Inlay

A private voice-first journal

Privacy Policy

Last updated: April 2026

This Privacy Policy applies to the Inlay mobile application ("Inlay", "the app").

Overview

Inlay is a private, on-device voice journaling app. This policy explains how Inlay handles your data. The short version: your data never leaves your device.

Microphone Access

Inlay requests access to your device's microphone for one purpose only: to record your voice journal entries.

• Microphone access is requested only when you initiate a recording.
• Recordings are stored locally on your device in private, app-only storage.
• No audio is streamed, uploaded, or transmitted to any server or third party at any time.

On-Device AI Processing

All AI-powered reflection and analysis is performed locally on your device using Gemma, an open-weights language model originally published by Google. Gemma runs entirely on-device via Google's LiteRT-LM runtime.

• The model file (~2.5 GB) is downloaded once during initial setup from Inlay's model hosting on Cloudflare R2 (models.inlayapp.com), and is then stored locally on your device.
• After the one-time download, Inlay does not require an internet connection to function.
• Your journal entries, voice recordings, and AI-generated reflections are never sent to any server — including Inlay's, Google's, or any third party's — for processing.
• No transcripts, summaries, feelings, or questions generated from your entries leave your device.

Data Storage

All data Inlay creates or stores lives exclusively on your device:

Data	Where stored	Leaves device?
Voice recordings (.m4a)	App private storage	Never
AI reflections (summary, feeling, question)	Local Room database	Never
Gemma AI model file (after one-time download)	App private storage	Never
Journal history	Local Room database	Never

Inlay does not use cloud storage, user accounts, or any backend service for journal data.

Internet Access

Inlay requests internet access for one purpose: the one-time download of the Gemma AI model during initial setup (~2.5 GB over Wi-Fi). The model is delivered from Inlay's content-delivery infrastructure on Cloudflare R2.

After setup, Inlay operates entirely offline. No ongoing network access is required or used for journaling or reflection.

During the one-time model download, Cloudflare (the CDN provider) may log standard delivery data such as IP address and User-Agent as part of normal content delivery. These logs are not accessed by Inlay and contain no journal content.

In-App Purchases (Inlay Pro)

Inlay offers an optional one-time purchase ("Inlay Pro Lifetime") that unlocks additional memory and reflection features. Purchases are processed entirely through Google Play Billing.

• Inlay does not receive, store, or transmit your payment details. All billing is handled by Google Play under Google's own privacy policy.
• Inlay reads your purchase state from Google Play on your device to verify Pro access. No purchase information is sent to Inlay servers, because Inlay has no servers.
• You can restore a previous purchase at any time via Settings → Restore purchases while signed into the Google account that made the original purchase.

For information on how Google handles billing data, see Google's Privacy Policy.

Data Deletion

You can delete your journal data at any time from Settings → Delete all journal entries. This permanently removes all entries and recordings from your device.

Uninstalling the app removes all app data, including the AI model and journal entries, from your device.

If you would like to request deletion guidance or confirmation, contact us at Founder1@threecpo.ai.

Third-Party Services

Inlay does not integrate any third-party analytics, advertising, crash-reporting, or tracking SDKs.

Inlay relies on two infrastructure services, each limited to a specific, narrow purpose:

• Cloudflare R2 — used only to host the Gemma AI model file and deliver it to your device during initial setup. See Cloudflare's Privacy Policy.
• Google Play Billing — used only for the optional Inlay Pro purchase, as described above. See Google's Privacy Policy.

The Gemma model itself is an open-weights model produced and licensed by Google. Once downloaded to your device it runs entirely on-device, and no data is sent back to Google or to Inlay during use.

Children's Privacy

Inlay does not knowingly collect information from children under 13. The app does not collect, transmit, or store any personal data on remote servers for users of any age.

Changes to This Policy

If this policy changes, the updated version will be posted here with a new "Last updated" date.

Contact

For questions about this Privacy Policy, your Inlay data, or any privacy concern, please contact:

Inlay Support
Email: Founder1@threecpo.ai

You can also reach us through the app's Google Play listing.