Privacy information for the pilot

Data and purposes

Account access uses a name, email address, authentication cookies, and access metadata. Saved chats, map data, preferences, and account administration data are processed to provide the service.

• Service and security logs may contain technical metadata.
• Content-free usage counters persist even when a chat is private.
• No new analytics or hidden tracking is introduced by the pilot request email link.

Private and saved conversations

In private mode, conversation content is stored locally in browser IndexedDB, scoped to the account where supported. This local data is not guaranteed to be encrypted. In saved mode, chosen content is persisted on the server.

• Private content is still transmitted through the backend to the selected external AI provider to produce a response.
• Deleting browser-local data and deleting server data are separate actions.
• Server fields protected with an at-rest key are not end-to-end encrypted.

AI and voice providers

Depending on actual configuration, text may be processed by Groq, xAI, or OpenRouter. OpenRouter may route the request to a downstream model provider. Optional speech-to-text uses Groq; optional text-to-speech uses ElevenLabs when enabled.

• Provider retention, subprocessors, international transfers, and contractual safeguards require operator assessment before public release.
• Do not enter information you do not want sent to the selected provider.

Sensitive topics and legal basis

Innermap is a nonclinical reflection tool, not emergency, medical, psychotherapy, or diagnostic care. Service/account processing is intended to be assessed under contract or steps requested before contract. The operator has not documented a final legal basis for special-category data; consent and other requirements need legal assessment before broader use.

Retention and deletion

Saved service data may currently be retained for up to 365 days where that service rule applies. Content-free usage counters use a 365-day cleanup period. This does not establish a complete backup deletion policy. Backup deletion and all category-specific periods still require operator approval.

• Browser-local private chats must be deleted in the relevant browser/account context.
• Server deletion must be requested or performed separately; deleting one does not guarantee deletion of the other.

Contact and rights

Contact info@dinkel.art to ask for access, correction, deletion, restriction, portability, or objection as applicable, and to identify the competent supervisory authority once jurisdiction is confirmed. If you email us, your mail provider and the recipient process the content you voluntarily send.