InnerCanvas

Privacy Policy

Effective September 4, 2026

Cue Studio (“we,” “us,” or “our”) operates the InnerCanvas iOS app and this website. This policy describes the information we collect when you use InnerCanvas, why we collect it, and the choices you have.

This is a product privacy notice, not legal advice. If you do not agree with this policy, please do not use InnerCanvas.

Contact: support@innercanvasapp.com

1. Who this applies to

InnerCanvas is intended for people 13 years of age or older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, email us and we will delete it.

2. Information we collect

Account

When you create an account we collect:

  • Email address and a password (email sign-up), or
  • Information from Sign in with Apple (a unique Apple identifier, and an email address — which may be Apple’s Hide My Email relay — plus your name if you share it on first sign-in), or
  • Information from Google Sign-In (your Google identifier, email, and name if Google provides them).

We also store a display name you choose during onboarding or in Account settings.

Authentication is provided by Supabase. Passwords are handled by Supabase Auth; we do not store them in InnerCanvas’s own database.

Journal content

If you save a session, we store:

  • Your drawing or photo of a drawing
  • The prompt you used
  • AI-generated reflections, takeaways, and related analysis
  • Optional follow-up answers, notes, and emotional tags

Drawings are stored in a private storage bucket associated with your account. Other users cannot see your journal.

Device and preferences

On your device we store onboarding choices such as preferred name, a mood-focus category, and whether you have finished onboarding. These live in local storage on the phone.

Camera and photos

InnerCanvas asks for camera or photo-library access only when you choose to photograph or upload a paper drawing. Images you select are used to generate a reflection and, if you save, to store the journal entry. We do not browse your library in the background.

Sharing

If you use the system share sheet, you choose the destination (for example Messages or Photos). We do not receive a copy of that share beyond what is already in your journal.

3. How we use information

We use this information to:

  • Create and maintain your account and private journal
  • Generate drawing reflections
  • Remember onboarding preferences
  • Provide customer support
  • Improve reliability (for example, understanding that a save or reflection failed — without sending the drawing itself)
  • Comply with law and protect the service

We do not sell your personal information. We do not use your drawings or reflections for advertising.

4. AI processing (Anthropic)

When you request a reflection, InnerCanvas sends a JPEG of your drawing and related text (the prompt, category, and any words you typed before the reflection) from your device to Anthropic’s API (Claude). We use this to:

  • Generate the written reflection you see in the app
  • Check that an uploaded image looks like your own drawing rather than, for example, a famous artwork or stock photo

We send this content so the reflection feature can run. We do not send it to Anthropic for InnerCanvas marketing.

Under Anthropic’s commercial API terms, Anthropic states that it does not train its generative models on API inputs or outputs unless a customer opts into a separate program. Anthropic may retain data for a limited time for safety, abuse, and legal reasons. See Anthropic’s privacy documentation.

InnerCanvas is not therapy, diagnosis, or medical care. Reflections are interpretive and can be incomplete or wrong. If you need professional help, please contact a qualified clinician or local emergency services.

5. Other service providers

We use:

  • Supabase — accounts, database, and image storage
  • Apple — Sign in with Apple; App Store distribution
  • Google — Google Sign-In
  • Anthropic — AI reflections, as described above
  • TelemetryDeck — optional product analytics (event names such as “journal opened”). We do not send drawings, reflections, prompts, or email. User identifiers, if sent, are hashed. This is off until we configure it.
  • Sentry — optional crash reporting. We do not send drawings, reflections, or email. This is off until we configure it.

These providers process information on our behalf under their own terms and privacy policies.

6. Retention and deletion

We keep account and journal data until you delete your account, or as long as we need it to operate InnerCanvas and meet legal obligations.

Delete your account in the app: Account → Delete my account. This permanently removes your authentication record, profile, drawings, and stored images. It cannot be undone.

You can also email support@innercanvasapp.com to request deletion, access, or a correction of your display name or email.

We do not currently offer a bulk “download my data” export. You can view your journal in the app, and you can share individual drawings with the share sheet.

7. Security

We use industry-standard measures appropriate to a small consumer app, including encrypted connections (HTTPS), access rules so you can only read your own journal, and authentication via Supabase. No method of transmission or storage is perfectly secure.

8. Your rights

Depending on where you live (including California and the European Economic Area / UK), you may have the right to access, correct, delete, or export personal information, or to object to certain processing. Email support@innercanvasapp.com. We will not discriminate against you for exercising privacy rights.

If we rely on consent (for example, camera access), you can withdraw it in iOS Settings; some features will then be unavailable.

9. This website

If you visit this website, your browser automatically sends technical data such as IP address, browser type, and pages requested to our hosting provider so the site can load. We do not run advertising cookies on these pages.

10. Changes

We may update this policy as InnerCanvas changes (for example, if we turn on analytics or add paid features). We will post the new version here and update the effective date. Material changes may also be noted in the app.

11. Operator

InnerCanvas is operated by Cue Studio.
Email: support@innercanvasapp.com