Privacy Policy

This Privacy Policy explains how Tzahi Moyal (INLUME) (“INLUME,” “we,” “us,” or “our”) collects, uses, stores, shares, and protects personal information when you use the INLUME website, mobile application, content, features, recommendations, experiments, reflections, and related services (collectively, the “Service”).

By using the Service, you acknowledge that your personal information will be handled as described in this Privacy Policy.

Beta program (invite-only)

During the current beta, INLUME is available only to invited testers via TestFlight or Google Play closed testing. This policy describes what we collect in the beta app and on this marketing website. Features such as paid subscriptions or advanced AI coaching are not part of the beta unless explicitly offered in the app.

What we do not collect (beta)

During the beta, INLUME does not collect:

• Precise location or GPS data
• Contacts or address book data
• HealthKit, medical records, or other clinical health data
• Audio recordings

1. Information We Collect

1.1 Account Information

We may collect information you provide when creating or managing an account, such as your name, email address, login method, profile details, subscription status, and communication preferences.

1.2 Onboarding and Self-Discovery Information

Because INLUME provides personalized self-discovery experiences, we may collect information you provide during onboarding or use of the Service, including answers about your interests, energy, preferences, areas of life, goals, motivations, constraints, experiment preferences, and other personal reflections.

1.3 Reflections, Notes, Feedback, and Experiment Data

We may collect content you submit through the Service, including structured reflection scores (such as aliveness, usefulness, and difficulty), experiment feedback, completion status, selected options, and optional written notes you choose to add.

Optional reflection notes are stored so you can recall what you wrote. They are not included in product analytics events and are not used to train AI models in the beta.

1.4 Usage and Device Information

We may automatically collect information about how you use the Service, such as screens viewed, features used, experiment interactions, session activity, error logs, device type, operating system, browser type, app version, language settings, identifiers, and diagnostic data. We do not use reflection note text in analytics.

1.5 Payment Information

If the Service includes paid features, payments may be processed by third-party payment providers or app stores. We generally do not store full payment card details. We may receive limited payment-related information, such as transaction status, subscription plan, renewal date, cancellation status, and receipts.

1.6 Communications

If you contact us, we may collect your name, email address, message content, attachments, support history, and other information needed to respond.

2. Sensitive Information

INLUME is designed for personal reflection and may involve information that feels sensitive, such as emotions, life goals, personal values, preferences, challenges, or relationship and career reflections.

Please do not submit medical records, psychiatric records, therapy notes, government IDs, financial account numbers, or other highly sensitive information unless we explicitly request it and explain why.

INLUME is not a medical, psychological, psychiatric, therapeutic, counseling, or healthcare service. We do not intend to collect health information for diagnosis, treatment, or medical care.

3. How We Use Information

We may use personal information to:

• Provide, operate, maintain, and improve the Service.
• Create and manage your account.
• Personalize onboarding, recommendations, experiments, prompts, and reflections.
• Track experiment progress and provide relevant follow-up suggestions.
• Analyze usage, performance, reliability, and product effectiveness.
• Develop new features, content, and recommendation logic.
• Respond to support requests and communicate with you.
• Send service updates, security notices, and administrative messages.
• Send marketing communications where permitted and with appropriate opt-out options.
• Detect, prevent, and address fraud, misuse, security incidents, and technical issues.
• Comply with legal obligations and enforce our Terms of Use.

4. AI, Algorithms, and Personalization

We may use algorithms, automated systems, machine learning, artificial intelligence, or third-party AI providers to process information you provide and generate personalized experiment suggestions, insights, summaries, recommendations, or product experiences.

AI-generated or automated outputs may be inaccurate, incomplete, or unsuitable for your personal circumstances. These outputs are used for personal exploration and are not professional advice.

Where possible, we aim to limit the personal information shared with third-party AI providers and use appropriate safeguards. The exact providers may change over time.

5. Legal Bases for Processing

Where applicable privacy laws require a legal basis, we process personal information based on one or more of the following:

• Contract: to provide the Service you requested.
• Consent: where you have given consent, such as for certain optional communications or permissions.
• Legitimate interests: to improve, secure, analyze, and operate the Service, provided those interests are not overridden by your rights.
• Legal obligations: to comply with applicable laws, requests, or regulatory requirements.

6. How We Share Information

We do not sell your personal information in the ordinary meaning of selling it for money. We may share information in the following situations:

• Service providers: hosting, cloud infrastructure, analytics, authentication, customer support, email delivery, payment processing, security, and AI or automation providers.
• App stores and payment processors: for purchases, subscriptions, refunds, and billing support.
• Legal and safety reasons: if required by law, legal process, court order, government request, or to protect rights, safety, users, or the Service.
• Business transfers: in connection with a merger, acquisition, financing, reorganization, sale of assets, or similar transaction.
• With your direction or consent: when you ask us to share information or connect with another service.

7. Analytics, Cookies, and Similar Technologies

We may use cookies, software development kits, pixels, local storage, or similar technologies to operate the Service, remember preferences, analyze usage, improve performance, and understand product effectiveness.

You can control cookies through your browser settings. Some features may not work properly if cookies or similar technologies are disabled.

Examples of providers we may use include PostHog (product analytics only; no free-text reflection content).

8. Data Retention

We retain personal information for as long as reasonably necessary to provide the Service, maintain your account, personalize your experience, comply with legal obligations, resolve disputes, enforce agreements, and improve the Service.

When information is no longer needed, we will delete, anonymize, or aggregate it, unless we are legally required or permitted to retain it longer.

9. Data Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information. However, no system is completely secure, and we cannot guarantee absolute security.

You are responsible for keeping your account credentials confidential and for using secure devices and networks.

10. International Data Transfers

Your information may be processed and stored in countries other than your country of residence, including countries that may have different data protection laws. Where required, we use appropriate safeguards for international transfers.

11. Your Privacy Rights

Depending on where you live, you may have rights to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Delete your personal information.
• Object to or restrict certain processing.
• Withdraw consent where processing is based on consent.
• Request a copy of your information in a portable format.
• Opt out of certain marketing communications.
• Lodge a complaint with a data protection authority.

To exercise your rights, contact us at privacy@inlume.app. We may need to verify your identity before processing your request.

12. Marketing Communications

If you receive marketing emails from us, you can unsubscribe using the link in the email or by contacting us. We may still send non-marketing messages, such as account, security, transaction, or service-related notices.

13. Children’s Privacy

The Service is not intended for children under 18, or under the age of legal majority in their jurisdiction. We do not knowingly collect personal information from children. If you believe a child has provided personal information to us, contact us and we will take appropriate steps to delete it.

14. Third-Party Links and Services

The Service may contain links to third-party websites, apps, or services. We are not responsible for the privacy practices, content, or policies of third parties. Review their privacy policies before providing information to them.

15. Account and Data Deletion

You may delete your account in the app (Settings → Account → Delete Account) or follow the steps on our Delete Account page. You may also contact us at privacy@inlume.app.

Some information may be retained where required or permitted by law, including for security, fraud prevention, legal compliance, dispute resolution, backups, or legitimate business records.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If changes are material, we may notify you through the Service, by email, or by other reasonable means. The “Last updated” date shows when this Privacy Policy was last revised.

17. Contact Us

If you have questions or requests about this Privacy Policy or our privacy practices, contact us at:

Email: privacy@inlume.app
Legal entity: Tzahi Moyal (INLUME)
Address: Israel (contact by email)
Data protection contact: privacy@inlume.app