Effective as of 2025-01-01
InnerTrail is a private journal. We cannot read your journal entries — not our engineers, not our servers, not anyone. Your words are encrypted on your device before they ever leave it.
The services we use — Supabase, Stripe, RevenueCat, Apple, and Vercel — handle only the data they need to keep the app running. None of them can read your journal content.
On our servers, we store only encrypted blobs of your journal entries, timestamps of when entries were created, device names for sync purposes, subscription status, and a user identifier (and email address, if you contacted us). We do not store any readable journal content.
We do not store readable journal content, your device's location data, or any information about who you communicate with. Your words are encrypted end-to-end.
When you create an InnerTrail account, you receive a recovery phrase. This phrase is the only way to decrypt your journal. If you lose it, we cannot recover your data — not because we don't want to, but because we literally cannot. The encryption is designed so that no one can, not even us.
You can delete all your data at any time from within the app. When you delete your account, your encrypted blobs are permanently removed from our servers within 30 days.
Supabase stores your encrypted data and handles real-time sync. Stripe processes your web subscription payments. RevenueCat manages your subscription status for the App Store. Applehandles iPhone and iPad subscriptions through the App Store.Vercel hosts this marketing website.
There is no analytics in the app. On this website, we use Vercel Analytics, which is privacy-respecting and does not use cookies or track individuals.
Questions about privacy? Reach us at hello@aandosconsulting.com.