Privacy policy.

InnerScript is a youth mental health community. We treat your data with the same care we ask the community to treat each other. This policy describes exactly what we collect, and it matches what the code and database actually do.

What we collect

Only two things are required to have an account:

• Your name (or a username you choose).
• Your email address.

When you sign in with Google we receive your name and email. We discard everything else Google sends (profile photo, locale, Google ID payload). We do not store Google access or refresh tokens.

What we do not collect

• No profile photos or location from Google.
• No OAuth tokens retained after sign-in.
• No tracking or advertising cookies. No third-party analytics.
• No selling or sharing of personal data with anyone.

What you choose to add

A bio, avatar, and role on your profile are optional and entirely up to you. Posts and replies you write are public to the community. You can edit or remove them at any time.

Your rights

• See your data: it is your profile and your posts, visible to you.
• Delete your account: this permanently removes your account, profile, posts, replies, and Google link, with no soft-delete and no retention. Do it any time from account deletion.

Security and safety

Passwords are hashed, never stored in plain text. Email verification is required for email signups. This community offers peer support and is not a substitute for professional care. If you are in crisis, contact a local emergency line or a trusted adult immediately.

Contact

Questions about your data: innerscript2@gmail.com.