Privacy Policy

Effective date: 10 November 2026

Who is responsible

Ekaterina Trifonova is responsible for the personal information handled to provide inner tape. You do not create an inner tape login. Random identifiers used by service providers can still be personal data; we do not describe them as fully anonymous. Privacy contact: the contact form at https://innertape.app/contact.

Recordings and health information

The app receives heart rate, RR intervals, ECG and accelerometer signals from your compatible strap and calculates metrics on your device. It stores recording files, metric history and operational journals locally. Recording timestamps and device identifiers needed for operation may be present in local records. Turning off iCloud backup does not move new recordings elsewhere: they continue to be saved in the app's storage on your iPhone. No manual export is needed for this local save. Where closed recording files are compressed, compression is lossless: the original CSV bytes can be recovered without reducing the recorded samples or their precision. Compression does not itself upload a file or enable iCloud backup. These recordings, medical values, metric values, strap identifiers and local journals are not included in our product analytics or sent to RevenueCat.

Backups and exports

If you enable iCloud backup, recording files and the information needed to restore them are stored in your own Apple iCloud account and handled by Apple. This is optional. A configured Mac receiver stores copies on the Mac you select. We do not operate a server that receives your recordings for these backup features. Your Apple Account settings, storage and connectivity affect access to iCloud copies. We do not claim that the app adds its own end-to-end encryption to iCloud storage.

Manual export is a separate action. The app creates a ZIP containing CSV files for the selected period and data types, then opens the iPhone's Save or Share menu. You choose whether to save to On My iPhone, iCloud Drive or another available location, or send the file to an app or person. This does not turn automatic backup on or off. The recipient or storage provider controls the copy after you share it.

Support receives only information you choose to send, such as your message and reply contact. Do not include recordings or health information unless needed for your request and you deliberately choose to share them. Our staff can see information you send to support; we therefore do not claim that we can never see heart data under any circumstances. Recordings are not automatically attached to support requests.

Purchases

Apple processes purchases. RevenueCat helps validate subscriptions and restore access. It processes the SDK's random app-user identifier, purchase/transaction information, product and entitlement status and technical information needed to provide this service. RevenueCat also derives a country from the store transaction or, when unavailable, the connection's IP address; its documentation states that the IP address is then discarded. This purchase-service processing is separate from product analytics. RevenueCat may associate identifiers during purchase restoration. It does not receive your recording files or health measurements from inner tape. We do not receive your payment-card details. Purchase processing is separate from optional product analytics. See https://www.revenuecat.com/privacy-policy and Apple's privacy information.

Optional app-usage analytics

If you opt in, PostHog receives event times, a fresh random identifier for each event and a limited set of app-interaction events: onboarding steps, tab visits, specified settings changed on/off, paywall presentation, and purchase or restore attempt outcomes. The approved schema also permits app version and major OS version; it does not permit health values, recording contents, receipts, contact details, free text, error messages, file paths, sensor IDs or your RevenueCat support code. We use these events to understand usability and where onboarding or purchase flows fail. We do not use a persistent installation identifier to join these events into an individual usage history. This does not make all network processing anonymous. We do not use session replay, screen capture, advertising identifiers, cross-app advertising tracking or profiling based on health data. Our PostHog project uses EU hosting and is configured to discard client IP addresses from stored events. Approximate country, region and city analytics is not currently enabled. We do not request GPS or device location access. Network providers necessarily process network connection information. This is not a promise that an IP address never reaches their infrastructure. Declining optional analytics does not restrict paid features or your recordings. You can turn off app-usage sharing in Settings > Data & Privacy. Withdrawal stops subsequent collection; it cannot undo events already received. We do not send earlier interactions retrospectively when analytics is enabled.

Retention and deletion

Recordings and exports persist in the locations where they were stored until removed by you or the disclosed retention policy. Removing a local app copy does not necessarily remove a Mac archive, iCloud copy, recipient's export or Apple purchase record. Automatic local cleanup follows the shipped backup verification policy and must not delete current recording files. Saved charts remain after eligible local raw-file cleanup; detailed viewing or export may then need a download from your backup. Turning off future backup does not by itself delete existing iCloud or Mac copies. PostHog usage events are retained for up to two years under the current project retention setting. We keep support correspondence for as long as needed to resolve the request and related follow-up, and longer only where needed to meet a legal obligation or handle an actual complaint or dispute. We periodically review records and remove information that is no longer needed for those purposes. Purchase-service records are kept as needed to validate and restore purchases, resolve payment-related requests and satisfy applicable legal obligations. We handle these requests manually through the contact form; no automatic deletion timer is promised. Please contact us if you need help locating or deleting data. Removing an app or changing a local identifier alone does not delete provider records. We will handle verified privacy requests through the contact form at https://innertape.app/contact; request only information needed to find the relevant records, not medical recordings. Apple may retain purchase records independently. Deleting a RevenueCat customer record does not cancel an Apple subscription; cancellation remains a separate action in Apple subscription settings.

Providers and international processing

Apple, RevenueCat and PostHog provide distinct services. RevenueCat is a US company; PostHog's EU hosting does not alone prove all provider support/subprocessing occurs in the EU. RevenueCat's published data-processing terms include standard contractual clauses for applicable restricted EU transfers and the UK transfer addendum. PostHog processes this information under our signed Data Processing Agreement. Cloudflare hosts the website and delivers contact-form messages to our support mailbox. It processes your message, optional reply email and network information needed to deliver and protect the service. We use short-lived request limits to reduce spam. We do not add website advertising trackers or session replay. Our mailbox provider also processes support correspondence for delivery and storage.

Why we process information

Where EU or UK data-protection law applies, we process purchase information to provide and restore the service you request; optional app-usage analytics relies on consent. Support and security information is processed to respond to requests and protect the service, relying on contract or legitimate interests as appropriate. Legal obligations may require transaction or complaint records to be retained. We do not sell health information or use recordings for advertising. This does not grant permission to send us health information automatically or to reuse support attachments for analytics.

Your choices and rights

Depending on applicable law, you may request access, correction, deletion, information about processing or withdraw consent. Use the contact form at https://innertape.app/contact for a request or complaint; we will explain any identity verification and legally required retention. You may also complain to the relevant privacy regulator, including the OAIC in Australia where applicable. Our security measures reduce risk but do not guarantee absolute security.

Children and young people

inner tape is intended for adults aged 18 and over. We do not knowingly collect personal information through optional analytics from anyone under 18. If you believe that a person under 18 has sent us personal information, contact us through the contact form so we can investigate and handle deletion where appropriate.

Policy changes

We will keep this policy consistent with the released app and identify its effective date. Material changes to optional collection will be disclosed before collecting new categories.