Effective date: July 23, 2026 · Applies to the Insoria iOS application and insoria.app
Insoria ("we", "us") helps you understand sleep supplements and track your sleep.
This policy explains what data we collect, why, and the choices you have. The short
version: we collect the minimum needed to run the app, we never sell your data, and
your health data is never used for advertising.
1. Data We Collect
Account data. If you sign in with Apple or Google: a user identifier and,
if you share it, your email address. You can also use Insoria anonymously — in that
case we only store a random anonymous identifier generated on your device.
Quiz answers and supplement stack. Your answers about sleep habits and the
supplement routine built from them.
Sleep journal and tracking data. Evening/morning logs, sleep quality
ratings, notes, and sleep session metrics (duration, phases, awakenings) recorded by
the app's tracking features.
Apple Health (HealthKit) data. Only if you explicitly grant permission, we
read sleep-related data from Apple Health to improve your sleep statistics.
HealthKit data is used solely to provide app features. It is never used for
advertising or marketing, never shared with third parties for their purposes, and
never sold. You can revoke access at any time in iOS Settings → Health.
Images you scan. When you scan a supplement label or screenshot, the image
is transmitted securely to an AI processing provider to extract the ingredient list.
Images are processed transiently for analysis and are not used to train models by us.
We store the resulting text analysis (product name, ingredients) in your scan
history — not the image itself.
Usage analytics. Anonymous app events (e.g. "scan completed") tied to a
random identifier, used to fix problems and improve the product.
Purchase data. Subscriptions are processed by Apple. Our subscription
provider (Adapty) receives purchase receipts to activate Premium. We never see your
payment card details.
2. What We Do NOT Do
We do not sell your personal data — ever.
We do not use health or sleep data for advertising.
We do not show third-party ads in the app.
We do not require an account to use core features.
3. Service Providers
We use a small number of processors to run Insoria: cloud database and
authentication (Supabase), AI ingredient analysis (OpenRouter / Google Gemini),
subscription management (Adapty), affiliate program attribution (GoMarketMe — purchase attribution only, no ad tracking, no IDFA), and Apple (sign-in, purchases, HealthKit,
notifications). Each provider receives only the data required for its function.
4. Data Retention & Deletion
Your data is retained while you use the app. You can delete your account and all
associated data at any time in Profile → Settings → Delete Account — deletion
is immediate and irreversible. Anonymous users can erase their data via
Profile → Settings → Erase My Data. You may also email us for deletion.
5. Security
Data is transmitted over encrypted connections (HTTPS/TLS) and stored with
access controls. No system is 100% secure, but we follow industry-standard
practices to protect your information.
6. Children
Insoria is not intended for children under 13 (or the minimum age in your
jurisdiction), and we do not knowingly collect data from them.
7. Your Rights
Depending on your location, you may have rights to access, correct, export, or
delete your personal data. Contact us at the email below and we will respond within
30 days.
8. Changes
We may update this policy; material changes will be announced in the app. The
effective date above always reflects the current version.