Privacy Policy
Last updated May 2026
1. Overview
Inner Study takes your privacy seriously. This policy explains what we collect, why, and how we protect it. We don’t sell your data. We don’t show you ads. We collect only what we need to provide and improve the service.
2. What We Collect
Account information: your email address and name, provided during signup or payment. We use this to create your account, send you your results, and communicate with you about the service.
Assessment data: your responses to the ENIA™ and the scored results derived from them. This is the most sensitive data we hold — it reflects psychological patterns and is treated accordingly.
AI interpretations: the AI-generated analysis of your results, produced by Anthropic’s Claude. These are stored with your results and accessible only to you (and anyone you explicitly share them with).
Payment information: processed and stored by Stripe. Inner Study does not store your credit card number, CVV, or full payment details. We retain a reference to your Stripe transaction for receipt and support purposes.
Usage data: basic analytics to understand how people use Inner Study (pages visited, features used). We do not track you across the web or sell behavioral data.
3. How We Use Your Data
To provide the service: generating your results, delivering your AI interpretation, enabling sharing features you initiate, and managing group programs you participate in.
To communicate with you: sending your results, receipts, assessment reminders (for group programs), and occasional product updates. You can unsubscribe from non-transactional emails at any time.
To improve the service: aggregate, anonymized patterns help us improve the ENIA™ and understand how the platform is used. Individual assessment responses are never used for this purpose without anonymization.
4. Who Can See Your Data
You control sharing. Your assessment results are never visible to anyone — including group program administrators, facilitators, or other participants — unless you explicitly grant access. Program administrators can see whether you’ve completed an assessment, but not your results.
We will share data with law enforcement only if legally compelled to do so, and we’ll notify you unless prohibited by law.
5. Third-Party Services
Supabase: database hosting and authentication (SOC 2 Type II compliant). Your data is stored in the United States.
Stripe: payment processing (PCI DSS Level 1 compliant).
Anthropic: AI interpretation generation. Your assessment scores (not raw responses) are sent to Anthropic’s API to generate your interpretation. Anthropic does not use this data to train their models. See Anthropic’s privacy policy for details.
Resend: email delivery. Your email address and email content are processed by Resend to deliver transactional emails.
Vercel: web hosting and deployment.
We do not use any advertising networks, tracking pixels, or data brokers.
6. Data Security
Your data is encrypted in transit (TLS/HTTPS) and at rest (AES-256 via Supabase). We’re implementing application-level encryption for assessment results and journal entries to provide an additional layer of protection. We use Row Level Security to ensure users can only access their own data.
7. Data Retention and Deletion
Your data is retained as long as you have an active account. You can request deletion of your account and all associated data by emailing hello@innerstudy.com. We process deletion requests within 30 days. Some data may be retained in encrypted backups for up to 90 days after deletion.
8. Children’s Privacy
Inner Study is not intended for children under 16. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we’ll delete it promptly.
9. Your Rights
Depending on where you live, you may have the right to: access the personal data we hold about you, correct inaccurate data, delete your data, export your data in a portable format, and object to certain processing. To exercise any of these rights, email hello@innerstudy.com.
10. Cookies
Inner Study uses only essential cookies for authentication and session management. We do not use advertising or tracking cookies. No cookie banner is needed because we don’t use non-essential cookies.
11. Changes to This Policy
We’ll notify you of significant changes via email. Minor clarifications may be made without notice. The “Last updated” date at the top always reflects the most recent revision.
12. Contact
For privacy questions, data requests, or concerns: hello@innerstudy.com.