Consumer Health Data Privacy

This page is about one thing: the information InnieHub holds that says something about your health. It is separate from our main privacy policy on purpose, because this is the part most people actually want to know and it should not be somewhere in the middle of a longer document.

What counts as health data here

Your mood check-ins and their history. Your exposure plans and how far you got. Thought reframes, practice sessions, social battery entries and small wins. Your conversations with the InnieCare assistant. Anything you tell a professional through a session booked here. And — because it is true and pretending otherwise would be the dishonest part — the fact that you have an InnieHub account at all, since this is a community for people living with agoraphobia and social anxiety.

Who can see it

You. That is the whole list for the wellbeing tools and your InnieCare conversations.

Community moderators cannot see any of it, and that is not a policy we ask them to follow — it is enforced by the server, which refuses the request rather than the interface hiding a button. Any attempt to reach another member's wellbeing records is logged, and an automated test fails our build if a moderator account can reach a single one of those tables.

A professional you book a session with sees what you choose to tell them in that session. They do not get your mood history, your exposure plans or your InnieCare conversations.

Who we never give it to

Nobody. We do not sell health data, we do not share it for advertising, and no third-party analytics or error-tracking service receives anything from InnieCare, the wellbeing tools or InnieDate. Our analytics records two events — that a post was created and that an event RSVP changed — and identifies you to it by an opaque id that is not your name, your username or your email.

Consent, and taking it back

Each of these is asked for separately and none of them is bundled into accepting our terms: the wellbeing tools, InnieCare, and InnieDate. Agreeing to one is not agreeing to another, and you can use the community without any of them.

You can withdraw any of these consents at any time from your settings. Withdrawing stops the processing; it does not delete what already exists, which you do separately below. We keep a record of what you agreed to and when — including that you withdrew it — because we have to be able to show that consent was real, and deleting that record would delete the only proof of it.

Getting a copy, and deleting it

Your data export includes your wellbeing records and your full InnieCare conversation. It does not include messages other people sent you: those are theirs.

You can delete your InnieCare conversation on its own, at any time, without deleting anything else. Deleting your account removes the health records with it, along with the files — InnieDate photographs included — and not only the database rows that point at them.

Crisis signals

If something you write suggests you may be in immediate danger, an alert goes to our admins and to trained moderators who have signed our moderator agreement. The alert says who you are and that a signal fired. It never contains your conversation, any quote from it, or the words that triggered it.

Nothing about a crisis signal is recorded against your account. It is not a report, it is not a strike, and it changes nothing about your standing here. Reaching for help is not something we file next to infractions.

Asking us anything about this

Write to privacy@inniehub.com. You do not need to explain why you are asking.