Inner Support Privacy & Cookie Policy

Effective Date: July 30, 2025

Welcome to Inner Support, a self-guided tool designed to support emotional reflection and wellness. Inner Support respects your privacy and is committed to protecting your personal information. This Privacy Policy describes how we collect, use, and safeguard your personal information. By accessing or using Inner Support, you agree to be bound by our Privacy and Cookie Policy.

Inner Support is committed to protecting your privacy and ensuring that appropriate safeguards are in place, particularly if our platform is used by healthcare providers or organizations subject to HIPAA. While Inner Support is not a healthcare provider or a covered entity and is not legally required to comply with the Health Insurance Portability and Accountability Act (HIPAA), we have voluntarily adopted HIPAA-compliant data protection standards.

This Privacy Policy explains how we collect, use, store, and protect your information when you use our AI-powered conversational wellness Inner Support, designed to support emotional self-awareness and reflection. This policy complies with applicable privacy laws in the United States, including but not limited to:

  • California Consumer Privacy Act (CCPA)
  • California Privacy Rights Act (CPRA)
  • Virginia Consumer Data Protection Act (VCDPA)
  • Colorado Privacy Act (CPA)
  • Connecticut Data Privacy Act (CTDPA)
  • Utah Consumer Privacy Act (UCPA)

 

1. Information We Collect

Inner Support is designed with privacy and security at its core. All user data is encrypted in transit and at rest, in accordance with HIPAA-compliant standards. Inner Support does not access or view identifiable user content.

When you use Inner Support, the following categories of data may be collected and processed automatically by the system, but are not accessible to Inner Support in identifiable form:

  • User Inputs: This includes content you choose to enter into Inner Support, such as journal entries, responses to prompts, mood indicators, and freeform text. These entries are encrypted, stored securely, and only visible to you. Inner Support does not have access to read or retrieve individual entries.
  • User Profile Information: If you create an account, basic account information like your name, email address, and preferences may be encrypted and stored to facilitate login and user experience. This information is also not accessible to Inner Support in a readable format.
  • Usage Data: The platform may collect anonymized information about how users interact with Inner Support such as time of access, features used, and session duration. This data helps improve the app but is analyzed only in aggregate, without linking it to specific individuals.
  • Device and Technical Information: Information such as IP address, browser type, and device identifiers may be collected for technical and security purposes. However, this data is also subject to encryption and de-identification protocols.
  • While the system may use automated tools to detect general patterns (such as keywords or trends), this is done through de-identified, non-attributable processing and is never used to track or profile individual users.

Inner Support does not collect personal information from users under the age of 18, and the app is not intended for use by minors.

 

2. How We Use Your Information

Your data is used strictly to deliver and improve the Inner Support’s features tailored to your specific needs. Specifically, we use your information to:

  • Generate personalized, context-aware responses using AI technology
  • Tailor content, prompts, and suggestions based on your previous entries
  • Improve the relevance and quality of your experience within Inner Support
  • Analyze aggregate usage patterns to enhance system performance
  • Maintain security and comply with applicable legal obligations

All user inputs and AI-generated outputs are stored securely and used only within the scope of your interaction with Inner Support. We do not use your data to train external AI models, and we do not share your data with third parties for marketing, analytics, or profiling purposes.

3. Outputs Generated by Inner Support

The responses you receive from Inner Support are generated based on your inputs and usage history. These outputs are not reviewed or interpreted by humans and do not constitute therapeutic, medical, or professional advice. They are stored only to provide continuity in your user experience and improve personalization.

 

4. HIPPA-Level Protections and Data Storage

Although Inner Support is not a healthcare provider and does not offer medical or therapeutic services, we have chosen to implement data protection practices consistent with the Health Insurance Portability and Accountability Act (HIPAA). HIPAA is a federal law that sets national standards for protecting sensitive health information. While we are not legally required to comply, we voluntarily apply its security safeguards—such as encryption of data in transit and at rest, access controls, and secure data handling protocols. These measures are in place to give our customers an extra level of protection and demonstrate our commitment to safeguarding your personal information.

We store your data using security protocols including:

  • End-to-end encryption (in transit and at rest)
  • Role-based access controls and user authentication
  • Secure audit logging and access tracking
  • User Data is logically separated to prevent cross-account access.
  • By implementing enhancements such as automated retention and minimization protocols.

These safeguards are voluntarily adopted as an added layer of protection, particularly for organizations or professionals who may use Inner Support in HIPAA-regulated contexts.

 

5. Your Privacy Rights

Depending on your state of residence, you may have the right to:

  • Access a copy of your personal data
  • Correct or update your information
  • Delete your data upon request
  • Restrict or object to certain types of processing
  • Opt out of the sale or sharing of your information (we do not sell your data)

To exercise your rights, contact us at stacey@drstaceyshelby.com. We may need to verify your identity before fulfilling your request.

 

6. Data Retention

We retain your data for 90 (ninety) days after cancellation to fulfill the purposes described above or as required by law. You may request deletion of your account and associated information at any time. To exercise your rights, contact us at stacey@drstaceyshelby.com. We may need to verify your identity before fulfilling your request.

 

7. Third-Party Service Providers

We use third-party services for secure infrastructure hosting and data processing (e.g., cloud storage). These providers are contractually bound by confidentiality obligations and, where appropriate, Business Associate Agreements (BAAs). Your data is never sold, rented, or shared for commercial purposes.

 

8. International Users and Additional Rights for Users in the European Union

Inner Support is intended for users in the United States. If you are accessing it from outside the U.S., your data may be transferred to, processed, and stored in the U.S., where privacy laws may differ.

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) or equivalent laws apply to your use of this App. Under these regulations, you are entitled to the following rights:

  • Right of Access: You have the right to request a copy of your personal data.
  • Right of Rectification: You can ask us to correct or complete your personal data.
  • Right to Erasure (“Right to Be Forgotten”): You may request deletion of your data.
  • Right to Restrict Processing: You can request limited use of your data under certain conditions.
  • Right to Data Portability: You may ask for your data in a portable format.
  • Right to Object: You may object to processing based on legitimate interest or direct marketing.
  • Right to Withdraw Consent: If you provided consent, you can withdraw it at any time without affecting prior processing.

We process your data under the following legal bases:

  • Your consent, when you choose to input and interact with Inner Support.
  • Our legitimate interest in providing, maintaining, and improving our services.
  • To comply with legal obligations.

If you are not satisfied with how we handle your data, you have the right to file a complaint with your local supervisory authority.

Your data may be processed and stored in the United States.

If you are in the EU and wish to exercise your rights, you may contact us directly at stacey@drstaceyshelby.com

9. Changes to This Privacy Policy

We may update this policy from time to time to reflect changes in technology, applicable law, or Inner Support functionality. If changes are material, we will notify you through Inner Support or by email. Your continued use constitutes acceptance of the updated policy.

 

10. Cookies and Tracking Technologies

Cookies are small text files that are stored on your computer, smartphone, or other device when you visit our website or use Inner Support. These files contain information that allows us to recognize your device and remember your preferences, session activity, and interactions with our platform. The term “cookies” also includes similar tracking technologies such as pixels, tags, and local storage.

We use cookies and similar technologies to provide essential functionality, enhance performance, and personalize your experience. Specifically, we use cookies to:

  • Enable secure sign-in and account authentication
  • Maintain session continuity while you navigate Inner Support
  • Remember user preferences, such as interaction settings or language
  • Understand how users engage with Inner Support (e.g., which features are used, session length)
  • Detect and prevent misuse, fraud, or unauthorized access
  • Optimize our systems for load distribution and speed

We do not use cookies to serve targeted advertisements or track you across unrelated websites. We do not sell or share cookie data with third parties for advertising purposes.

Types of cookies we use

Strictly Necessary Cookies: These are essential to provide core Inner Support functions, such as user authentication and secure access. You cannot disable these cookies without impairing the Inner Support’s performance.

Performance or Analytical Cookies: These cookies collect information about how users interact with Inner Support, helping us monitor system performance, identify issues, and improve usability. All data collected is aggregated and anonymized.

Functionality Cookies: These cookies allow us to remember your preferences or past interactions, such as saved entries, selected settings, or display configurations, to enhance your experience.

Limited Personalization Cookies: We may use first-party cookies to personalize your experience within Inner Support based on your usage history. These cookies are not used for behavioral targeting or advertising.

Managing cookies: You can manage or disable cookies through your device or browser settings. Most browsers allow you to block or delete cookies, although doing so may affect your ability to use certain features of Inner Support.

We also provide cookie preference options directly through our Inner Support website or App (where applicable). You may adjust these settings at any time by visiting the cookie settings panel and updating your preferences.

 

11. Contact Us

If you have questions or requests related to this Privacy Policy, contact:

Inner Support, LLC
Contact: Stacey Shelby at stacey@drstaceyshelby.com
111 NE 1st Street 8th Floor #8307
Miami FL 33132