Privacy Policy
Effective date: June 2026 Last updated: June 2026
This Privacy Policy describes how InnerWorks (“we,” “us,” or “our”) collects, uses, and protects your personal information when you use the InnerWorks platform and mobile application (the “Service”).
InnerWorks is operated by Gigabox Research (“Gigabox”), a technology company.
1. Information we collect
Information you provide
- Profile information — During onboarding, you provide values, goals, professional situation, and content preferences. This information is used to personalize your daily content.
- Reflections — Free-text responses you write during daily practices. These are stored for your personal reference.
- Account information — Email address and authentication credentials (managed by Clerk, our authentication provider).
- Communication — Any messages you send to our support team.
Information generated by the Service
- Engagement records — Which practices you started, completed, and when. Used for progress tracking and aggregate analytics.
- Content generation logs — Technical records of AI content generation (provider, model, token usage). Used for platform operations and cost management.
- Usage analytics — App opens, feature usage patterns, and session data. Used for platform improvement.
Information we do NOT collect
- Medical or health records
- Biometric data
- Financial information (bank accounts, credit cards, income)
- Precise location data
- Contact lists or social media connections
- Browser history or cross-app tracking data
2. How we use your information
| Purpose | Data used |
|---|---|
| Personalize daily content | Profile (values, goals, situation), current theme, engagement history |
| Track your progress | Engagement records, streaks, completion data |
| Provide aggregate analytics to administrators | Anonymized engagement metrics (subject to cohort minimum) |
| Improve the platform | Usage analytics, error logs |
| Communicate with you | Email address (invitations, notifications, support) |
| Generate AI content | Profile context sent to AI providers for content generation |
3. AI content generation
InnerWorks uses AI language models (currently Anthropic’s Claude) to generate personalized daily content. To do this, your profile context (values, goals, situation, theme) is sent to the AI provider as part of the content generation request.
- AI providers process this data only for generating your content
- We do not permit AI providers to use your data for model training
- Content generation requests do not include your name, email, or other directly identifying information — only your profile context
4. Data sharing
With your organization’s administrators
Administrators see aggregate engagement data only — total completion rates, practice balance, and trend data for the organization as a whole. Individual-level breakdowns are subject to a cohort minimum of 10 active users.
Administrators cannot see:
- Your reflections
- Your individual completion patterns (below cohort threshold)
- Your profile details (values, goals, situation)
With third parties
- We do not sell your personal data to any third party
- AI providers (Anthropic) receive profile context for content generation, as described above
- Authentication provider (Clerk) manages your sign-in credentials
- Email provider (Resend) delivers invitation and notification emails
- We may disclose information if required by law or to protect the rights, safety, or property of InnerWorks, our users, or the public
5. Data retention
- Active accounts — Your data is retained for the duration of your active account
- Account deletion — When you request deletion, your data is removed from our systems within 30 days
- Tenant closure — When an organization discontinues InnerWorks, all tenant data is deleted within 30 days of written confirmation
- Backups — Routine backups are maintained for disaster recovery and are subject to the same deletion timelines
6. Your rights
You have the right to:
- Access your personal data through the app (profile, reflections, engagement history)
- Correct your profile information at any time through the app
- Export your data by contacting info@gigabox.ai
- Delete your account and all associated data by contacting info@gigabox.ai
- Opt out of push notifications and email communications through the app’s settings
- Withdraw consent for data processing by deleting your account
7. Data security
We implement the following security measures:
- All data in transit is encrypted via TLS/HTTPS
- Database access is restricted to the application backend
- Authentication is managed by Clerk, a dedicated identity platform
- Infrastructure runs on Google Cloud Platform with standard security controls
- Database credentials and API keys are stored securely on the server, never in application code
8. Children’s privacy
InnerWorks is not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided personal information, we will take steps to delete it.
9. International data transfers
InnerWorks infrastructure is hosted in the United States (Google Cloud, us-central1 region). If you are accessing the Service from outside the United States, your data will be transferred to and processed in the United States.
10. Changes to this policy
We may update this Privacy Policy from time to time. We will notify users of material changes through the app or via email. Your continued use of the Service after changes constitutes acceptance of the updated policy.
11. Contact
For questions about this Privacy Policy or to exercise your data rights:
Email: info@gigabox.ai
Gigabox Research Philippines