Consumer Health Data Privacy Notice
1. About this notice
This notice is for people whose consumer health data we collect in Washington (My Health My Data Act, RCW 19.373), Nevada (SB 370, NRS Chapter 603A) or Connecticut (Connecticut Data Privacy Act). It applies if you live in one of these states, or if your data is collected there. It adds to our Privacy Policy, which explains our practices in full.
"Consumer health data" means personal information that is linked or reasonably linkable to you and identifies your past, present or future physical or mental health status, including information we derive or infer from other information.
A creation is a Carry or a Mind Track made for you in the app. An expression is what you type or say, and any answer you give to a clarifying question, when you ask for a creation.
2. Consumer health data we collect, and why
InnerReset makes personal audio from what you share about your inner life. We therefore treat the following as consumer health data:
| Category | Why we collect it |
|---|---|
| Your expressions: what you type, the text of what you say, and your answers to a clarifying question. They may reveal your emotional state, your mental health or your relationships | To make, store and play the creation you asked for |
| Short answers you give to reflection questions in your Journey | To show you your own Journey |
| The reading our language model makes of your expression: the kind of support you ask for, the relationship involved, the emotional tone | To write a creation that fits what you said |
| The result of our automated safety check: a level from S0 to S3, the topic of any concern, and the route applied | To show crisis resources and stop a creation when your words suggest immediate risk, and to write more protectively when they suggest distress |
| A pseudonymous summary of the reading and the safety result, kept with each Carry if you opt in | To produce aggregate statistics about how InnerReset is used. Reports never show an individual, and any category that appears fewer than five times is merged into "other" |
| Creations made from your expressions: scripts, lines, titles, audio and optional cover art | To provide your library |
We do not collect precise location, biometric data, genetic data, or data from health apps or devices. We never receive or store your voice: Apple's speech recognition turns it into text on your iPhone or on Apple's servers, under Apple's terms, and we receive only the text.
3. Sources
We collect consumer health data from you, when you type, speak or answer a question in the app, and from our own systems, which derive the reading, the safety result and the summary from your expressions using the providers listed in section 4. We do not buy consumer health data or receive it from data brokers.
4. Who receives your consumer health data
We do not sell consumer health data. We do not share it with third parties for their own purposes, and we do not use it for advertising. We disclose it only to processors, companies that process it on our behalf under contracts that limit them to providing their service to us:
| Processor | What it receives | Purpose |
|---|---|---|
| OpenAI | The text of your expression and the text generated from it; for optional cover art, a short image description written from your creation | Reading, safety check, writing, checking; cover art if you ask for it |
| ElevenLabs | The approved text to be spoken | Speech synthesis |
| Our hosting, database and storage providers | All data held by the service, including audio files and cover images | Servers, database, job queue and storage |
| Our business email provider | Messages you send to support, if you include health information | Support mailbox |
We have no affiliates that receive consumer health data. We may disclose consumer health data when a law, court order or other legal process requires it, and we will tell you unless the law forbids it. No third party collects consumer health data through our app over time and across other apps or websites; the app runs no advertising, analytics or tracking software.
5. Your consent
Before your first creation the app shows a consent screen (Privacy Policy, section 4) that names the purposes and the processors above and asks for your explicit consent to the processing of your sensitive data. The pseudonymous summary used for aggregate statistics is not necessary to provide the service, so the screen offers it as a separate switch that is off by default; you can change it at any time in Settings. Accepting our Terms is not consent.
We do not share consumer health data with third parties. If we ever wished to, we would first ask for your separate consent, which you could refuse.
Withdrawing consent. In Settings → Privacy & data, or by writing to support@innerreset.life. When you withdraw consent for the summary, we delete the summaries linked to you and exclude your creations from every statistic, and the service keeps working. When you withdraw consent for all processing, we stop making new creations for you, because the service cannot work without reading what you share; your library stays yours to export, play or delete.
6. Your rights
You have the right to confirm whether we collect, share or sell your consumer health data; to access it, and receive a list of all third parties and affiliates with whom we have shared or sold it, with their contact details; to withdraw your consent to its collection and sharing; and to delete it, in which case we delete it from our records, including our backups, and tell each processor to delete it. We will not treat you differently, charge you a different price or give you a lower quality of service for using these rights.
How to use your rights. In the app, you can export your data (Settings → Privacy & data → Prepare data export), delete a creation, or delete your account. For any other request, email support@innerreset.life with the subject "Consumer health data request". We may ask you to confirm the request from the app or from the email address linked to your account, so that no one else can obtain or delete your data. If you used InnerReset without an account, we can find your data only with information from the device you used. You may use an authorised agent; we will check the agent's authority.
When we answer. Within 45 days of receiving your request. If we need more time, we may extend this once by 45 more days where reasonably necessary, and we will tell you why within the first 45 days. Requests are free, up to twice a year.
Appeal. If we refuse your request, in full or in part, we will tell you why. You can appeal by replying to our answer with the word "Appeal". We will answer your appeal in writing within 45 days in Washington and Nevada, and within 60 days in Connecticut, and explain our decision. If you disagree with the result, you can contact the Office of the Attorney General of Washington (atg.wa.gov), Nevada (ag.nv.gov) or Connecticut (portal.ct.gov/ag).
7. Geofencing and sale
We do not use geofencing. We do not collect precise location. We do not sell consumer health data, and we have never done so.
8. How long we keep it
We keep consumer health data only as long as we need it for the purposes in section 2. The Privacy Policy, section 13, gives each period. In short: creations stay until you delete them or your account; your original words are deleted with the creation made from them once its deletion is permanent (14 days after you delete it, or at once with your account); the text of an expression stopped by the safety check is deleted within minutes; account deletion takes effect at once.
9. Changes to this notice
If we make a material change to this notice, we will post it here with a new effective date and tell you in the app before it takes effect. If a change means collecting or sharing consumer health data in a new way, we will ask for your consent first.
10. Contact
Rabiata LLC, 5830 East 2nd Street, Ste 7000, Casper, WY 82609, United States support@innerreset.life