Privacy Notice
Last updated: September 21, 2026
This Privacy Notice explains how DeWayne Woods, doing business as Soul Engineer and operating the Inner Wake service, collects, uses, and protects your personal data when you use the app or website.
1. Who We Are (Data Controller)
Inner Wake is operated by DeWayne Woods, doing business as Soul Engineer and operating the Inner Wake service (the "Seller", "we", "our", or "us"), with a principal place of business at 1041 Market St, San Diego, CA 92101, United States. We act as the data controller for the personal information we collect from you when you create an account and use the Inner Wake app. You can contact us about this notice at privacy@innerwake.live.
2. Categories of Personal Data We Collect
We collect: (a) Account data — your email address and an encrypted password; (b) Profile data — display name, onboarding answers, companion preferences; (c) Practice data — check-ins, reflections, ritual entries, affirmations, scripts, evidence logs, and other emotional content you create inside the app; (d) Device & usage data — IP address, browser type, device identifiers, pages visited, and basic telemetry needed to operate the service securely; (e) Support data — any messages you send us. We do not collect your real name, address, phone number, or precise location unless you choose to provide it.
3. How We Use Your Data and Legal Basis
We use your data to: (a) create and maintain your account and deliver the service (legal basis: performance of a contract); (b) personalize your practice and AI-guided responses (legal basis: performance of a contract); (c) keep the service secure, prevent fraud, and improve the product (legal basis: legitimate interests); (d) comply with tax, accounting, and other legal obligations (legal basis: legal obligation); (e) send you essential service emails (legal basis: performance of a contract). We never sell or rent your personal data, and we do not use it for third-party advertising.
4. AI Processing
When you use AI features such as the Current Guide and Affirmation Coach, the prompts and emotional context you submit are sent to our AI service providers (currently Google and OpenAI, accessed via the Lovable AI Gateway) to generate a response. These providers process the data on our behalf as subprocessors and do not use it to train their general models. You will be told before any AI feature sends your data.
5. Who We Share Data With
We share personal data only with the following categories of recipients: (a) Hosting and infrastructure providers (Lovable Cloud / Supabase) who store your data on our behalf; (b) AI processing providers (see Section 4); (c) Email delivery providers used for transactional and authentication emails; (d) Paddle.com Market Limited, our Merchant of Record (see Section 6); (e) Professional advisers (legal, accounting) where strictly necessary; (f) Authorities or regulators where required by law. All providers act as our processors under appropriate contractual safeguards.
6. Payments and Merchant of Record
All purchases of paid plans inside Inner Wake are processed by our reseller and Merchant of Record, Paddle.com Market Limited ("Paddle"). When you make a purchase, Paddle independently collects and processes your payment information (such as billing name, billing address, and payment instrument details) as a separate data controller for that information. Paddle also handles invoicing, sales tax, refunds, and chargebacks. Their privacy notice is available at https://www.paddle.com/legal/privacy.
7. International Transfers
Our hosting, AI, and payment providers may process your data in countries outside your own, including the United States and the European Union. Where data leaves the UK or EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or equivalent mechanisms.
8. Data Retention
We keep account, profile, and practice data while your account remains active so we can provide the Service. Support correspondence is retained for up to 24 months after the request is closed, and essential security and access logs are retained for up to 12 months. If you delete your account from the Profile screen, personal data tied to your account is permanently removed from our active systems within 30 days and from routine backups within 90 days. Paddle retains billing, transaction, tax, refund, and chargeback records under its own privacy notice and applicable legal requirements. We retain any records that we are legally required to keep only for the required period, after which they are deleted or anonymized.
9. Your Rights
Subject to your local law, you have the right to: access the personal data we hold about you; correct inaccurate data; request deletion ("right to be forgotten"); restrict or object to certain processing; receive a portable copy of your data; and withdraw consent where processing is based on consent. You can exercise most of these rights directly inside the app (export and delete are available on the Profile screen). For anything else, email privacy@innerwake.live and we will respond within one month. If you are in the UK or EEA, you also have the right to lodge a complaint with your local data protection supervisory authority.
10. Security
We use industry-standard technical and organisational measures to protect your data, including TLS encryption in transit, encryption at rest, row-level security policies that ensure only you can read your own data, restricted internal access, and regular security review of our infrastructure. No system is perfectly secure, but we treat your reflections as sensitive and protect them accordingly.
11. Cookies
Inner Wake uses only essential cookies and local browser storage required for authentication, session continuity, and saving your preferences locally. We do not use advertising cookies, analytics cookies, or third-party trackers.
12. Children's Privacy
Inner Wake is not intended for users under the age of 13 (or 16 in the EEA/UK where required). We do not knowingly collect personal information from children. If you believe a child has provided us with data, contact us at privacy@innerwake.live and we will remove it.
13. Changes to This Notice
We may update this Privacy Notice from time to time. Material changes will be communicated through the app or by email. The "Last updated" date at the top of this page reflects the most recent revision.
14. Contact
Questions about this notice or your personal data: privacy@innerwake.live.