Draft version 2026-08-v1
Inside+ is an emotional journaling app. This page explains what information we collect, why, and what you can do about it.
Inside+ is operated by [legal entity name, address, VAT/tax ID]. You can reach us at [contact email] for anything related to your data or this policy.
| Data | What it is |
|---|---|
| Account details | Email, name, hashed password, chosen language, timezone, notification preferences. |
| Diary entries | The specific emotion words you log, when, and any intensity or notes you add. |
| Trasforma reflections | Answers to reflection questions, if you choose to save them, and whether you've opted to share them with a coach. |
| Free-text AI suggestions | If you describe how you feel in your own words to get word suggestions, that text is sent to our AI provider (Anthropic) to generate suggestions, and logged completely anonymously, with no link back to your account — not even we can trace it to you. |
| Usage behavior | Which categories you explore or start working through, and how often you use the free-text AI suggestion feature (to apply a daily limit) — never the content of what you wrote. |
| Optional profile info | Age range, country, and how you found Inside+, only if you choose to share them. |
| Push notification data | If you enable notifications, a device subscription identifier (no content). |
| Donations | If you donate, payment is handled entirely by Stripe — we never see or store your card details. |
We use a small number of service providers to run Inside+. None of them are permitted to use your data for their own purposes.
| Provider | What they do |
|---|---|
| Neon | Hosts our database (where your account and entries are stored). |
| Vercel | Hosts the app and its backend. |
| Anthropic | Powers the free-text AI suggestion feature. Only the text you type for that specific feature is sent, anonymously. |
| Resend | Sends transactional emails (welcome, password reset, weekly recaps). |
| Stripe | Processes donations, if you make one. Stripe's own privacy policy governs payment data. |
Some of these providers may process data on servers outside the European Economic Area. Where that happens, it's covered by their own standard contractual clauses or equivalent safeguards. [confirm specifics with legal review]
We keep your data for as long as your account exists. If you'd like your account and data deleted, contact us at [contact email] and we'll take care of it. [confirm exact retention/deletion process and timeline]
Under GDPR, you have the right to access, correct, delete, export, or restrict the use of your data, and to withdraw consent at any time. You also have the right to lodge a complaint with your national data protection authority (in Italy, the Garante per la Protezione dei Dati Personali).
We use a single essential cookie to keep you logged in. We don't use advertising or tracking cookies.
Inside+ is not intended for children under [confirm minimum age — varies by country under GDPR, e.g. 14 in Italy].
If we make meaningful changes to this policy, we'll update the date at the top and, where required, ask for renewed consent.
[contact email]