Privacy Policy
Effective Date: March 12, 2026
At innerScape, we understand that your mental well-being and personal reflections are deeply private. This Privacy Policy outlines how we collect, process, and protect your data within our platform.
1. Information We Collect
A. Personal Information
- Account Data: When you sign up, we collect your name and email address through our authentication provider.
- Profile Data: Role-based information (User, Coach, or Admin) and account status.
B. Wellness & Media Data
- Video Journals: Video recordings you upload for emotional analysis and reflection.
- Thumbnails: A single static frame extracted from your video to help identify specific entries.
- Mood Tracking: Quantitative data on mood levels, energy, stress, sleep hours, and tagged activities.
- Transcripts & Summaries: Text copies and AI-generated summaries of your video journals.
2. How We Process Your Data
A. Insights & Reflection
We use secure, locally-hosted processing tools to generate therapeutic insights:
- Transcription: Videos are processed using private speech-to-text tools.
- Emotion Trends: Local sentiment analysis identifies emotional patterns.
- Thumbnail Extraction: A single frame is extracted per journal entry.
- Personalized Guidance: Secure infrastructure generates insights and tailored messages.
B. Weekly Reporting
The system aggregates your mood and journal data into weekly PDF reports to help you and your coach track long-term progress. These reports are generated on our private infrastructure.
3. Data Storage & Retention Policies
We follow a "Security-First" approach to media storage:
- Processing: Raw videos are processed locally on our secure internal nodes.
- Immediate Deletion: Once processed, the video is deleted from the primary upload folder.
- Temporary Archive: A copy is kept in a secure, encrypted archive for 24 hours for debugging purposes.
- Permanent Deletion: All archived videos are permanently wiped from storage after 24 hours.
- Metadata & Assets: Transcripts, summaries, mood scores, and thumbnails are stored until you choose to delete your account.
4. Access Control
We implement strict Row-Level Security (RLS) and role-based access:
- Users: Have full access only to their own data.
- Coaches: Can only view data for users specifically assigned to them by an Admin. They cannot see raw video files.
- Admins: Have oversight of the platform for safety and management purposes.
5. Third-Party & Infrastructure Providers
- Database & Auth: Secure hosting for metadata and user authentication.
- Encrypted Object Storage: For secure, ephemeral storage of media assets.
- Private Insights Infrastructure: All transcription, sentiment analysis, and insight generation are performed using local tools. We do not use third-party APIs for your sensitive data.
- Secure Communications: For transactional email notifications.
6. Your Rights
- Access: You can view all your journals and mood data via your dashboard.
- Deletion: You can request the deletion of your account and all associated data at any time.
- Transparency: You are informed whenever your data is processed or when a new report is ready.
7. Security Measures
- Encryption: All data is encrypted in transit (TLS) and at rest (AES-256).
- Isolation: Your data is logically separated from other users' data at the database level.
8. Contact Us
If you have any questions about this Privacy Policy or how your data is handled, please contact the administration team via the platform's messaging system.