Inner House Privacy Policy

Inner House is operated by Brittany Apps.

Questions, privacy requests, or support inquiries can be sent to hello@brittanyapps.com.

This Privacy Policy applies to Inner House, including the Inner House web app, iOS and Android apps, app store listings, and related support communications.

The public web app is hosted at innerhouse.brittanyapps.com. The public legal, support, and deletion pages are hosted at brittanyapps.com/inner-house.

Inner House helps you organize information you choose to record, while the meaning of those records stays yours.

Inner House does not diagnose, treat, prevent, or cure any condition. It does not provide therapy, medical advice, clinical advice, crisis counseling, emergency response, or professional mental health care.

Inner House does not tell you what your inner life means, interpret your records, or replace a therapist, doctor, emergency service, crisis line, or trusted support person.

If you or someone else is in immediate danger, or if you need urgent help, contact local emergency services or a trusted person nearby.

Depending on the features you use, Inner House may store information you choose to enter, such as:

• Account information, such as your email address.
• If you choose Sign in with Apple, the Apple account identifier Apple returns and any name or email you allow Apple to share (you can ask Apple to hide your real email).
• Profiles, hidden profiles, profile groups, message tags, names, pronouns, age labels, roles, colors, icons, Roomie avatars, profile designs, room styles, and preferred words.
• Check-ins, fronting records, co-fronting records, near-front records, blended or blurry states, and unknown or unnamed states.
• Memory Room entries, House Notes, pinned notes, tags, moods, body sensations, attachments, reminders, and records marked to bring to therapy.
• Safe Room calm tools, comfort plans, safety steps, safe people, care notes, and support contacts.
• Therapy-prep notes, therapy-marked records, House Review choices, House History records, and saved therapy summaries.
• House Chat messages, polls, votes, internal decision records, and House Map relationships.
• Inner Circle records, sharing defaults, share-card previews, support-plan cards, share-image previews, and share events.
• Connection names, invite notes, connection records, shared profiles, shared profile details you enable, peer messages, profile messages, check-in sharing choices, check-in update choices, connection removals, blocks, and reports you submit.
• Extra fields, custom fields, color themes, appearance choices, House Lights settings, privacy choices, notification preferences, widget preferences, and push notification tokens when notifications are enabled.
• Export files, import review data, Moving Boxes import choices, account deletion requests, app-data deletion requests, and support messages you choose to send to Brittany Apps.

Inner House may allow you to enter sensitive information about yourself, your experiences, therapy, emotions, body sensations, memories, relationships, or safety needs.

You control what you add. Inner House does not require you to enter sensitive information to use basic features.

Please do not enter information about another person unless you have the right to do so.

Inner House and its service providers may process limited technical information needed to operate, secure, and maintain the app, such as:

• Device type, device software version, app version, platform, and basic app environment details.
• Login, session, authentication, request, security, and service logs, which may include IP address, user agent, account identifiers, or device identifiers processed by service providers.
• Purchase or paid plan status for Inner House Pro or Roomie purchases, including product identifiers, transaction identifiers, customer identifiers, purchase dates, expiration dates, and restore status.
• Push notification token and platform when you enable notifications.

Inner House uses outside services for sign-in, database storage, file storage, hosting, notifications, and purchase management. Records you create are stored in your account so they can be available when you sign in.

You can sign in with an email address and password, or, on supported Apple devices, with Sign in with Apple. If you use Sign in with Apple, Apple verifies your identity and returns an account identifier and any name or email you allow Apple to share; that information is used only to create and sign in to your Inner House account.

Your device may also store limited local information for normal app behavior, such as sign-in session information, app settings, cache, temporary unsaved drafts, changes waiting to save, temporary share or export files, App Lock preferences, Quick Cover settings, House Lights settings, widget choices, notification choices, and privacy settings.

Inner House is not designed as a local-only app. Records are saved to your account. Your device also keeps some information so the app can work normally.

We use information to create and manage accounts, save and display the records you choose to enter, provide app features, support exports and imports, manage privacy settings, process purchases, send notifications you enable, respond to support requests, maintain security and reliability, comply with legal obligations, and protect users, the public, and the app.

We do not use your entries to diagnose you, provide therapy, tell you what your inner life means, or make decisions for you.

Inner House does not include third-party ads or a third-party advertising or profiling analytics SDK, and does not use analytics to profile you or track you across other apps.

Inner House records account-linked, first-party product events covering onboarding, recording and sharing actions, navigation, imports, and plan screens. The event schema is limited to known event names, categories, counts, and technical metadata rather than free-form notes or messages. Sentry receives crash, error, and performance diagnostics and can be given the account identifier for troubleshooting. Default personal-information collection is disabled and sensitive fields are scrubbed, but diagnostics must not be described as containing no account identifier.

First-party product events do not intentionally include record contents, invite-code values, profile names, or message text. They are not advertising events.

Inner House does not sell your personal information and does not use your records for third-party advertising.

Inner House does not use AI to interpret you, tell you what your records mean, or train AI models on your records. If AI features are added later, they will be optional, clearly explained, and covered by an updated Privacy Policy before release.

Brittany Apps does not sell personal information.

Preview-and-share exports remain under your control. Features you explicitly enable, such as live connection sharing, scheduled or conditional message delivery, Discord delivery, or PluralKit sync, can subsequently transmit selected information without asking you to approve every individual update. Disable the feature or revoke access to stop future sharing; this cannot retrieve copies already received.

Your private House records are not automatically made public. Connections and their sharing settings remain separate from Circles and optional public-profile publishing. Circles can be public, private, or invite-only; what you post or send there is shared with the audience allowed by that Circle. An enabled public-profile link publishes the profile and member details you choose to include, and people with access may copy them. Preview-and-share exports remain under your control. Features you explicitly enable, such as live connection sharing, scheduled or conditional message delivery, Discord delivery, or PluralKit sync, can subsequently transmit selected information without asking you to approve every individual update. Disable the feature or revoke access to stop future sharing; this cannot retrieve copies already received.

We may share limited information only as needed to operate, secure, or support Inner House, including with service providers for authentication, database storage, file storage, hosting, app infrastructure, notifications, purchase management, customer support, and legal compliance.

Service providers may include Supabase for authentication, database, storage, and server functions; Sign in with Apple for account authentication when you choose it on supported Apple devices; RevenueCat for purchase and entitlement management; Apple App Store and Google Play for distribution and purchases; Sentry for crash and error reporting; and platform or notification services when notifications are enabled.

We may disclose information if required by law, legal process, or to protect the rights, safety, or security of users, the public, Brittany Apps, or the app.

Inner House Pro purchases may be processed by Apple App Store, Google Play, and purchase management services. Built-in profile images are free. Any legacy one-time Roomie purchases remain separate from Pro.

Payment information is handled by the store or payment provider. Inner House does not directly store your full payment card information.

Inner House may receive and store product identifiers, plan status, entitlement status, transaction status, purchase dates, expiration dates, and related paid plan details.

Deleting your Inner House account does not automatically cancel an active App Store or Google Play plan. Manage or cancel paid plans through the store account used for purchase or through the in-app plan screen when available. If you purchased through web checkout, use that billing provider or the available in-app plan-management link instead.

Apple, Google, RevenueCat, and payment providers may retain purchase, billing, or transaction records under their own policies and legal obligations.

Depending on available app features, you can add, edit, archive, hide, export, import, or delete many records you create.

You can export your Inner House data from Settings > Data Ownership > Export Data, review supported imports through Moving Boxes before saving imported records, delete app data while keeping your sign-in account, or start account deletion from Settings > Data Ownership > Delete Account.

If you cannot access the app, use the public Account & Data Deletion page at /inner-house/data-deletion or contact hello@brittanyapps.com from the email address connected to your account when possible.

You can use privacy controls such as hidden previews, App Lock, Quick Cover, widgets, check-in reminders, notifications, House Lights, connection choices, share previews, and export controls where available.

We keep information for as long as needed to provide Inner House, maintain your account, comply with legal obligations, resolve disputes, enforce agreements, and protect users, the public, and the app.

If you delete your account, we will delete or de-identify account data from active systems unless we are legally required or permitted to retain certain information. Service-provider backups, logs, or purchase records may take additional time to expire under provider retention practices.

Copies you export, copy, share, screenshot, print, back up, or move outside Inner House are controlled by the destination you choose.

We use reasonable technical and organizational measures appropriate to the information Inner House handles, including account-scoped access controls, Row Level Security policies where supported by the database, and encrypted transport through HTTPS or platform-provided secure channels when data moves between the app and service providers.

No app, database, server, device, or internet transmission can be guaranteed to be completely secure. You are responsible for protecting your device, email account, password, device passcode, biometric access, backups, shared devices, and exported files.

App Lock can add an extra layer of device-level privacy, but it does not replace secure account practices.

For app eligibility, Inner House uses the account holder's body age.

Inner House is intended only for account holders whose body age is 18 or older.

Profile or internal age labels may be younger; those labels do not change account eligibility.

Brittany Apps is based in the United States. If you use Inner House outside the United States, your information may be processed in countries where Brittany Apps or its service providers operate. Data protection laws may differ from those in your location.

We may update this Privacy Policy from time to time. If changes are significant, we will update the effective date and may provide additional notice in the app or on the Brittany Apps website.

Your continued use of Inner House after an updated Privacy Policy is posted means you acknowledge the updated policy.

Questions about this Privacy Policy can be sent to hello@brittanyapps.com.

Your private House records are not automatically made public. Connections and their sharing settings remain separate from Circles and optional public-profile publishing. Circles can be public, private, or invite-only; what you post or send there is shared with the audience allowed by that Circle. An enabled public-profile link publishes the profile and member details you choose to include, and people with access may copy them.

A published profile is a separate shared snapshot. Disabling or deleting it stops future access through that feature, but does not delete copies saved by others. Do not publish private information about someone else without permission.

Preview-and-share exports remain under your control. Features you explicitly enable, such as live connection sharing, scheduled or conditional message delivery, Discord delivery, or PluralKit sync, can subsequently transmit selected information without asking you to approve every individual update. Disable the feature or revoke access to stop future sharing; this cannot retrieve copies already received.

Connecting Discord can send selected messages through a configured webhook and, when enabled, import message history. PluralKit can receive or supply the member and fronting information used by the sync you enable. Those services also process information under their own policies. Integration credentials are sensitive; disconnect or revoke them when no longer needed.

Optional cloud-journal encryption covers supported journal fields such as title, content, mood, tags, and body sensations. It does not encrypt every account record, attachment, community post, or message end to end. The app keeps the journal key on your device and provides a recovery-key flow; protect that key and your device. Losing the key can prevent recovery of encrypted journal content.

Where web checkout is available, RevenueCat and the checkout payment provider process subscription and transaction details. Manage the subscription through the provider used for purchase. Deleting an Inner House account does not itself cancel a separate store or web subscription.