Privacy Policy

Welcome to inBetween. We are committed to protecting your privacy and handling your personal data transparently. This privacy policy explains how we process information when you use the inBetween app. Our philosophy is simple: your story belongs to you. We only collect what is strictly necessary for the app to function, and we never sell or share your data with third parties for commercial purposes.

inBetween · Life (general partnership), based in the Netherlands. Chamber of Commerce (KvK) no.: 42180142 Email: hello@iaminbetween.com

Name: the first name you optionally enter when setting up the app.

Voice recordings: audio files you record yourself, stored as .m4a on your device.

Transcriptions: the text generated from your voice recording.

App settings: language preference, theme, and whether you have completed onboarding.

Audio fragment (temporary): when you choose to transcribe, your recording is sent once to an external API for processing. This file is not retained by us afterwards.

Optional pseudonymous usage statistics: these are off by default. Only when you enable them in Settings do we send limited technical usage data to Supabase in the EU. This may include a random installation ID, language, platform, app version, session count, broad region code, hour of day and the type of app action. We never send question text, recordings or transcriptions, nor your name or email address. You can turn this off at any time; the app then removes the local installation ID.

Feedback (optional): if you send a message via the feedback button, we process the text you type yourself, together with the type (bug, suggestion or other), your language setting, platform and app version. We do not ask for your name or email address — feedback is anonymous, unless you put personal data in the message yourself.

Special categories of personal data: your recordings and transcriptions may contain sensitive information (for example about health, beliefs or emotions) — but only if you record it yourself. This data stays locally on your device and is only sent to OpenAI when you choose to transcribe or generate a story. By using that feature you give your explicit consent for this (Art. 9(2)(a) GDPR).

We collect NO account or login data, NO GPS location data, NO cookies or tracking, NO advertising profiles, NO personally identifiable analytics, NO data from other apps on your device and NO device identifiers (such as IDFA or IMEI). We do collect optional pseudonymous usage statistics as described in article 3.

We process your data on the basis of:

• Consent (Art. 6(1)(a) GDPR) — you give explicit consent at first use of the app.

• Performance of a contract (Art. 6(1)(b) GDPR) — processing necessary for the core functionality of the app.

• Legitimate interest (Art. 6(1)(f) GDPR) — to keep the app safe and functional.

• To make the app work: saving and playing recordings, showing transcriptions, saving settings.

• To tailor your questions: the app may decide locally, on your own device, which question to show based on the themes you engage with. This determination never leaves your device.

• To provide AI features: transcription via Whisper and title generation, story writing, read-aloud and suggesting a follow-up question based on your earlier recordings via GPT (both OpenAI). These requests pass through our own secure server, which only relays them and stores nothing.

• We do NOT use your data for advertising, commercial profiling or resale.

All personal data — recordings, transcriptions and settings — are stored exclusively on your own device via the local database and your phone's file system. inBetween keeps no copy of your data. Our server only relays AI requests to the AI service and does not store or log any recordings, transcriptions or other content. When you delete the app, all data is automatically erased.

Data is retained for as long as you use the app. You can delete recordings and transcriptions at any time via the app. When the app is deleted, all data is immediately and permanently erased from your device.

Exception – server data: the optional pseudonymous usage statistics and any feedback messages are not stored on your device, but in our EU database (Supabase, Ireland). We keep these for a maximum of 12 months, after which they are automatically deleted. Because this data contains no directly identifying information, it does not disappear when you delete the app.

We share data exclusively with the following sub-processors, and only to the extent necessary:

• OpenAI (US) — for audio transcription via Whisper and for generating titles, stories and read-aloud audio via GPT. Your audio file and text fragments are sent once per request and not retained by OpenAI for training after processing. See openai.com/policies.

• Supabase (data in the EU – Ireland) — for storing usage statistics and feedback messages. The data is physically located on servers in Ireland. Supabase Inc. is a US company, but your data does not leave the EU. See supabase.com/privacy.

• Resend (US) — to deliver your feedback message to us as an email (hello@iaminbetween.com). Resend only processes the content of your feedback message; we do not pass on any name or email address. See resend.com/legal/privacy-policy.

• RevenueCat (US) — for managing your subscription: the purchase confirmation from Apple or Google, a random user ID, and device and platform information. Your payment details go to Apple or Google only; neither RevenueCat nor we ever see them. See revenuecat.com/privacy.

We never sell your data and do not work with data brokers or advertising networks.

The country behind a service is where that company is legally established — not necessarily where your data is stored. Supabase, for example, is a US company, but your data is physically located in Ireland (EU) and does not leave the EU.

Data is processed outside the EEA (US) for AI processing (OpenAI), the delivery of feedback email (Resend) and the management of subscriptions (RevenueCat). For OpenAI and Resend this happens once, at the moment you choose to transcribe, generate a story or send feedback. For RevenueCat it continues for as long as you have a subscription. We base this transfer on the Standard Contractual Clauses (SCCs) and the EU-US Data Privacy Framework as safeguards.

The AI-generated transcriptions, titles and stories are intended solely for personal exploration. They have no legal effect and are not intended as diagnosis, advice or treatment. You remain solely responsible for decisions based on the app. AI processing only takes place at your explicit request.

Under the GDPR you have the right to:

• Access your data • Rectification of incorrect data • Erasure ('right to be forgotten') • Restriction of processing • Object to processing • Data portability • Withdrawal of consent

You can exercise all these rights yourself via the app (delete individual recordings, or erase everything at once via Settings → Data → 'Delete all my data', or delete the app). For questions you can also contact us at hello@iaminbetween.com. We respond to your request within 30 days. You have the right to lodge a complaint with your national data protection authority.

If, despite our measures, a data breach occurs, we report it within 72 hours to the Dutch Data Protection Authority when it poses a risk to your rights and freedoms (Art. 33 GDPR). If a breach is likely to result in a high risk, we also inform those affected directly and without undue delay (Art. 34 GDPR).

inBetween is not intended for persons under 16 years of age. We do not knowingly collect data from minors. If you become aware of this, please contact us at hello@iaminbetween.com so we can delete the data.

inBetween is developed with care and continuously improved. The app is intended for personal use and is not a substitute for professional psychological or medical help. Because your data is stored solely on your own device, we recommend keeping your own copy of any important memories you do not store elsewhere.

We may update this privacy policy from time to time. For significant changes you will be notified via the app. The date at the top of this policy always indicates the most recent version.

This privacy policy and the processing of your data are governed by Dutch law, alongside the General Data Protection Regulation (GDPR) and the Dutch GDPR Implementation Act (UAVG). The Dutch Data Protection Authority (Autoriteit Persoonsgegevens) is the competent supervisory authority. Any disputes arising from this will be submitted to the competent court in the Netherlands.

Questions or comments about this privacy policy?

hello@iaminbetween.com