Privacy Policy
Last updated: 4 November 2026
1. Who we are and what this policy covers
This Privacy Policy explains how LOOK INSIDE MEDITATIONS LTD ("we", "us", "our") collects, uses, shares and protects personal data when you use Look Inside:
- our website, https://lookinside.space/;
- the Look Inside app for iOS, available on the App Store.
In this policy, the "Services" means all of the above together. This policy applies only to Look Inside. Look Inside is an app for meditation, breathing exercises, yoga and tracking your emotional state.
2. The short version
- You sign in with Apple, Google or your e-mail address. Your emotion check-ins, notes and journal entries are stored in your account so you can see them on any device.
- Your check-ins and journal are personal and can reveal information about your mental wellbeing. We use them only to show you your history and suggest practices, and we never sell them or use them for advertising.
- We use analytics (Firebase Analytics, Amplitude) to understand how the app is used, attribution (AppsFlyer) to measure which campaigns bring new users, and Adapty with Apple to handle subscriptions.
- Look Inside does not use AI or language-model services and does not show ads.
- You can delete your account and your data in the app: Settings → Delete all data.
3. Data we collect
Data you give us
- Account. When you sign in with Apple, Google or e-mail and password, our authentication provider (Firebase Authentication, Google) stores your e-mail address and an account identifier. With Sign in with Apple you can choose to hide your e-mail address. We do not ask for your age or gender.
- Emotion check-ins. The emotion you choose, its group and zone, the activity tags you pick or type, an optional free-text note and the time. The check-in you make during onboarding is kept on your phone until you create your account and then saved to it.
- Journal. The entries you write, with their dates. You can edit and delete them.
- Onboarding answers. What you would like help with (for example anxiety, pressure, screen time, burnout, sleep quality, emotions or attention/ADHD) and how you want to tune the app.
- Yoga questionnaire. Your goal, body areas, experience, where and when you practise, and how you have been feeling (stress, anxiety, fatigue, worry, irritability, low mood, sleep). These answers stay on your phone and are not sent to us.
- Your activity in the app. Favourites, the programmes you follow and your progress in them.
- Feedback. If you rate a practice or tell us why you stopped one, we store your account identifier, the practice and what you wrote.
- Support. If you write to us, we receive your e-mail and whatever you include. The support e-mail the app pre-fills contains your iOS version, app version, device model and account identifier so we can find your account.
Check-ins, notes, journal entries and some onboarding answers can reveal information about your mental health. We treat them as special-category (health) data: we process them only to provide the features you use them for, on the basis of your explicit consent, which you give by choosing to enter them and can withdraw at any time by deleting them or your account.
Data collected automatically
- Usage and device data. Firebase Analytics and Amplitude receive events about how you use the app — screens and taps, sessions, the onboarding answers and the emotion and zone you choose at your first check-in, the activity tags you pick, whether you allowed notifications, paywall views and how you signed in — together with your account identifier, device model, iOS and app version, language, approximate location derived from your IP address and the campaign you came from. Your notes and journal text are never sent to analytics.
- Attribution. AppsFlyer records that the app was installed or opened from a link or advertising campaign, with your account identifier and, only if you allow tracking, your device's advertising identifier (IDFA).
- Content delivery. Audio, video and images are downloaded from our storage provider (DigitalOcean Spaces), which, like any web server, sees your IP address and device type.
Notifications
If you allow notifications, the app schedules practice reminders locally on your phone. We do not send remote push notifications and do not collect a push token.
The app does not access your camera, microphone, photos, location or Apple Health data.
4. How we use data and our legal bases
We use personal data only for the purposes below. Where the UK GDPR or the EU GDPR applies, each purpose relies on the legal basis shown.
| Purpose | Legal basis |
|---|---|
| Create and run your account, save your check-ins, journal, favourites and progress, and show your history | Performance of our contract with you; for wellbeing data, your explicit consent |
| Suggest practices that fit how you feel and what you asked for help with | Performance of our contract; your explicit consent for wellbeing data |
| Sell and manage subscriptions, restore purchases | Performance of our contract |
| Understand how the app is used, fix problems and improve it (analytics) | Our legitimate interests in a working, useful app; for wellbeing-related events, your explicit consent |
| Measure which campaigns bring new users (attribution) | Our legitimate interests; where your device's advertising identifier is used, your consent through Apple's tracking prompt |
| Answer your support requests and feedback | Our legitimate interests; performance of our contract |
| Keep the Services secure, prevent fraud and comply with the law | Legitimate interests; legal obligation |
We do not use your data for automated decisions that have legal or similarly significant effects on you.
5. Our iOS app: purchases and tracking
Purchases through Apple
In the iOS app, subscriptions are sold through Apple's In-App Purchase. Apple processes the payment under its own privacy policy and does not tell us your name, Apple ID or payment details. We use Adapty (Adapty Tech Inc.) to validate purchases and to know whether your subscription is active; the Adapty SDK in the app receives your account identifier (as customer ID), the AppsFlyer identifier and attribution data about the campaign you came from, your device model, iOS and app version, locale, time zone, App Store storefront, IP address, purchase and receipt information from Apple, and which paywalls you were shown.
The "Allow tracking" prompt
The app shows Apple's App Tracking Transparency prompt. We use it for attribution only: if you allow tracking, the AppsFlyer SDK may read your device's advertising identifier (IDFA) to tell which advertising campaign led to your install, and passes that result to Adapty. The app does not show ads and we do not combine your data with other companies' data for advertising. If you decline, every feature of the app, including paid features, works the same. You can change your choice at any time in iOS Settings → Privacy & Security → Tracking.
6. Payments on the web
Purchases on our website lookinside.space are processed by Stripe (Stripe, Inc. and its affiliates). You enter your card or wallet details (such as Apple Pay or Google Pay) directly into Stripe's payment form; they go to Stripe and never reach our servers. Stripe also receives your e-mail address, IP address and information about your device and browser to process the payment, prevent fraud and meet its legal obligations; for some of this processing Stripe acts as an independent controller (see Stripe's privacy policy). We receive from Stripe and keep what we need to manage your purchase: a Stripe customer ID, the plan, price and currency, and the status and dates of your payments and refunds.
7. Who we share data with
We share only what each recipient needs. Analytics and attribution providers never receive your name or e-mail address — only a random account identifier and, if you allow tracking, your device's advertising identifier. Sign-in and subscription providers receive the details they need to sign you in and process your purchases. Your notes and journal entries are never sent to analytics or attribution providers.
We share personal data with the following categories of recipients:
- Hosting and storage providers — Google Firebase, which stores your account, check-ins and journal, and DigitalOcean, which delivers our audio and video content.
- Sign-in providers — Apple and Google, if you choose to sign in with them.
- Subscription providers — Apple and Adapty, which process purchases and tell the app what you have paid for.
- Analytics and attribution providers — Firebase Analytics, Amplitude and AppsFlyer, which help us understand how the app is used and which campaigns bring new users.
- Authorities, advisers and successors when the law or a court requires it, to protect our rights, users or the public, or if our company or Look Inside is sold, merged or reorganised (the successor remains bound by this policy).
Our service providers process data on our behalf under data-processing terms; where a provider uses data for its own purposes, it acts as an independent controller under its own privacy policy. On request to [email protected] we will send you the current list of our service providers.
8. Cookies and similar technologies
Our website lookinside.space does not use cookies, analytics or advertising trackers. The short quiz on the website runs entirely in your browser: your answers are not sent to us or stored. Like any website, the page fonts (Google Fonts) and the animation library (cdnjs, Cloudflare) are loaded from their providers, which receive your IP address and browser details to deliver them. The app does not use cookies; it stores your settings and caches on your phone, and the SDKs described above use their own identifiers on your device.
9. We do not sell your data
We do not sell, rent or trade personal data. We do not share personal data with data brokers or for cross-context behavioural advertising.
10. How long we keep data and how to delete it
- Account data, check-ins and journal are kept while you have an account. Individual journal entries can be deleted at any time.
- Delete all data. In the app, Settings → Delete all data deletes your account, your profile, check-ins and journal. Data kept on your phone (settings, caches, your yoga questionnaire) is removed when you delete the app.
- Other records. Onboarding answers and feedback messages, and the analytics and attribution data held by Firebase, Amplitude and AppsFlyer, are deleted on request: write to [email protected] from the e-mail of your account (or include your account identifier from the pre-filled support e-mail) and we will delete them within one month.
- Analytics data is otherwise kept for as long as needed to analyse use of the app, then deleted or anonymised under our providers' retention settings.
- Purchase records are kept as long as tax and accounting law requires.
11. Your rights
Depending on where you live, you have some or all of the following rights over your personal data:
- access — to get a copy of the personal data we hold about you;
- correction — to have inaccurate data corrected;
- deletion — to have your data deleted;
- restriction and objection — to limit or object to some processing, including processing based on our legitimate interests and any direct marketing;
- portability — to receive data you gave us in a machine-readable format;
- withdrawal of consent — where we rely on your consent, to withdraw it at any time, without affecting processing that took place before;
- not to be discriminated against for exercising any of these rights.
To exercise a right, write to [email protected], from the e-mail address of your account if you have one. We may ask you to confirm your identity before acting on a request, and we answer within one month (or within the period set by the law that applies to you).
If you are in the United Kingdom, the European Economic Area or Switzerland and believe we have not handled your data properly, you can complain to your local data-protection authority; in the UK this is the Information Commissioner's Office (https://ico.org.uk/). We would appreciate the chance to resolve your concern first.
US state privacy rights. If you live in California or another US state with a consumer privacy law, you have the rights above as your state's law defines them. We do not sell personal information and do not share it for cross-context behavioural advertising as those terms are defined in California law.
12. International transfers
LOOK INSIDE MEDITATIONS LTD is based in the United Kingdom. Some of our service providers are located in, or process data in, other countries, including the United States. Where personal data from the UK, EEA or Switzerland is transferred to a country that does not have an adequacy decision, we rely on appropriate safeguards such as the UK International Data Transfer Addendum or the European Commission's Standard Contractual Clauses, or on the provider's certification under the EU-US Data Privacy Framework and its UK Extension.
13. Security
We protect personal data with technical and organisational measures appropriate to the risk, including encryption in transit (HTTPS/TLS), access controls limited to the people who need access, and providers bound by confidentiality and data-processing terms. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If you believe your data has been compromised, contact us at [email protected].
14. Children
Look Inside is intended for people aged 18 and over and is not directed to children. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, contact us at [email protected] and we will delete it.
15. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. We will post the new version on this page and change the "Last updated" date above; if the changes are significant, we will also tell you in the Services or by e-mail where we can. The version on this page is always the current one.
16. Contact us
If you have any questions about this Privacy Policy or your personal data, write to LOOK INSIDE MEDITATIONS LTD at [email protected].
LOOK INSIDE MEDITATIONS LTD is the controller of the personal data described here.