Privacy Policy

Our Commitment

Your privacy isn't just something we care about. It's central to our mission to provide a safe and private journaling experience. When you share sensitive, personal information with us, we take that responsibility seriously and are committed to keeping it secure, private, and protected, while still offering you the best features and services.

Transparency is key to building trust, which extends to our relationship with you. We're committed to clear and open communication about how we handle your data, so you can make informed decisions about its use within InnerEcho.

1. What We Collect (and What We Don't)

Your journal entries and check-ins stay private. We never receive or store the content you write. Your entries live on your device and sync only through your own private iCloud account (Apple's CloudKit), which we have no ability to access or read.

Sign in with Apple: if you choose it, we ask only for your first name, which is kept on your device to personalize the app. We do not request your email address, and Apple does not share your Apple ID with us.

Analytics transmission is disabled from version 2.1 on. These versions do not send product-use or in-app purchase events to PostHog. Version 2.0 and earlier may continue sending feature-use, purchase, and basic device information under the previous policy. Updating does not delete historical analytics. Analytics never include your journal entries or check-in content.

2. How AI Features Use Your Words

AI in InnerEcho is called Echo. It writes reflections on your entries, check-ins and dreams, offers insights, and talks with you in Echo chat. Depending on your iPhone and your choices, Echo works in up to three places, in this order:

• On your iPhone. Where Apple Intelligence is available, Echo uses Apple's on-device model first. Nothing you write leaves your phone for these requests.
• Apple Private Cloud Compute, with your OK (version 2.2.1 and later, on iOS 27 with Apple Intelligence). Echo chat, and anything too large for your iPhone's own model, is answered by Apple's Private Cloud Compute, Apple's own servers. Apple uses your request only to answer it and doesn't keep it, and Apple has published how its servers are built so independent experts can check that. The app asks before sending anything there (“Send to Apple's servers?”), and you can turn it off in Settings → Echo Settings. Apple isn't a third party: like iCloud, this stays with Apple.
• OpenAI, the third-party backup, only if you allow it. In the app this is called the “third-party backup”, and it's off until you choose “Allow Apple and the backup” (or “Allow the backup” on iPhones without Private Cloud Compute). With your permission, OpenAI answers when Apple can't: when Apple Intelligence isn't available on your iPhone, or Apple's models run into an error. It also transcribes voice recordings your iPhone can't. You can change or revoke this in Settings → Echo Settings. Revoking stops new requests and cancels requests in progress, but cannot recall content already sent.

What a request includes. Only what the feature needs: the entry (with its photos, if it has any), check-in or dream you're reflecting on, your chat messages, anything you attach in Echo chat (entries, check-ins, dreams, goals or photos), and, for Echo chat, your optional About You notes, your Echo personality settings and the facts Echo remembers about you. Requests go straight from your iPhone to Apple or OpenAI. They never pass through our servers, and we never store them.

What Echo remembers. Echo can remember a few lasting details you share, like your dog's name. They're kept on your device, listed in Settings under What Echo remembers, and you can delete any of them there.

Turning AI off. With Echo Support off in Settings → Echo Settings, nothing is sent to Apple or OpenAI. Echo never contacts anyone on your behalf. If something you write suggests you may be in danger, Echo shares crisis resources with you, and nothing more.

3. Insights, Analytics & Third-Party Services

Your journaling content stays on your device and in your iCloud. We work with a small number of service providers, and this is the complete list:

• Apple — runs Apple Intelligence on your iPhone and Private Cloud Compute as described above, processes App Store purchases and Sign in with Apple, and stores and syncs your data through iCloud (CloudKit). Your journal entries are stored with encryption, so only you have access to them.
• OpenAI — only with your permission, the third-party backup for Echo when Apple's models aren't available or run into an error, and for voice transcription your iPhone can't do. OpenAI does not use data sent through its API to train its models, and retains it for at most 30 days for abuse monitoring before deleting it. InnerEcho asks OpenAI not to store responses.
• PostHog — older app versions may send product analytics, including purchase events, as described above. Version 2.1 and later do not transmit analytics to PostHog. Analytics never include your journal entries or check-in content.

4. Non-Disclosure of Sensitive Journal Data

We stand firmly in our commitment to safeguard your sensitive journal data. Beyond the service providers listed above, we do not share, sell, or distribute your data to any third parties unless absolutely required by law. Your privacy is our priority.

5. Security

We employ a variety of measures to safeguard your information:

Data Encryption: All data transmitted between you and our services is secured using strong encryption protocols, including Secure Socket Layer (SSL) technology. Apple's CloudKit automatically encrypts all data stored and synced across your devices.

6. Changes to This Privacy Policy

We reserve the right to modify this privacy policy at any time. If we make material changes to this policy, we may notify you here or by means of a notice within the app.

7. Contact Us

If you have any questions regarding this Privacy Policy or the practices of InnerEcho, please contact us.

support@upaway.dev