Your privacy

Effective 2026-10-25. InnerCalm is operated by Alexander Shenkin. For questions about your information, contact [email protected].

InnerCalm offers guided relaxation for adults. You can listen to the free recording library without an account. Please share everyday preferences when making a session. Do not include medical records, diagnoses, other people's personal information, or information you do not want the providers below to process.

What we collect

Your account: a username, a protected passphrase, a protected recovery code, signup time, and the versions of the terms and privacy notice you accepted. We do not collect an email address for account signup.
Your sessions: the goal, length, and preferences you submit; the resulting script and recording; creation time; script approval; and records of your free usage.
Safety screening: we process your answers to decide whether to continue. We save the screening outcome and your processing consent with the session. We do not save the individual screening answers in your account.
Service and security data: sign-in sessions, recent request attempts, network addresses, request times and paths, and technical error information. Hosting and network services also process connection data.

Why we use it

We use this information to manage your account, write and record sessions you request, keep your recordings available, enforce the free allowance, prevent misuse, respond to support requests, and maintain the service. We do not sell your personal information or use it for advertising. We do not use your sessions to train our own AI models.

Who processes it

Microsoft Azure OpenAI: receives session preferences and writing instructions to produce your personalized script. Microsoft states that prompts and responses are not used to train its base models by default. Its service may retain or review information for abuse monitoring. Microsoft's data information.
Kokoro: the default free voice runs on InnerCalm's own server. The approved script becomes audio locally, so no separate voice provider receives it.
Google Cloud Text-to-Speech: if this voice is enabled and selected, receives the approved script to create personalized audio. Google states that Cloud Text-to-Speech does not log customer text or audio. Google's data information.
Hetzner and Cloudflare: host the service, deliver pages and recordings, and help prevent abuse. Cloudflare Turnstile processes browser and connection signals during account creation and recovery. Cloudflare privacy information.
ElevenLabs: produced the public recording library. Playing a prerecorded file does not send your session preferences to ElevenLabs.

Providers may process information in countries other than your own. Their retention and security practices are governed by their applicable service agreements and policies.

If you connect a chat app

ChatGPT or Claude processes your conversation under its own policies. Connectors use your existing InnerCalm account. You sign in on InnerCalm; do not send your passphrase or recovery code in chat. You choose whether the chat app can list your recordings, request scripts, and make audio after your approval. These requests use the same free allowance and script and voice providers as the website.

Your chat app receives recording titles, progress, and website links. Private scripts and audio playback stay on the website. We store the app's permissions and protected connection credentials on our server. The chat app keeps its connection credentials under its own policies. Essential connection cookies protect the sign-in and permission steps.

Use “Disconnect all chat apps” in your library to stop existing connections. Account recovery and deletion also stop their access. Expired or disconnected permission records can remain as security data; they no longer grant access to your account. If you previously submitted an early-access email, contact us to request its removal.

How long we keep your information

Website account details and saved scripts and recordings remain until you delete them or delete your account. You can delete a session from your library, export your account data, and delete your account from the account panel. Account deletion revokes your sign-in sessions and removes your account records and recordings from the active service. It cannot recall files you have already downloaded or information already processed by another provider.

Sign-in sessions last up to 30 days unless you sign out, reset your passphrase, or delete your account. Recent abuse-prevention attempts are removed during routine use after 24 hours. Aggregate service-usage totals contain no usernames or scripts. Security logs and infrastructure backups, where present, can retain limited information after active account deletion; contact us for details about a specific request.

Cookies and browser storage

We use an essential sign-in cookie to keep you logged in. It does not contain your scripts or passphrase. Cloudflare may use essential security cookies. Our pages load fonts from Google, which receives connection information. Your chat app controls its own browser storage. We do not add advertising or analytics cookies.

Your choices

You can use the free library without signing up. You can download your recordings and export your account's text data. You can delete recordings or your account from the library. Use your saved recovery code to regain access if you forget your passphrase. We do not send reset emails, and support cannot retrieve your passphrase or recovery code.

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to use of your information, or to withdraw consent. Contact [email protected] to make a request. We may need to confirm control of the account before disclosing or changing its information. You may also contact your local privacy authority.

Safety and changes

InnerCalm is for people aged 18 or older. If you believe a child has provided information, contact us. No online service can promise perfect security. We use access checks, protected credentials, encrypted connections, and restricted server storage to reduce risk.

We will publish changes to this notice here with a new date. We will seek fresh consent where a material change in how we use your information requires it.