Innerstory DE

Privacy Policy

Last updated: October 2026 · Deutsche Fassung (the German version is legally binding)

Summary

1. Controller

W2B GmbH, represented by its managing director Christian Meggendorfer, Marktstraße 4, 84056 Rottenburg a. d. Laaber, Germany
Email: info@web2business.de

2. Data in the app

The app stores the following data only on your device: selected topics and groups, your own affirmations and sequences, reminder times, settings (e.g. display duration, music, colour style, language), your moods and journal entries, statistics about your sessions and – if you use the Voice Pack – your voice recordings. This data never leaves your device and is removed when you delete the app. You can delete it yourself at any time under “More › Reset all data”.

Journal entries and moods may reveal how you feel. Because they never leave your device, neither we nor any third party can access them.

3. Microphone and voice recordings

With the Voice Pack you can record your affirmations in your own voice. Only for this does the app ask for microphone access. The microphone is active only while you are recording. Recordings are saved as audio files on your device, are never uploaded and never analysed. You can delete individual recordings in the app and revoke microphone access at any time in your system settings.

4. Notifications

To remind you, the app asks for permission to send notifications. Notifications are scheduled and triggered locally by your device’s operating system. No push tokens are collected and no data is sent to us or third parties. You can revoke the permission at any time in your system settings.

5. Purchases (Premium and Voice Pack)

Purchases and subscriptions are processed by Apple’s App Store or Google Play; we never receive payment details, and Apple’s or Google’s privacy policies apply. To validate purchases we use RevenueCat, Inc. (USA), which processes a randomly generated pseudonymous user ID and purchase receipts (product, purchase date, expiry date, country). The legal basis is Art. 6(1)(b) GDPR (performance of a contract). Transfers to the USA are based on the EU-US Data Privacy Framework or standard contractual clauses.

6. Advertising (free version)

The first 24 hours after installation are ad-free. After that, at most one short ad may appear per session, and a banner ad is shown on the home screen. You can also choose to watch a rewarded video to unlock content temporarily. Ads are delivered by Google AdMob (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).

Before the first ad, a consent dialog (Google User Messaging Platform, IAB TCF) asks whether Google may store and access information on your device and show personalized ads. On iPhone the system also asks whether the app may track you via the advertising identifier (IDFA). Google may process the advertising ID (IDFA or Android advertising ID), IP address and approximate location derived from it, device type, operating system, language, app information and ad interactions (impression, click, completed view). Content from the app – your affirmations, journal or recordings – is never shared.

Personalized ads and access to your device are based on your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). If you decline, Google shows only non-personalized or limited ads, processing only the data needed for delivery, fraud prevention and measurement, based on our legitimate interest in funding the free version (Art. 6(1)(f) GDPR). You can change or withdraw your consent at any time under “More › Ad privacy settings”, and tracking permission on iPhone under “Settings › Privacy & Security › Tracking”.

Google may transfer data to the USA; Google LLC is certified under the EU-US Data Privacy Framework. See how Google uses data from partner apps and Google’s privacy policy.

7. Links to legal texts

When you open the privacy policy, terms or imprint from the app, this website is loaded in a browser window; section 9 applies.

8. Contact by email

If you email us, we process your details to answer your request (Art. 6(1)(b) or (f) GDPR) and delete them once they are no longer needed and no statutory retention obligations apply.

9. This website

When you visit this website, our hosting provider Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany) processes technically necessary data (IP address, date and time, page requested, browser) in server log files as our processor in order to deliver the website securely (Art. 6(1)(f) GDPR). The website sets no cookies, loads no external fonts and uses no analytics.

10. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR), and the right to lodge a complaint with a data protection supervisory authority. Because app data is stored only on your device, we can neither see nor hand it over – it is entirely in your hands.

11. Children

The app is not specifically directed at children under 16 and does not knowingly collect data from children.