Privacy policy
instin supports your decisions and shows which personal knowledge was considered. This policy describes the current test operation.
1. Controller
Complete operator and contact details will be added before external publication.
2. Data we process
- Account and identity: email address, display name, authentication provider, device identifier, session data, and consent records.
- Decisions: situations you describe, questions and answers, generated recommendations, recorded choices, and optional follow-ups.
- Personal profile: facts, goals, preferences, values, current plans, and observations that are supported by your statements and shown to you before saving.
- Chat: the current conversation is processed to answer and to prepare a controlled profile review. Full chat transcripts are not used as permanent product memory.
- Optional source research: the topic you explicitly enter, derived suggestions, and source links. A topic is not automatically anonymous.
- Subscription and purchase: product, status, and transaction metadata from Apple; instin does not receive complete payment-card data.
- Technical operation: limited security, error, and usage metadata. Prompts, full answers, passwords, and access tokens must not be written to application logs.
3. Purposes and legal bases
Data is processed to provide requested decision support, the user-controlled profile, accounts, subscriptions, export and deletion, and to protect the service from misuse and technical failures. Depending on the operation, the legal basis may be performance of a contract or pre-contractual steps, legal obligations, legitimate interests in secure operation, or consent.
Do not enter another person's data unless you are authorised to do so. instin is not an emergency service or a substitute for legal, financial, medical, or therapeutic advice.
4. AI processing and recipients
Melious provides the core AI model. Server-side identity reduction is pseudonymisation, not full anonymisation; context that is necessary for the request may still contain personal data.
When you explicitly start read-aloud, instin sends only the selected assistant text and required language to Deepgram. Your profile, email address, and user identifier are not sent. Dictation and Live speech recognition run locally on the iPhone; Deepgram is used only for speech output.
When you explicitly start source research, instin sends only the server-side identity-reduced research topic to Parallel Search Turbo. Your profile, chat history, decisions, account identifier, and user identifier are not sent. Limited source excerpts are processed transiently; derived suggestions and source links remain reviewable workspace knowledge until you confirm them.
Apple processes authentication and App Store transactions under its own terms. Cloudflare hosts these legal pages and related security functions.
5. Storage and deletion
Persistent instin decision and profile data are stored on the instin-controlled backend in Germany. Data is retained only as long as required for its purpose, account operation, and legal obligations. In the app you can correct or deactivate profile knowledge, request a readable export, and delete your registered account or anonymous device data. Legally required billing records may be exempt from deletion.
6. Your rights
Depending on applicable law, you may request access, correction, deletion, restriction, portability, and objection, and withdraw consent for the future. You may also complain to a data-protection authority. Use the contact details above.
7. International transfers
Before public release, instin verifies processing location, contractual safeguards, retention, and any international transfers for Melious, Deepgram, and optional Parallel research. A function remains internal or disabled while a required verification is missing.
8. Changes
Material changes receive a new document version. instin will then request active consent again before further productive use.