Last updated: March 15, 2026 (v1.0.7)
This privacy policy is designed to comply with Apple App Store Review Guidelines 5.1.1(i) and 5.1.2(i), the EU General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA).
InnerCalm+ uses OpenAI's GPT service to power AI-driven features. This policy explains exactly what data is shared, how it is used, and how you remain in control.
InnerCalm+ ("we," "our," or "the App") is a wellness and mindfulness application that helps users reflect on their emotions, track their mental wellbeing, and engage in guided self-reflection through AI-powered conversations.
We are committed to protecting your privacy. This policy explains in clear, specific terms what personal data we collect, how we collect it, what we do with it, and with whom we share it — including our use of third-party artificial intelligence (AI) services.
Zonder Stropdas Company BV
Oude Trambaan 133
2265 DA Leidschendam
The Netherlands
For questions about this policy or your data rights, contact us at info@bmgrb.com.
We collect and process the following categories of personal data:
| Data Category | Examples | How Collected |
|---|---|---|
| Chat messages and journal entries | Text you type during AI conversations and journal reflections | Directly from you, when you use the chat or journal feature |
| Mood and emotion data | Mood ratings, emotion labels, emotional state indicators you select or describe | Directly from you, when you log your mood or describe feelings |
| Conversation summaries | AI-generated summaries of your conversation history, used to provide context in future sessions | Generated automatically by the App based on your prior conversations |
| Device and usage data | App version, device type, OS version, session timestamps, crash logs | Collected automatically for app stability and improvement |
| Account data (if applicable) | Email address, display name | Provided by you during account creation |
We do NOT collect: location data, contacts, photos, browsing history, financial data, or health data from HealthKit or other health frameworks.
Your personal data is stored locally on your device. If you have iCloud enabled, your data may sync via iCloud to your other Apple devices. We do not store your personal data on our servers.
All chat messages, journal entries, mood data, and conversation summaries are stored locally on your device using secure on-device storage. This means your data stays with you and is not uploaded to any server controlled by us.
If you have iCloud enabled on your device, your InnerCalm+ data may be synced across your Apple devices via Apple's iCloud service. This sync is governed by Apple's own privacy policy and terms. We do not have access to your iCloud-stored data. You can disable iCloud sync for InnerCalm+ in your device's Settings > [your name] > iCloud.
Because your data is stored locally (and optionally in iCloud), you have full control over retention. You can delete your data at any time by deleting the app or clearing app data in your device settings. Conversation data sent to OpenAI for processing is not stored by InnerCalm+ on any server after the response is received.
IMPORTANT: InnerCalm+ sends certain personal data to OpenAI's GPT service to provide AI-powered features. This section explains exactly what is shared, why, and what protections are in place.
When you use AI-powered features in InnerCalm+, the following data may be transmitted to OpenAI's API:
Provider: OpenAI, L.L.C.
Service: OpenAI API (GPT language model)
Location: United States
Website: https://openai.com
Data is sent to OpenAI solely for the following purposes:
| Aspect | Details |
|---|---|
| Data used for model training? | No. We use OpenAI's API with data usage policies that ensure your data is NOT used to train or improve OpenAI's models. |
| Data retention by OpenAI | OpenAI may retain API inputs for up to 30 days for abuse monitoring, after which it is deleted. OpenAI does not store your data for longer-term purposes. |
| Encryption in transit | Yes. All data transmitted to OpenAI is encrypted using TLS (Transport Layer Security). |
| Data Processing Agreement | Our use of OpenAI's API is governed by OpenAI's Data Processing Agreement (DPA) and API Terms of Use, which provide protections equivalent to or exceeding those described in this policy. |
| Sub-processors | OpenAI may use sub-processors (such as Microsoft Azure) to provide its services. Details are available in OpenAI's privacy documentation. |
Before any personal data is sent to OpenAI, InnerCalm+ will present you with a clear consent screen that:
You can withdraw your consent at any time through the app's Settings. If you withdraw consent, no further data will be sent to OpenAI.
InnerCalm+ uses the Facebook SDK to measure the effectiveness of our advertising campaigns. This helps us understand which advertisements lead to app installations.
We do NOT share: your conversation content, mood data, journal entries, or any personal reflections with Facebook.
This data is used solely to:
You can limit ad tracking through your device settings:
For more information about how Facebook processes data, see Meta's Privacy Policy.
We do not sell, rent, or trade your personal data to any third party.
We do not share your conversation content, mood data, or personal reflections with advertisers or data brokers.
Third parties that may receive data from InnerCalm+:
Under applicable privacy laws including the GDPR and CCPA, you have the following rights:
| Right | Description | How to Exercise |
|---|---|---|
| Access | Request a copy of the personal data we process about you | Since data is stored locally, you already have access on your device |
| Deletion | Request deletion of your personal data | Delete the app or clear app data in device settings; withdraw AI consent in app settings |
| Withdrawal of consent | Withdraw consent for AI data processing at any time | Go to Settings in the app and disable AI features |
| Portability | Receive your data in a portable format | Your data is already on your device and/or in your iCloud account |
| Restriction | Restrict processing of your data | Disable AI features in app settings |
| Objection | Object to certain data processing | Contact us at info@bmgrb.com |
| Complaint | Lodge a complaint with a supervisory authority | Contact your local data protection authority |
InnerCalm+ is not directed at children under the age of 13 (or 16 in the EU/EEA). We do not knowingly allow children to use our AI-powered features, which transmit data to OpenAI for processing. We do not store personal data on our servers — all user data remains on the user's device and, if enabled, in iCloud. If you believe a child has used our AI features, please contact us so we can advise on appropriate steps.
When you use AI features, your data is transmitted to OpenAI's servers, which are located in the United States. If you are located in the EU/EEA, this constitutes an international data transfer. This transfer is conducted under appropriate safeguards, including OpenAI's Data Processing Agreement and Standard Contractual Clauses (SCCs) as applicable.
We implement appropriate technical and organizational measures to protect your personal data:
We may update this privacy policy from time to time. When we make significant changes, we will notify you through the App or via other appropriate means. The "Last updated" date at the top of this policy indicates when the most recent changes were made.
If you have any questions, concerns, or requests regarding this privacy policy or our data practices, please contact us:
Email: info@bmgrb.com
Address: Zonder Stropdas Company BV, Oude Trambaan 133, 2265 DA Leidschendam, The Netherlands
© 2026 InnerCalm+