Innerbrook Privacy Policy

DRAFT – review by a qualified lawyer before publishing. This draft describes how the Innerbrook app and server work as of 11 November 2026. It is not legal advice. Anything in [SQUARE BRACKETS] must be filled in or decided. Remove every "Drafting note" box and the "Sources" section at the end before you publish.

Effective date: [EFFECTIVE DATE]
Last updated: [LAST UPDATED DATE]
Version: Draft 0.1

The short version

• Innerbrook has no accounts. We don't ask for your name, email address or phone number to use the app.
• What you save stays on your phone. Your memories, next steps, check-ins and settings are stored only on your device. You can delete them at any time with Forget everything.
• To reply to you, your words have to leave your phone. The text of your conversation is sent to the Innerbrook server and on to Anthropic (the company that makes the Claude AI) to write a reply and run a safety check. The Innerbrook server does not save your conversation. Anthropic deletes it within 30 days and does not use it to train its AI.
• Your voice is turned into text by your phone, using Apple's or Google's speech service. Innerbrook receives the text, never your audio.
• No ads, no analytics, no selling of data. We don't use advertising or tracking tools, and we never sell or rent your information.
• Innerbrook is for adults (18+) only. It is not a therapist, a medical service or an emergency service.

The rest of this policy explains each point in detail.

1. Who we are

Innerbrook is provided by [COMPANY LEGAL NAME], [a private limited company incorporated in India with CIN [CIN]], with its registered office at [REGISTERED ADDRESS] ("Innerbrook", "we", "us").

For India's Digital Personal Data Protection Act, 2023 ("DPDP Act"), we are the Data Fiduciary for the personal data described in this policy. Under the EU and UK General Data Protection Regulation ("GDPR"), where it applies, we are the controller.

2. Who can use Innerbrook

Innerbrook is only for people aged 18 or over. We do not knowingly allow children to use it. If you are under 18, please don't use Innerbrook. You can reach Tele-MANAS on 14416 (free, 24×7) to talk to a trained counsellor. See section 13.

3. What Innerbrook is, in privacy terms

Innerbrook is a voice-first support companion. You tap the circle and talk (or type). Innerbrook listens, replies in a calm voice and can help you calm down, understand a feeling or plan one small next step.

It works like this:

1. Your phone turns your speech into text (using Apple's or Google's speech service).
2. The Innerbrook app sends that text to the Innerbrook server.
3. The Innerbrook server passes it to Anthropic's Claude AI, which writes a reply and runs a safety check.
4. The reply comes back to your phone and is read aloud: either by a voice that runs on the Innerbrook server, or by your phone's own voice.
5. When you finish, Innerbrook can suggest a short summary, a next step and things to remember. Nothing is remembered unless you choose to save it, and anything you save is stored only on your phone.

4. What information is involved

4.1 Information that stays on your phone

These are stored in the app's private storage on your device. They are not sent to us for storage and we cannot see them.

The conversation itself is not saved. While you're talking, the conversation is held in the app's memory so Innerbrook can follow it. It is cleared when you finish the conversation or close the app.

Backups. Innerbrook turns off Android's automatic app backup, so this information is not copied into your Google account backup. On iPhone, the storage Innerbrook uses is excluded from iCloud and computer backups.

4.2 Information sent to the Innerbrook server when you talk

Each time you send a message, the app sends the Innerbrook server:

• the text of the conversation so far (your messages and Innerbrook's replies);
• the mode you picked (Just listen, Untangle a feeling, Calm my body or Find a next step);
• your language (English, Hindi or Hinglish); and
• the memories you have saved, so Innerbrook can use them naturally in its reply.

When you tap I'm done for now, the app sends the conversation, your language and your saved memories once more, so Innerbrook can suggest a short summary, a next step and things you might want to remember. These suggestions come back to your phone. Nothing is kept unless you choose to save it.

What the Innerbrook server does with it: it passes the information to Anthropic (section 4.3), sends the reply back to your phone, and then discards it. The Innerbrook server does not store your conversations or memories. It doesn't write them to a database or file, and it is designed not to write them to its logs. The only exception is a single reply that you choose to report (section 4.9).

4.3 Information processed by Anthropic (the AI)

The Innerbrook server sends the conversation, mode, language and saved memories to Anthropic, PBC through its commercial Claude API. Anthropic uses it to:

• write Innerbrook's reply (if the AI declines to answer, Anthropic may automatically retry the same request on another of its own models);
• run a safety check on the most recent part of the conversation (section 4.4); and
• write the end-of-conversation summary and suggestions (section 4.2).

Under Anthropic's commercial terms, Anthropic may not train its AI models on this content (Anthropic Commercial Terms). Anthropic deletes API inputs and outputs within 30 days. If its automated trust and safety systems flag a conversation as a possible breach of its Usage Policy, Anthropic may keep that conversation for up to 2 years and its safety classification scores for up to 7 years (Anthropic: how long do you store my organization's data?). Anthropic may also keep data where the law requires it (Anthropic: API and data retention).

Anthropic processes this data on our behalf (as our Data Processor under the DPDP Act, and our processor under the GDPR) under its Data Processing Addendum (Anthropic DPA).

4.4 Safety checks (crisis detection)

Innerbrook checks every message for signs that you might be in danger, in two ways:

1. A word check on your phone and on the Innerbrook server looks for phrases linked to suicide or self-harm, in English, Hindi and Hinglish.
2. An AI safety check by Anthropic reviews the last few messages and rates the risk as "none", "concern" or "crisis".

If either check finds a possible risk, Innerbrook shows you helpline numbers (such as Tele-MANAS 14416 and emergency 112). If the word check finds one, the AI is also told to focus on your safety in its reply.

What the safety check does not do:

• It does not alert anyone. Innerbrook does not contact the police, emergency services, your family or anyone else. Nobody at Innerbrook is watching conversations.
• It is not saved. The result is used only to decide what to show on your screen at that moment.
• It can be wrong. It may miss signs of danger or show the helplines when you don't need them. If you are in danger, call 112 (India) or your local emergency number.

This is an automated process, but it only decides whether to show you safety information. It does not make decisions that have legal or similarly significant effects on you.

4.5 Innerbrook's voice (text-to-speech)

If "Read replies aloud" is on, Innerbrook speaks its replies. Only Innerbrook's own reply text is used for this. Your words and your voice are never sent for voice synthesis.

• Natural voice on the Innerbrook server (default): each reply sentence (with the part of the reply just before it, for natural flow) is sent to the Innerbrook server, which creates the audio on its own computer using an open-source voice (Kokoro). This text does not leave our server. The link to each audio clip is encrypted and expires after 5 minutes, and your phone may keep the audio clip for up to 5 minutes so it can play it. Hindi and Hinglish replies currently use your phone's voice instead.
• Your phone's voice: if you turn off "Natural voice", or the natural voice isn't available, your phone's built-in voice reads the reply on your device.
• [OPTIONAL — include only if enabled] Third-party voice provider: we may use [ElevenLabs Inc. / OpenAI, L.L.C.] to create the natural voice. In that case, each reply sentence (and up to 300 characters of the reply just before it) is sent to that provider, which keeps it under [its terms: link]. [Describe its retention and training terms.]

4.6 Speech recognition (turning your voice into text)

When you tap the circle, your phone's operating system turns your speech into text:

• iPhone: Apple's speech recognition. Depending on your device, language and settings, this may happen on the phone, or your audio may be sent to Apple to be processed. Apple handles this under its own privacy policy (Apple: Siri, Dictation & Privacy).
• Android: your phone's speech service, usually Google's. Depending on your device and settings, audio may be processed on the phone or sent to Google, under Google's privacy policy (Google Privacy Policy).

Innerbrook only receives the resulting text. It never receives, records or stores your audio. If you'd rather not use speech recognition, you can type instead.

4.7 Microphone

Innerbrook asks for permission to use your microphone and speech recognition. It listens only after you tap the circle, and stops when you finish, tap again, or tap Cancel. Hands-free is on by default: after Innerbrook finishes a spoken reply to something you said aloud, it starts listening again. The circle shows when it is listening. You can turn Hands-free off in Settings, and you can turn off microphone access at any time in your phone's settings.

4.8 Technical information

When your phone connects to the Innerbrook server, some technical information is sent automatically, as with any internet service: your IP address, the date and time, the address of the request (for example /api/chat), and basic device and app information (such as the operating system). Our hosting provider records this in technical logs to keep the service running and secure and because Indian law requires such logs to be kept (section 9). These logs do not contain the content of your conversations. If something goes wrong, the server may also log a short error description, which we design not to include your messages.

4.9 When you report a reply

Next to each of Innerbrook's replies there is a Report option, for replies that seem harmful, wrong or offensive. If you send a report, the app sends us the text of that one reply, the reason you picked and any note you write, and your app language. The Innerbrook server stores this, with the date and time, so we can review it and make Innerbrook safer. A report does not include your own messages, and we don't attach your IP address or any other identifier to it, so we can't link a report to you. Please don't write personal details in the note. We keep reports for [REPORT RETENTION PERIOD, e.g. 90 days] and then delete them.

4.10 When you contact us

If you email us, we receive your email address and whatever you write. We use it only to reply and to deal with your request or complaint.

4.11 What we don't collect

• No accounts, names, email addresses or phone numbers (unless you email us).
• No contacts, photos, location or advertising IDs.
• No analytics, advertising or tracking tools, and no tracking across other apps or websites.
• No recordings of your voice.
• We never sell or rent your information, and we never use it for advertising.

5. Why we use your information, and our legal basis

You give consent when you confirm you are 18 or over and tap [I agree] on the first screen of the app, after seeing a short notice explaining what is sent to Anthropic. You can withdraw consent at any time (section 11).

6. Your mental-health information

What you tell Innerbrook may be about your mental health, relationships or other private matters. Indian law treats information about a person's "physical, physiological and mental health condition" as sensitive personal data (SPDI Rules, 2011, rule 3), and the GDPR treats health information as a special category of data. We handle it with extra care:

• We collect only what is needed to reply to you, and we don't store conversations on our servers (only a reply you choose to report, without anything that identifies you).
• Your saved memories stay on your phone.
• Nobody at Innerbrook reads your conversations. We don't store them, so our team has nothing to read later, and we don't monitor conversations live.
• We never use your information for advertising and never sell it.
• Anthropic may review content that its automated systems flag for possible misuse of its service, as described in section 4.3.

Please think about what you share. Innerbrook doesn't need the names of other people or identifying details to help you.

7. Who we share information with

We share information only with the service providers that make Innerbrook work. They process it on our instructions and under contracts that require them to protect it.

Apple and Google provide speech recognition (and your phone's built-in voice) as part of your phone's operating system. They process your audio under their own privacy policies, not on our behalf (section 4.6).

We may also disclose information:

• when the law requires it, for example under a valid order from a court or a government agency authorised by law. Because we don't store conversations, in practice we only hold technical logs;
• to protect someone's life or safety, where the law allows; and
• if Innerbrook is reorganised, merged or sold, to the new owner, who must keep protecting your information as this policy describes. We will tell you in the app before this happens.

8. Information sent outside India

The text of your conversation is processed by Anthropic, a US company. Anthropic's stored data is held in the United States, and by default its AI may run in any of its available regions (Anthropic: data residency). This means your information is transferred outside India.

• India: the DPDP Act allows transfers outside India except to countries the Government restricts by notification (s. 16). We will follow any such restriction. Under the current SPDI Rules (rule 7), we transfer information only to providers who give the same level of protection, and only because it is needed to provide Innerbrook to you and you have consented.
• EU/UK (if applicable): Anthropic's Data Processing Addendum includes the EU Standard Contractual Clauses and the UK Addendum (Anthropic DPA).

[We plan to move processing to providers located in India when this becomes available, and will update this policy when we do.]

9. How long we keep information

10. How we protect your information

• No central store of conversations. The Innerbrook server is designed to keep nothing, so there is no database of conversations to lose.
• Encryption in transit. The app connects to the Innerbrook server over HTTPS, and the server connects to Anthropic over HTTPS.
• Encrypted, short-lived voice links. Reply text inside voice links is encrypted (AES-256-GCM) and expires after 5 minutes, so it never appears in a web address or log in readable form.
• Limited access. Only [authorised staff] can access our servers and keys, using [two-factor authentication].
• Contracts with providers that require them to keep data secure.
• [Documented security practices] in line with the SPDI Rules (rule 8) and, from May 2027, DPDP Rules rule 6.

On your phone: saved data is kept in the app's private storage, which other apps can't read, and is protected by your phone's own security. Innerbrook doesn't add a separate password, so anyone who can unlock your phone and open the app can see your memories. Using a screen lock protects them.

No system is perfectly secure. If a personal data breach affects you, we will tell you and the authorities as the law requires: under the DPDP Rules, that means telling the Data Protection Board of India without delay and in detail within 72 hours, and telling affected people without delay. Because we don't have your contact details, we will tell you through a notice in the app and on our website.

11. Your rights and choices

11.1 Things you can do yourself, in the app

See also our Data Deletion page.

11.2 Your rights under Indian law (DPDP Act)

Once the relevant parts of the DPDP Act are in force, you have the right to:

• withdraw your consent at any time, as easily as you gave it (s. 6(4)). This doesn't affect what we did before you withdrew it (s. 6(5));
• get a summary of the personal data we process about you and how, and the names of everyone we have shared it with (s. 11);
• correct, complete, update or erase your personal data (s. 12);
• have your complaints dealt with by us (s. 13), and then by the Data Protection Board of India; and
• nominate another person to use these rights for you if you die or become unable to (s. 14).

11.3 Rights in other countries

If you are in the EU, the UK or another place with similar laws, you may also have the right to access, correct, delete, restrict or object to the use of your data, to receive it in a portable format, and to complain to your local data protection authority.

11.4 How to make a request, and what to expect

Email hello@innerbrook.com with "Privacy request" in the subject line. Tell us what you'd like us to do. We don't need any ID from you, because we have no account to match it to.

Please note: because Innerbrook has no accounts, our servers hold no information that we can link to you. Your saved data is on your phone, where you control it. Copies at Anthropic are not linked to any identifier about you, so we usually can't find or single out your conversations there; they are deleted automatically within 30 days (section 4.3). We will always tell you clearly what we can and can't do.

We will reply within 30 days.

12. Complaints and grievance redressal

If you're unhappy with how we handle your personal data, please contact our Grievance Officer:

[GRIEVANCE OFFICER NAME]
Email: [GRIEVANCE OFFICER EMAIL]
Address: [GRIEVANCE OFFICER POSTAL ADDRESS]

• We will acknowledge your complaint within [7] days.
• We will resolve it as quickly as we can, and within 30 days of receiving it.

(Indian law currently requires grievances to be resolved within one month (SPDI Rules, rule 5(9)). The DPDP Rules will allow no more than 90 days (rule 14(3)). We aim to meet the shorter period.)

If you're not satisfied with our answer, you can complain to the Data Protection Board of India once it is accepting complaints, after first using our grievance process (DPDP Act s. 13(3)). If you are in the EU or UK, you can complain to your local data protection authority.

Under the DPDP Act, everyone also has some simple duties, such as not impersonating someone else and not making false or frivolous complaints (s. 15).

13. Children

Innerbrook is not for anyone under 18. Under the DPDP Act, anyone under 18 is a child, and their data can only be processed with verifiable consent from a parent (s. 9). Innerbrook doesn't offer this, so it doesn't allow children to use the app. We don't knowingly process children's data. Since we store nothing on our servers, there is usually nothing for us to delete, but if you believe a child has used Innerbrook, tap Forget everything on their device and contact us at hello@innerbrook.com.

14. The Innerbrook website and web app

If you use Innerbrook in a web browser at [WEB APP URL], it works the same way, with two differences: what you save is kept in your browser's storage on that device, and voice input uses your browser's speech recognition (in Chrome, for example, audio may be sent to Google). To delete web data, use Forget everything in the web app, or clear the site data in your browser. [The website doesn't use cookies for tracking or advertising.]

15. Changes to this policy

If we change this policy, we'll update the "Last updated" date. If a change is significant, for example a new provider that receives your conversations, or accounts and cloud sync, we'll tell you in the app before it takes effect, and where the law requires it we'll ask for your consent again. Previous versions are available at [PREVIOUS VERSIONS URL].

16. Contact us

[COMPANY LEGAL NAME]
[REGISTERED ADDRESS]
Privacy questions: hello@innerbrook.com
Grievance Officer: [GRIEVANCE OFFICER NAME], [GRIEVANCE OFFICER EMAIL]

[This policy is also available in Hindi at [HINDI VERSION URL]. If the two versions differ, [the English version applies / both apply equally — lawyer to decide].]

Questions about this page? See Support.