INSIDEX Privacy Policy
Effective Date: September 11, 2025
Data Controller: ALZHAMI LTD
Company Number: 16545604
Registered Office: 85 Great Portland Street, London, England W1W 7LT
ALZHAMI LTD (“we,” “us,” or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our INSIDEX mobile application and related services.
- Information We Collect
We collect information to provide personalized subliminal audio recommendations and improve the App.
Personal Information:
Account Data: Email address, name, password (encrypted)
Profile Data: Date of birth, gender (from onboarding), avatar emoji
Preferences: Selected wellness goals during onboarding
Usage and Activity Data:
Listening History: Sessions played, duration, timestamps
User Interactions:
Favorite session IDs
Completed session IDs
Playlist session IDs
Recent session IDs (last 10)
Total listening minutes
Daily sessions played count
Account Status: Premium membership status, account type
Technical Information:
Authentication: Firebase Auth tokens and user ID
Device Data: Device type, OS version, app version
Analytics: App usage via Firebase Analytics (anonymized)
Timestamps: Account creation, last active date
Consent Records:
Privacy consent acceptance
Marketing consent preferences
- How We Collect Information
Directly from You: When you create an account, select preferences, or contact support
Automatically: Through Firebase services when you use the App
Third-Party Services: Firebase (Google) for authentication, database, and analytics
- How We Use Your Information
Service Delivery:
Provide access to subliminal audio sessions
Track your progress and listening history
Maintain your favorites and playlists
Enforce daily session limits (3 sessions/day for free users)
Personalization:
Generate AI-powered recommendations
Customize content based on your goals
Remember preferences and recent sessions
Communication:
Send OTP verification codes
Welcome emails and service updates
Marketing (only with explicit consent)
Service Improvement:
Analyze usage patterns
Fix bugs and technical issues
Develop new features
Security and Compliance:
Prevent fraud and unauthorized access
Enforce Terms of Service
Comply with legal obligations
- Data Storage and Service Providers
Firebase (Google):
Purpose: Authentication, database (Firestore), storage, analytics
Location: europe-west region
Security: Industry-standard encryption
Email Services:
Purpose: OTP verification, newsletters (with consent)
Data Shared: Email address, name
All service providers are GDPR-compliant.
- Data Sharing
We do not sell your personal data. We share data only:
With service providers (Firebase, email)
For legal requirements
In case of business transfers (with notice)
With your explicit consent
As aggregated, anonymized insights
- Data Security
We implement:
Encryption in transit (HTTPS/TLS)
Encryption at rest (Firebase security)
Access controls and authentication
Regular security audits
Secure password storage
Report breaches to: support@insidexapp.com
- Data Retention
Active Accounts: Data retained while active
Inactive Accounts: Deleted after 24 months
Deleted Accounts: Data removed within 30 days
Analytics: Anonymized after 14 months
Legal Obligations: Some data retained as required by law
- Your Rights (GDPR)
You have the right to:
Access your personal data
Correct inaccurate data
Request deletion (“right to be forgotten”)
Restrict processing
Object to processing
Data portability
Withdraw consent anytime
Contact: support@insidexapp.com (response within 30 days)
You may lodge complaints with the UK ICO at ico.org.uk
- International Data Transfers
Data is stored in UK/EU (Firebase europe-west).
Transfers outside EEA are protected by:
Standard Contractual Clauses (SCCs)
Adequacy decisions
GDPR safeguards
- Age Restriction
The Services are for users 18+ only.
We do not knowingly collect data from anyone under 18.
If we discover such data, we delete it immediately.
Parents: Contact support@insidexapp.com if you believe we have your child’s data. - Cookies and Tracking
The App uses:
Essential cookies for authentication
Firebase Analytics (can be disabled)
No third-party advertising or tracking pixels
- Changes to This Policy
We may update this policy. Material changes notified via:
In-app notification
Email (if provided)
Update notice on app launch
Continued use constitutes acceptance.
- Contact Information
Data Controller:
ALZHAMI LTD
Company Number: 16545604
85 Great Portland Street, London, W1W 7LT
Contact:
General Inquiries: hello@insidexapp.com
Support: support@insidexapp.com
Phone: +44 7456 460096
Automated Emails: noreply@insidexapp.com
(Please do not reply to emails from this address)
This policy complies with UK GDPR, Apple App Store guidelines, and Privacy Manifest requirements.