Privacy policy

Inner Compass is published by Hello World Labs Ltd, registered in England and Wales, United Kingdom, company number 17093141. Our registered address is 2 Trelowarren Street, Camborne, England, TR14 8AA.

For privacy questions or requests, email [email protected].

The app stores your answers, suggested and selected reflection profiles, intensity, notes, tags, dates, time zone, drafts, and preferences locally. The journal is encrypted using AES-256-GCM, with its key held in the device’s secure storage. Suggestions and changing app colours are calculated on your device.

The app does not upload reflection content to us or send it to RevenueCat. There is no Inner Compass account, cloud journal sync, journal analytics, or AI interpretation. The app does not read your contacts, microphone, camera, photo library, or GPS location.

Inner Compass is ad-free. Pro is an optional one-time purchase processed by Apple or Google. We do not receive your payment-card or bank-account details.

The intended configured release uses RevenueCat to validate purchases, check access to Pro, restore purchases, and provide purchase reporting. Its SDK creates a pseudonymous app-user identifier without asking you to register. It processes purchase and product identifiers, store receipts or purchase tokens, dates and purchase status, entitlements, and technical app, device, and network information.

Billing checks can happen when the app starts, when you return to it, and during purchase or restore flows, including if you have never bought Pro. Disabling optional SDK diagnostics does not disable this processing. Purchase reporting is separate from your journal: your answers, selected states, intensity, notes, and tags are not included in our RevenueCat calls.

RevenueCat documents that customer records can include transaction country, country inferred from a connection’s IP address, and the time of the last connection. It says it discards the IP address after determining that country. Read its customer-record explanation for details.

The app disables automatic advertising-identifier collection and optional RevenueCat diagnostics. It does not configure an advertising or attribution integration. RevenueCat handles billing information as our service provider; its infrastructure may process it in the United States or other locations described in its terms. See RevenueCat’s privacy policy and data-processing agreement. Store processing is also covered by Apple’s privacy policy and Google’s privacy policy.

Where UK data protection law applies, the intended release uses the following lawful bases for information we receive or our service providers process on our behalf.

Contract: processing necessary to validate a Pro purchase you request, provide its entitlement, or restore that purchase.

Legitimate interests for billing operations: routine access checks, including for people who have not bought Pro, fraud prevention, and limited purchase reporting help us operate the optional paid service, maintain correct access, and understand its purchase performance. These purposes are separate from processing necessary to fulfil a requested purchase. Journal content is not used for them.

Legitimate interests for support: answering enquiries and resolving app, purchase, or privacy requests using the contact and issue details you choose to send.

Legitimate interests for these pages: delivering the support and policy pages and protecting their availability and security using technical request information.

Legal obligations: processing necessary to meet applicable statutory recordkeeping, tax, and data-rights obligations. This applies where a specific obligation requires the processing, rather than to all billing or support information.

You can object to processing based on legitimate interests by contacting us. These bases do not give us access to reflections that stay only on your device.

Optional local reminders request notification permission where required. Their text does not include your reflection profile or journal content. Scheduling uses the device’s time zone and does not need GPS. Change reminders in the app or revoke notification permission in device settings.

Optional app lock uses the operating system’s authentication screen. We do not receive biometric templates or your device passcode. Face ID permission may be requested on supported iOS devices.

You can share a full JSON export or a CSV summary through your device’s share sheet. Exports are readable, unencrypted files containing personal reflection information. The destination you select controls the copies it receives. This release has no import feature, so an export is not an in-app recovery backup.

The app attempts to remove its original temporary export when sharing finishes. Android’s sharing plugin may create a separate cache copy. On a later cold start, the app attempts to remove files at least 24 hours old from its own export/share-cache folders, preserving recent files so transfers can finish. Erasing local data also attempts this cleanup. Cleanup is best effort and can be delayed if the app is interrupted or not opened again. It never removes copies already saved or shared elsewhere.

Local reflections remain until you delete them, erase app data, or the data or encryption key becomes unavailable. Individual entries have a brief undo period. Settings → Erase all my data removes the local journal, drafts, preferences, encryption key, and configured reminders.

Android backup/transfer rules exclude app data. On iOS, the app asks the operating system to exclude its journal folder from backup; this is best effort, not a guarantee about every device backup. The iOS encryption key is device-bound and does not migrate to another device. An encrypted file restored without its key cannot recover your reflections. There is no publisher-operated journal recovery service. Do not rely on backup, reinstall, or moving devices to recover your journal.

Local erasure does not delete RevenueCat or store purchase records, remove store ownership of Pro, or issue a refund. Purchase records are kept separately for access, restoration, support, and applicable obligations. A later purchase validation or restore can create a new billing-provider record. Store records and refunds are handled through the relevant store.

Email [email protected] for requests about billing-provider information. In a configured release, Settings → Privacy information → Show reference can display a Purchase support reference, including if you have never bought Pro. Share it only with support to help locate the correct record. A non-purchaser does not need a receipt. Provider lookup and deletion are handled separately; they are not automatic when local data is erased.

If you contact us, we receive the details you choose to send, such as your email address, message, and purchase reference. Do not send journal content, health information, payment-card details, or store passwords; we do not need or request them. If you send sensitive information anyway, it becomes part of the message we receive. Email and hosting service providers may process support messages on our behalf.

We retain support correspondence only for as long as needed to respond, follow up, handle purchase or privacy requests, and meet applicable legal obligations. We review and delete information that is no longer needed.

Depending on the circumstances, UK data protection law gives you rights to access, correct, erase, restrict, object to processing, or receive portable copies of your personal information. Other applicable privacy laws may provide additional rights. Contact us using the email above. You can also complain to the UK Information Commissioner’s Office or your local privacy regulator. We cannot retrieve a journal that has not been sent to us; you control local reflection content on your device.

This policy concerns the Inner Compass mobile app. Visiting this website, using its contact facilities, and its cookies/analytics are covered separately by the Hello World Labs website privacy policy. Website processing is separate from the app’s local journal; the app has no journal analytics.

Inner Compass is intended for adults aged 18 and over. The app asks you to confirm this but does not ask for your date of birth. Suggestions are reflections on your answers, not a validated measurement of consciousness. Inner Compass is not a medical device and does not diagnose, treat, cure, or prevent a medical condition. Consult a healthcare professional for medical advice, diagnosis, or treatment. Nobody monitors your entries for emergencies.

External links open services with their own privacy practices. We will update this policy when the app’s data practices change. The effective date is identified above.