steps in relation to the information held.

We may update this Privacy Policy when the service, our providers, our data practices or legal requirements change.

Where a change materially affects how we use personal information, we will take reasonable steps to bring it to your attention before the new use begins where required. The date at the top of this page shows when the policy was last updated.

If you have a question about privacy, want to exercise a data protection right or have a concern about how your information is handled, contact us first and we will try to resolve it.

You also have the right to raise a complaint with the UK Information Commissioner's Office (ICO) if you are unhappy with how your personal information has been handled.

InnerRoomSpace is operated by PIERI VENTURES LTD. For data-protection purposes, PIERI VENTURES LTD is responsible for deciding how and why personal information is processed through the InnerRoomSpace service.