INNER GAME
Privacy policy
Updated 9 October 2026
Inner Game and your privacy
Inner Game is an Android app for personal development, habits, goals and reflection. This policy describes the connected Android app. For privacy questions, access, correction or deletion requests, contact bhattattreya@gmail.com. Local preview mode, when labelled PREVIEW, stores your entries on that device instead of uploading them.
What we collect and why
We store your chosen display name, account reference, habits and their check-ins, goals and rewards, journal entries, Confidence Point events and account creation date. We use these records to save your journey, calculate levels and achievements, and show your history. Habit, goal and journal text may contain sensitive information that you choose to enter; include only what you want stored in your account. Habit targets and partial counts, rest and protected streak days, goal steps, chosen deadlines and missed-deadline deductions, journal question identifiers, CP shop purchases and equipped looks are also stored to provide those features. Weekly reviews are calculated from your own progress; Insights are calculated from your check-in history.
Device sign-in and security
No username or password is requested in the app. For device sign-in, your Android ID and a randomly generated device credential are sent over HTTPS to our Supabase sign-in service. It derives a private account identifier and authentication credentials. Android ID alone does not grant account access. The app keeps device credentials and session tokens in Android secure storage. Sign-in protection uses hashed device and IP-address counters; older counters are cleaned during subsequent sign-in requests after one day. Hosting services also process IP addresses, request metadata and operational logs to deliver and protect the service.
Providers, access and sharing
Supabase provides account authentication, database storage and server hosting. Our database is hosted in the United Kingdom; provider infrastructure and support may process data in other locations. Account access rules restrict app users to their own records. Authorized service operators may access records when necessary for operation, security or an account support request. Data is encrypted in transit, but journal entries are not end-to-end encrypted. We do not sell your data or use advertising SDKs. Google provides optional usage analytics as described below.
Your choices
Sharing is optional and opens the Android share sheet. An achievement share can include a habit or goal title, points, rank and badges; journal entry text is not included. The app you choose to share with handles that shared content under its own policy. Read source opens an external website, which has its own privacy practices. Support email uses your email provider and contains the information you decide to send.
Local notifications and storage
Daily reminders are optional. Notification permission is requested when you enable them, if it has not already been granted. General reminder times and individual habit reminder times, habit identifiers and names are stored on your device. An individual habit reminder may display its habit name in a notification; notifications use Android's private visibility setting. Reminders never include journal text or upload a push token. You can change or remove an individual reminder in Edit habit or You > Daily reminders, or disable notifications in Android settings. Stopping or removing a habit cancels its individual reminder. Walkthrough status, weekly-review dismissal, review-request cooldowns and the wisdom rotation are also stored on your device. The focus timer stores the selected habit ID, start day and end time on your device so an interrupted session can resume; it does not record audio. The optional Android home-screen widget stores only today's date and aggregate practice counts on your device. We do not request access to your contacts, microphone, camera, photos or precise location.
Craving support and spoken guidance
The craving support topic, custom name, timer and session results are used only while that screen is open. Inner Game does not save them to your account or send them to Supabase. The optional guided meditation passes its built-in script to your phone's configured Android text-to-speech engine to speak aloud. A custom topic name is not included in the spoken script. Some speech engines may use a network service under their own settings and privacy terms. You can read the script instead, stop playback, or leave the screen at any time. Opening an external support guide sends you to that site's own privacy practices. The app does not request microphone access.
Offline progress on your phone
After initial online setup, an account-specific database on your phone stores your account snapshot, including journal writing, and changes waiting to sync. Saved changes survive closing the app. The app attempts to sync when open and when you return to it with a connection; Android may stop it in the background. The server accepts queued actions from the previous 30 days using their recorded time and timezone. Changes that conflict with a reset or are outside that window are kept on the phone for you to review and copy before explicitly discarding them. First setup, shop purchases, equipping looks, using freezes, restoring goals, resets and account deletion require a connection. Clearing app storage or uninstalling can erase changes that have not synced. Android app backup is disabled for this data.
Linked media and playback
An optional habit media link, its type and daily playback target are saved with your habit in Supabase and the local account cache. Direct audio and video stream from the address you choose only after you open the player and continue past the provider notice. That provider receives your IP address and media requests under its own privacy practices. We do not send your Inner Game name, journal, account identifier or device sign-in credentials to it. Playback position, actual time played and covered portions are stored only on this phone to resume an item and calculate today's completion. Playback pauses when you leave the app. Removing a habit or resetting progress clears its local playback records; account deletion clears all account playback records and provider-notice preferences. Saved YouTube links open externally in YouTube or your browser, under that provider's terms and privacy policy. Inner Game does not embed YouTube, obtain its viewing history or automatically complete a habit from YouTube playback. Media links may include private access tokens: use public links that you are comfortable saving in your account.
Google Analytics and your controls
From version 1.2.17, usage analytics starts automatically on production Android installations unless you previously turned it off or declined the earlier invitation. Version 1.2.16 starts analytics only after you allow it. You can turn analytics off or on anytime in You > Usage analytics, without affecting your progress. We use Google Analytics for Firebase to understand general app use and improve Inner Game. It receives fixed screen names and events such as creating or completing a habit or goal, saving Wins, reaching a level or achievement, opening tools and making a CP shop purchase. It does not receive your habit or goal names, journal writing, craving topic, media links, account reference, Android ID or device sign-in credentials from Inner Game. We do not set an analytics user ID or link the analytics installation identifier to your Supabase account. When enabled, the SDK also processes an app installation identifier, interaction timestamps and session information, app/device information and approximate location derived from network information. Advertising ID collection, advertising consent and ad personalization are disabled. Google processes this data under its Analytics privacy and service terms; processing may occur outside your country. Your choice is stored on this installation and remains across progress resets. Turning analytics off stops future collection and resets its local identifier. Deleting your Inner Game account also disables analytics and resets local analytics data. Previously uploaded analytics may remain according to Google Analytics retention settings and are not automatically deleted with your Supabase account. No analytics events earn CP.
Google Play reviews
Once Inner Game is available on Google Play, you can optionally rate or review it through Google Play. Google handles the rating and review under its own terms and privacy policy. Reviews may be public; you can manage or delete them through your Google Play account. Inner Game does not receive your star selection or review text through the in-app review flow. Request dates are stored locally to limit prompts and are retained across progress and account resets on this installation. Reviews never earn Confidence Points or affect your progress.
Retention and deletion
Your account records remain while you use the account, until you clear the relevant data or delete the account. Deleting a goal permanently removes its definition, steps and earned rewards; a past missed-deadline deduction remains in your CP history without the goal title. Reset progress clears earned progress, deductions, partial counts, shop purchases, equipped looks and streak freezes while retaining habit and goal definitions and journal writing. Reset everything clears those records as well while retaining your account, display name and general reminder preferences. Individual reminders for removed habits are cancelled. Request identifiers and one-way request fingerprints are retained while the account exists to prevent duplicate offline, count, purchase, recovery and reset operations. These replay records do not retain a second copy of journal writing. Delete my account removes the authentication account and associated active database records, including these identifiers, and clears the account snapshot and pending changes from the local app database. Existing backup copies and infrastructure security logs expire under the hosting provider's retention settings and are not used to restore a deleted account for continued service. Support correspondence is handled through the support email account; you can request its deletion there. Content already shared with other apps must be managed with those services.
Requests and updates
You can edit your name and journal in the app, manage your habits and goals, reset data, or delete your account from You. For other access, correction or deletion requests, email bhattattreya@gmail.com with your account reference if available. We may need to verify account ownership to protect your data. Never send device credentials or session tokens. Future changes to data handling will be reflected in this policy and its updated date.