Privacy Policy for Inner Victory

Inner Victory is designed to be local-first. The following information is generally stored only on your device:

• Your optional name and onboarding answers
• Personal goals, goal-clarification answers, Victory Paths, and completed steps
• Self-talk journal entries and Victory Sessions
• Generated affirmations, mantras, scripts, and suggested actions
• Reminder preferences, Victory Boost balance, app settings, and progress

This information is not automatically backed up to an Inner Victory cloud account. Uninstalling the app, clearing its storage, losing your device, or using Reset App may permanently remove it.

“Delete All Data” removes activity such as goals, paths, sessions, and journal entries while preserving certain profile and reminder settings. “Reset App” removes the app’s local data and settings and returns the app to onboarding.

When you request AI-generated content, Inner Victory sends the information needed to produce that content to our service providers. Depending on the feature, this may include:

• Your optional name, goals, and why those goals matter
• Descriptions of your current situation, struggle, obstacles, time, and desired actions
• Future-self and encouragement-style preferences
• Self-talk or journal text submitted for reframing
• Previous affirmations, summaries, and generated content needed to continue a feature

Do not submit information you do not want processed by these providers. Avoid highly sensitive information such as medical records, financial account information, government identification numbers, or another person’s confidential information.

AI requests are transmitted through Supabase and processed using the OpenAI API. OpenAI states that API inputs and outputs are not used to train its models by default. OpenAI may retain abuse-monitoring logs containing prompts and responses for up to 30 days unless different retention controls apply or longer retention is legally required. See OpenAI API data controls.

Inner Victory uses an automatically created, anonymous Supabase authentication identity to protect its AI service and limit misuse. You do not need to provide an email address or create a named account.

For security and rate limiting, we may process an anonymous backend user identifier, request times and counts, a cryptographically hashed version of an IP address, and basic request or error information. The app does not intentionally place complete journal histories or its complete local data record in a Supabase user-data table.

Inner Victory uses Google AdMob to provide optional rewarded advertisements. The app currently requests non-personalized ads, although non-personalized advertising may still use identifiers for frequency limiting, aggregated reporting, security, and fraud prevention.

Google reports that its Mobile Ads SDK may automatically collect or share IP addresses used to estimate general location; interactions such as app launches, taps, and ad views; diagnostic and performance information; and advertising, app-set, device, or account identifiers. Google may use this information for advertising, analytics, security, and fraud prevention. Data is encrypted in transit. See Google’s Mobile Ads disclosure and how Google uses information from partner apps.

Where required, Inner Victory displays Google’s consent or privacy choices interface before requesting ads. Your choices may be stored on your device. You can also manage applicable advertising controls through your device and Google settings.

If you enable reminders, Inner Victory requests notification permission and schedules reminders on your device. Reminder preferences and reminder content are stored locally. Inner Victory does not currently operate a remote marketing-notification system.

You can disable notifications through the app or your device settings.

When you join the Inner Victory waitlist, we collect the name and email address you provide and the date you gave consent. Our hosting provider may process basic technical information such as an IP address and browser details for short-term security, rate limiting, and server logs. That technical information is not added to the waitlist table.

We use waitlist information to send development updates, release news, and closely related product announcements. We do not sell your personal information. Each campaign email will include an unsubscribe option. We keep active waitlist details while you remain subscribed and release updates are relevant. After you unsubscribe, we remove the saved name and may retain a minimal suppression record so we can honor your choice.

If you contact support, we collect information you voluntarily provide, such as your email address, message, screenshots or attachments, app version, device type, and troubleshooting details. We use it to respond, diagnose problems, prevent abuse, and improve the app.

We process information to:

• Provide requested app, website, support, and AI features
• Personalize affirmations, guidance, and Victory Paths
• Protect the AI endpoint and enforce request limits
• Provide rewarded advertising and remember consent choices
• Schedule local reminders and send requested waitlist updates
• Maintain security, comply with law, and investigate abuse

Information may be processed by Supabase for anonymous authentication, server functions, and rate limiting; OpenAI for requested AI generation; Google AdMob for rewarded ads, measurement, consent, and fraud prevention; Apple and Google for app distribution, diagnostics, and store services; and email, database, or hosting providers used to operate our website and answer support requests.

We require providers that receive user data from us to provide the same or equivalent protection described in this policy. These providers also operate under their own terms and privacy policies and may process information in countries other than your own. We may disclose information when reasonably necessary to comply with law, protect users, investigate abuse, or protect our legal rights.

Local app information remains on your device until you delete it, reset the app, clear app storage, or uninstall the app. AI content may be retained temporarily by OpenAI as described above. Support messages are retained only as long as reasonably necessary to resolve the request, maintain appropriate business records, and satisfy legal obligations.

Reset App does not currently delete the anonymous Supabase identity or associated server rate-limit records. Those records may remain after a local reset, and we do not currently promise a fixed automatic deletion period. To request deletion of identifiable backend or support information, contact happycamper1v1@gmail.com. We may need information sufficient to locate the relevant record.

You can decline AI-generated features or an optional rewarded ad; change applicable advertising consent choices; disable notifications; unsubscribe from waitlist emails; delete activity data or reset the app; and contact us regarding access, correction, or deletion.

Rights vary by location. Residents of certain jurisdictions may have additional rights concerning access, deletion, correction, restriction, objection, portability, or advertising-related disclosures.

Inner Victory is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact happycamper1v1@gmail.com.

We use reasonable administrative and technical safeguards, including encrypted network connections. No storage or transmission method is completely secure, and we cannot guarantee absolute security.

Our providers may process information in the United States and other countries. Those countries may have different data-protection laws from your country.

We may update this policy when the app or our practices change. We will update the “Last updated” date and provide additional notice where required.

Amir
happycamper1v1@gmail.com
Chicago