Your Privacy, Protected

1. Who We Are

InnerZero is provided by Summers Solutions Ltd (Company No. 16448945), registered in England and Wales at Mclaren Building, 46 The Priory Queensway, Birmingham, B4 7LR. For privacy enquiries: help@innerzero.com.

2. What Data the Desktop App Collects

The InnerZero desktop application does not collect or transmit any personal data by default. All AI processing, conversations, memory, and documents remain on your local machine. No telemetry, analytics, usage tracking, or crash reporting is included.

3. Cloud Mode

If you enable the optional Cloud Mode, your prompts are sent to the third-party AI provider you select (such as DeepSeek, OpenAI, Anthropic, Google AI, or Qwen/DashScope) and responses are returned to your device. InnerZero does not store, log, intercept, or read your prompts or responses at any point. Each AI provider has its own privacy policy governing how they handle your data; you should review the relevant provider's privacy policy before enabling Cloud Mode.

4. Cloud AI Service (Managed Subscription)

When you use InnerZero's managed Cloud AI service (optional paid subscription), the following data is sent to our proxy server:

• Your message text and a short recent conversation window (last 4 exchanges)
• Your model preference

What is NOT sent:

• Your memory database, full conversation history, personal profile facts, or file contents
• Your IP address is not included in the data sent to AI providers and is not stored in InnerZero application logs

Your prompts are forwarded to the selected AI provider and the response is returned to you. InnerZero does not store, read, or log the content of your prompts or AI responses.

Proxy logs are limited to: timestamp, plan tier, model used, and usage count deducted. These are retained for 30 days for billing dispute resolution only, then automatically deleted.

AI providers process your data under their own privacy policies and our Data Processing Agreements (DPAs):

• Microsoft Azure (DeepSeek): EU West Europe region, covered by Microsoft DPA
• Google: covered by Google Cloud Data Processing Addendum
• Anthropic: covered by Anthropic DPA

When using BYO (Bring Your Own) API keys, your prompts are sent directly to the provider from your device. InnerZero's servers are not involved.

5. BYO API Keys

If you use the BYO (Bring Your Own) API key feature, your API keys are encrypted and stored locally on your device only. Keys are never transmitted to Summers Solutions Ltd or any InnerZero server. Requests using BYO keys go directly from your machine to the provider.

6. Unrestricted Mode

Enabling Unrestricted Mode does not cause any additional data to be collected or transmitted. The uncensored models run locally on your device, and all generated content remains on your machine.

7. Voice and Microphone

If you use InnerZero's voice features, the application accesses your microphone to capture speech for local speech-to-text processing. All audio is processed locally on your device using offline speech recognition models. No audio recordings are transmitted, stored, or sent to any server. Audio data is processed in real-time and discarded immediately after transcription. If Cloud Voice mode is enabled, your transcribed text (not audio) is sent to OpenAI for response generation; see Section 3 (Cloud Mode) for details.

8. What Data the Website Collects

When you create an account on innerzero.com, we collect your email address. If you join our waitlist, we store your email address. Payment information for supporter memberships and donations is processed by Ko-fi and PayPal; we do not receive or store your payment card details. If future cloud plans are offered via Stripe, Stripe will process payments; we will never store card details directly.

9. Cookies

The InnerZero website uses only essential cookies for functionality (such as authentication session cookies and theme preference stored in localStorage). We do not use advertising, marketing, or third-party tracking cookies. If we add privacy-respecting analytics in the future (such as Plausible), we will update this policy accordingly.

10. Data Processors

We use the following third-party services:

• Supabase: authentication and database hosting (EU region)
• Vercel: website hosting and deployment
• Ko-fi and PayPal: supporter membership and donation payment processing
• Stripe: cloud AI subscription and credit pack payment processing
• Formspree: contact form submissions

11. Data Retention

Account data (email address) is retained for as long as your account is active. Waitlist data is retained until the waitlist is no longer needed, after which it will be deleted. You can permanently delete your account and all associated data at any time from your account settings page.

12. Your Rights (UK GDPR)

Under UK GDPR, you have the right to: access your personal data; correct inaccurate data; request deletion of your data; object to processing; request data portability; and withdraw consent at any time. To exercise any of these rights, contact help@innerzero.com. We will respond within 30 days.

13. Children

InnerZero is not intended for children under 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with personal data, contact us and we will delete it promptly.

14. Changes to This Policy

We may update this privacy policy from time to time. Changes will be reflected on this page with an updated date.

15. Contact

For any privacy-related questions or data requests: help@innerzero.com.