Last updated: October 11, 2026
Innertone is provided by Mosaic Health Analytics INC. This policy explains what information the app uses, why it uses it, and the choices you have. Innertone is intended for adults aged 18 and over.
For privacy questions or requests, email hello@undertone.co.
Your voice and the AI
Before starting a voice call, Innertone identifies OpenAI and asks you to allow AI processing. When you allow processing and start a call, your microphone audio, any retained earlier pre-call answers, and a short summary of saved notes and call history are sent to OpenAI to generate replies. That summary may include your name and preferences if saved. Information you choose to share may include personal or health information.
AI-processing permission is separate from your iPhone’s microphone permission. Voice and conversation context are not sent to the AI until you allow processing. You can use Quiet support without allowing AI processing or microphone access. You can withdraw AI-processing permission in Privacy & data. Updated disclosures may require your permission again before another voice call.
Innertone does not store full audio recordings or written transcripts of your calls. The AI may create brief notes to help with a later conversation. This is different from the AI provider's own processing and retention.
OpenAI states that API data is not used to train its models by default, unless the customer opts in. Its standard Realtime API policy lists no application-state retention and abuse-monitoring retention of up to 30 days, with longer retention possible for legal or safety reasons. Project settings can affect these controls. This is not a promise of zero retention. See OpenAI's data controls.
OpenAI’s published Data Processing Addendum describes purpose limits, confidentiality requirements for authorized personnel, reasonable and appropriate organizational and technical security measures, and data-protection obligations for subprocessors. Processing is subject to documented customer instructions and applicable-law exceptions. Provider retention remains as described here; OpenAI does not store data only on your phone or follow Innertone’s local-note deletion controls.
Notes on your phone
Your phone saves your brief notes, call count and any earlier pre-call answers. Notes may include a name you shared, sensations, worries, situations, preferences, what helped or did not help, and a short call summary.
These records are kept in protected local storage, excluded from device backups. Innertone does not sync them to iCloud. A short version is sent through our voice service to the AI provider when a call starts. The voice service passes this context through without saving it as conversation history.
You can review, edit or delete notes in Settings → Your notes. Settings → Privacy & data → Delete all notes also removes the locally saved name and any earlier pre-call answers. Deleting local notes does not erase information already processed by the AI provider, delete service or feedback records, or cancel an Apple subscription.
Information used to run the service
Our voice service uses an app-assigned device identifier and a random access credential stored in your phone's Keychain. Service records include a fingerprint of that credential, available voice minutes, call timing and usage, and purchase information needed to verify and credit minutes.
Apple handles App Store payments. We use its signed transaction information to check membership and minute purchases; we do not receive your payment-card details.
The service also uses a hashed network address to limit abuse. These identifiers can link records to the same device even when they do not contain your name or email address.
Sign in with Apple and account deletion
You can optionally use Sign in with Apple to recover your membership and available minutes on another device. Innertone receives an Apple account identifier but does not request your name or email address from Apple.
Our service stores that identifier, an encrypted Apple authorization token, account access records and purchase references needed to maintain your minutes. Your phone stores its account access credential in the Keychain. Service usage and purchases are linked to your account. Notes stay on your phone and are not synced between devices.
Open Settings → Account to sign out or delete your account. Signing out removes access on this installation; it does not delete the account. Deletion requires confirmation with Apple. If a connection fails after the request is verified, our service retries it.
Account deletion removes your account identity, access credentials and associated detailed service records. We retain limited purchase references and accounting records to prevent duplicate credits and handle refunds or disputes. These do not include call recordings or transcripts.
Deleting your account removes access to its linked unused voice minutes. It does not delete notes on your phone or cancel an Apple subscription. Delete local notes in Settings → Privacy & data → Delete all notes. Manage or cancel a subscription in iPhone Settings → your name → Subscriptions. For help with deletion, email hello@undertone.co; do not send passwords or access credentials.
Feedback and support
After a call, you can choose to send a rating, written feedback, or both. Submitted feedback includes the app version and submission time and may be linked to your device's service record. It is not anonymous. Your call recording or transcript is not attached. A check-in outcome may also be saved locally.
We use submitted ratings and written feedback to assess and improve Innertone. Submitted feedback is stored by our service and reviewed by authorized Innertone team members in a restricted feedback inbox. If you email support, we and our email provider receive the address and information you include. Please avoid sending private conversation content or sensitive details that are not needed to explain the problem.
Your controls
- AI processing: You can decline consent and use quiet support. To withdraw consent for future voice calls, open Settings → Privacy & data → Withdraw consent. Starting another call will require agreement again. Withdrawal does not delete existing notes or undo earlier processing.
- Microphone: Permission is separate from AI-processing consent and can be changed in iOS Settings. A connected call can continue while the screen is locked or the app is in the background. Mute or end the call to stop sending microphone audio.
- Quiet support: It works offline and does not use your microphone.
- Urgent help: Actions open Phone or Messages after confirmation. Innertone does not read your contacts or contact anyone automatically.
The app does not include advertising or cross-app tracking SDKs.
Privacy requests and changes
Email hello@undertone.co with questions about your information or a request concerning service or feedback records. Do not send your access credentials. Controls that delete notes on your phone are separate from requests about records held by the service.
We will update this page when our information practices change and show the revised date above.
