Your Privacy, Protected

1. Who We Are

InnerZero is provided by Summers Solutions Ltd (Company No. 16448945), registered in England and Wales at Mclaren Building, 46 The Priory Queensway, Birmingham, B4 7LR.

Summers Solutions Ltd is registered with the UK Information Commissioner's Office (ICO) as a data controller. Registration reference: ZC122497. You can verify this on the ICO register.

For privacy enquiries: help@innerzero.com.

2. What Data the Desktop App Collects

The InnerZero desktop application does not collect or transmit any personal data by default. All AI processing, conversations, memory, and documents remain on your local machine. No telemetry, analytics, usage tracking, or crash reporting is included.

3. Cloud Mode

If you enable the optional Cloud Mode, your prompts are sent to the third-party AI provider you select (such as DeepSeek, OpenAI, Anthropic, Google AI, Qwen/DashScope, xAI, or Kimi) and responses are returned to your device. InnerZero does not store, log, intercept, or read your prompts or responses at any point. Each AI provider has its own privacy policy governing how they handle your data; you should review the relevant provider's privacy policy before enabling Cloud Mode.

Telegram bridge (optional)

InnerZero offers an optional Telegram bridge for mirroring chat messages between your desktop and your phone, and for receiving Proactive Assistant briefings on your phone. The bridge is off by default and must be explicitly enabled in Settings.

When enabled, messages and briefings routed through the bridge are processed by Telegram's servers under their privacy policy and terms of service. Your Telegram bot token is encrypted and stored locally on your device only. You may disable the bridge at any time from Settings.

4. Cloud AI Service (Managed Subscription)

When you use InnerZero's managed Cloud AI service (optional paid subscription), the following data is sent to our proxy server:

• Your message text and a short recent conversation window (last 4 exchanges)
• Your model preference

What is NOT sent:

• Your memory database, full conversation history, personal profile facts, or file contents
• Your IP address is not included in the data sent to AI providers and is not stored in InnerZero application logs

Your prompts are forwarded to the selected AI provider and the response is returned to you. InnerZero does not store, read, or log the content of your prompts or AI responses.

Proxy logs are limited to: timestamp, plan tier, model used, and usage count deducted. These are retained for 30 days for billing dispute resolution only, then automatically deleted.

AI providers process your data under their own privacy policies and our Data Processing Agreements (DPAs):

• Microsoft Azure (DeepSeek): EU West Europe region, covered by Microsoft DPA
• Google: covered by Google Cloud Data Processing Addendum
• Anthropic: covered by Anthropic DPA

When using BYO (Bring Your Own) API keys, your prompts are sent directly to the provider from your device. InnerZero's servers are not involved.

5. BYO API Keys

If you use the BYO (Bring Your Own) API key feature, your API keys are encrypted and stored locally on your device only. Keys are never transmitted to Summers Solutions Ltd or any InnerZero server. Requests using BYO keys go directly from your machine to the provider.

6. Unrestricted Mode

Enabling Unrestricted Mode does not cause any additional data to be collected or transmitted. The uncensored models run locally on your device, and all generated content remains on your machine.

7. Voice and Microphone

If you use InnerZero's voice features, the application accesses your microphone to capture speech for local speech-to-text processing. All audio is processed locally on your device using offline speech recognition models. No audio recordings are transmitted, stored, or sent to any server. Audio data is processed in real-time and discarded immediately after transcription. If Cloud Voice mode is enabled, your transcribed text (not audio) is sent to OpenAI for response generation; see Section 3 (Cloud Mode) for details.

Proactive Assistant (optional)

Proactive Assistant briefings may pull from your local memory, connected mail (if Gmail is enabled), and knowledge packs to compose briefing output. Composition happens on your machine. If you have routed automation tasks to a cloud model, that routing is covered by the Cloud Mode disclosures above.

Action Hub: web research and job applications (optional)

The optional Action Hub has two parts, both off by default and both run from your machine.

Web research.Research uses your own Apify API key. When you start a research task, only your run parameters (such as search terms or target URLs) and your Apify token are sent to Apify's servers to run the scraper. Your memory database, files, and profile are never sent. Your Apify token is encrypted and stored locally on your device. Apify processes your request under its own terms of service and privacy policy. You are responsible for what you choose to research and for complying with the terms of any site you target.

Job applications. If you use the job-application assistant, the profile details you enter (such as your name, contact details, CV information, answers, and an optional AI-tailored note) are submitted directly from your machine to the third-party job or company website you choose. InnerZero does not receive, store, or proxy this information. Each submission requires your explicit approval, and you can keep the assistant to draft-only and review everything first. The destination website processes your details under its own privacy policy.

8. What Data the Website Collects

When you create an account on innerzero.com, we collect your email address. If you join our waitlist, we store your email address. Payment information for InnerZero Pro, cloud plans, and Business Licences is processed by Stripe, and payment information for one-off donations is processed by Ko-fi and PayPal; we never receive or store your payment card details.

Newsletter subscriptions (optional)

If you choose to subscribe to our email list, we store your email address, the date you subscribed, and which page you subscribed from. We use this only to send you occasional product updates. Your email is stored in our Supabase database and never shared with third parties. You can unsubscribe from any email we send, or request deletion by contacting help@innerzero.com.

9. Cookies

InnerZero is built privacy-first, and that principle extends to this website. We collect the bare minimum needed for the site to function. No advertising. No marketing. No third-party tracking. No fingerprinting.

The InnerZero website sets only essential cookies for core functionality. They are listed below.

We also use Vercel Analytics for aggregate site traffic insights. It is cookieless by design and uses anonymised page-view signals only. No persistent identifier is set on your device.

Your theme preference (dark or light mode) is stored in your browser's localStorage, not in a cookie. It never leaves your device.

We do not use:

• Advertising or marketing cookies
• Third-party tracking pixels (no Google Analytics, no Facebook Pixel, no equivalent)
• Cross-site behavioural profiling
• Fingerprinting

You can clear or block cookies through your browser's settings. Doing so will prevent login and form submissions from working, since both rely on essential cookies.

10. Data Processors

We use the following third-party services:

• Supabase: authentication and database hosting (EU region)
• Vercel: website hosting and deployment
• Cloudflare Turnstile: bot-detection challenge on form submissions (United States); processes IP address and ephemeral challenge signals per Cloudflare's privacy policy. The challenge is essential for form security and is not used to track or profile you across the site.
• Ko-fi and PayPal: one-off donation payment processing
• Stripe: InnerZero Pro, cloud AI subscription, Business Licence, and credit pack payment processing
• Formspree: contact form submissions

11. Data Retention and Deletion

All desktop data is stored locally on your machine and can be deleted at any time by you. Account data (email address) is retained for as long as your account is active. Waitlist data is retained until the waitlist is no longer needed, after which it will be deleted. You can permanently delete your account and all associated data at any time from your account settings page.

12. Your Rights (UK GDPR)

Under UK GDPR, you have the right to: access your personal data; correct inaccurate data; request deletion of your data; object to processing; request data portability; and withdraw consent at any time. To exercise any of these rights, contact help@innerzero.com. We will respond within 30 days.

13. Children

InnerZero is not intended for children under 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with personal data, contact us and we will delete it promptly.

14. Changes to This Policy

We may update this privacy policy from time to time. Changes will be reflected on this page with an updated date.

15. Contact

For any privacy-related questions or data requests: help@innerzero.com.