Privacy notice

Thank you for trusting us with your information. This page explains what we collect, why, who helps us look after it, how long we keep it, and the choices you have. We have written it to be as clear as we can.

Who we areWhat we collect and whyHealth informationThe safety checkWorkplace membershipsEmails we sendWho helps usYour browserHow long we keep itYour rightsComplaintsOutside the UK

Who we are

Build Your Inner Voice is a UK sole trader business (our full business details are at the bottom of this page). We are the data controller for the information described here, which means we decide how it is used and we are responsible for looking after it.

Email: hello@buildyourinnervoice.com
Post: Build Your Inner Voice, First Floor, Swan Buildings, 20 Swan Street, Manchester, M4 5JW
We are registered with the Information Commissioner's Office, registration number ZC247314.

This page covers our website, our emails, track orders (including orders through our Etsy shop), gifts, personal and workplace memberships, and the quiz.

What we collect and why

For each part of the service you can see what we collect, what we use it for, and the legal reason that allows us to use it under UK data protection law.

Ordering a track

• What: your email address, the focus area you pick, who the track is for, the length, background sound and how audible the words are, and anything you write in "Additional details". If you order through Etsy, Etsy passes us your name, email address and what you wrote.
• Why: to write your affirmations, record them, mix them with your background sound and email you the finished track.
• Legal reason: to carry out our contract with you. For any health information in what you write, your explicit consent (see Health information).

Buying or receiving a gift

• What: the buyer's name and email address, the recipient's name and email address, the gift message, the send date, and either the choices the buyer made or the choices the recipient makes when they use the gift.
• Why: to deliver the gift on the right date, send the recipient their invitation and a reminder before it runs out, and let the buyer know when it has been used.
• Legal reason: for the buyer, our contract with them. For the recipient, our legitimate interest in delivering a gift someone has paid for, and then our contract with them once they use it.
• If you received a gift: we got your name and email address from the person who bought it. What you choose and anything you write is private to you. The buyer is only told that the gift has been used.
• If you create a gift yourself: we ask you to leave out anything about the recipient's health, and to confirm this before you order.

Membership

• What: your name and email address, the date you joined, your membership status, the focus you chose, a private key that makes your membership link work, and your Stripe customer reference. As you use your membership we also record: how many personalised tracks you ordered on the latest day (for the fair use limit), your 30 day challenge progress, the days you mark as listened in the tracker, which welcome guide you last received, the month you last used a member tool, your country (for helplines and send times), whether you have turned member emails off, any referral code you shared or used, and the date you agreed to us using health information in what you write.
• Why: to run your membership, make your tracks, send your weekly affirmations, challenge and guides, and keep your membership page working.
• Legal reason: to carry out our contract with you. For any health information in what you write, your explicit consent.

5 minute resets, team sessions and the 66 day planner

• What: what you write and the situation you pick from the list.
• Why: to write your guide, session or plan. We email you a copy so it is there whenever you need it.
• What we keep: we do not store what you write in our records. We keep a usage record with no name, no email address and nothing you wrote: which tool was used, when, the situation picked from the list, the result of the safety check, your employer if you have a workplace membership, and your one-tap answer about whether it helped. If you plan a team session, we keep your email address and the situation you picked until we send you the 2 week check-in, and then delete them.
• Legal reason: to carry out our contract with you. For any health information in what you write, your explicit consent. For the usage record, our legitimate interest in knowing which tools help people and giving employers whole-team totals.

Feedback and check-in summaries

• Once a month your membership page may ask whether your membership is helping. At the end of a 30 day mood check-in you can choose to send a short summary: your first week score, your last week score and how many days you checked in.
• Both are sent with no name and no email address. For a workplace membership they are recorded against your employer's name, so they can count towards a whole-team total.
• Legal reason: our legitimate interest in improving the service and reporting whole-team totals. Both are optional.

The inner voice quiz

• What: your first name, email address, your answers, your scores and result, where you came to the quiz from, and whether you went on to the track builder, bought a track or used the gift option.
• Why: to email you your result. If you tick the box on the quiz, we also send you two follow-up emails about your result and how tracks are made. They stop if you buy a track or unsubscribe.
• Legal reason: for your result, because you asked for it. For the follow-up emails, your consent, which you can withdraw at any time with the unsubscribe link in each one.

Employers and employer enquiries

• What: the organisation's name, the contact's name, email address and phone number, the number of memberships, billing references and the team code.
• Why: to reply to enquiries, set up and bill the workplace membership, and send the monthly team report.
• Legal reason: to carry out our contract with the employer, or take steps towards one, and our legitimate interest in running the business.

Payments

Payments are taken by Stripe, so we never see your full card details. Stripe tells us your email address, the amount and a payment reference. Stripe uses payment information as its own controller, under the Stripe privacy policy. We keep our sales records because UK tax law requires it (legal reason: legal obligation).

When you email us

We use your email and your address to reply. We keep our conversations with you as business correspondence. Our mailbox sends one automatic reply to new emails, and so it does not send it twice we record your email address and the date for 180 days. Legal reason: our legitimate interest in answering you and keeping a record of what was agreed.

Health information

What you write about yourself may include information about your health or mental health. UK law calls this special category data and gives it extra protection, and so do we. We only use it once you have given your explicit consent:

• On our website, a box appears as soon as you write something. You tick it to say yes before you can order or send your request.
• On Etsy, where there is no box to tick, we email you a one-tap button after you order. Nothing is made until you tap it. If you do not tap it within 7 days, we delete what you wrote and arrange a full refund through Etsy.

We keep a record of when you said yes and the wording you agreed to, so we can show that we asked. You can withdraw your consent at any time by emailing us or replying to any of our emails. This does not affect anything we did before, but we will not be able to make new tracks or guides from what you write after that.

We use this information only to write your affirmations, guides and plans, and to run the safety check described below. We never use it for marketing and we never share it with your employer.

The safety check

Everything you write when you order a track, ask for a 5 minute reset, plan a team session or use the planner is checked automatically by AI for signs that you might need more support than this service can offer.

• Track orders: most orders go ahead as normal. Where there are some signs, your track is still made, your email includes support resources, and we are sent a copy of what you wrote so we can follow up if needed. Where there are serious signs, your order is paused before anything is made, and we read it personally, decide whether it goes ahead and contact you. Nobody reads what you wrote unless the check flags it.
• Resets, team sessions and the planner: you always get your guide. If there are serious signs, you are shown free, confidential helplines straight away, and we are alerted with your email address, the situation you picked and the level and category of the check, so we can decide whether to reach out. We are not sent what you wrote. Your employer is never told.

The check helps us decide how to respond. It never makes decisions about you on its own: a paused order is always looked at by a person. It is not a clinical assessment and it is not a way of monitoring you. If you are ever at risk of harm, please contact your local emergency services or find a free helpline at findahelpline.com.

If something you write shows a serious risk to someone's life or safety, or a concern about a child's safety, we may be required to pass information to the relevant authorities.

Workplace memberships

If your employer gives you a membership, it is yours. We are the controller of your membership information, not your employer, and we look after it exactly as we do for any other member. We know which employer provides your membership from the team code you used to join.

What your employer can see:

• On their team page: the email addresses that have claimed a membership and the date each was claimed, so they can give places out and free them up. This is not a record of use.
• In a monthly team report: how many memberships are in use; how many people used the tools that month, shown only when 3 or more did; the share of answers saying a tool helped, shown only once there are 5 or more answers; and the share of 30 day check-in summaries showing people felt calmer, shown only once 5 or more have been sent.
• From time to time: whole-team totals from the monthly "Is your membership helping?" question, only once there are 5 or more answers. Comments are never passed on.

What your employer never sees: what you wrote, what you chose, which tools you used, how often you listen, whether you used your membership in a particular month, or anything from the safety check.

When your employer frees your place, or their membership ends, your workplace membership ends and your membership record is deleted.

Emails we send

• Emails that deliver what you ordered or asked for, and emails about your account, payments and your membership, are part of the service.
• Member emails (weekly affirmations, the 30 day challenge, welcome guides and check-ins) can mention gifts and reviews. Every one has a link to turn them off, and you can turn them back on from the same link.
• Quiz follow-up emails are only sent if you ticked the box, and every one has an unsubscribe link.

Who helps us

We use the companies below to run the service. They handle your information on our instructions, under their data processing terms, except where we say they act as their own controller. Where information goes outside the UK, we say what protects it.

Company	What it does for us	Where, and what protects it
Make.com	Runs our automations: receives orders and requests, stores our records, and sends emails through Gmail. It keeps a log of each automated run for a limited time and then deletes it automatically.	European Union. The UK recognises EU data protection as adequate.
Anthropic (Claude)	Writes your affirmations, guides and plans, and runs the safety check. Anthropic does not use this information to train its models.	United States. Protected by the UK Addendum to the Standard Contractual Clauses in Anthropic's data processing terms.
ElevenLabs	Turns your affirmations into speech. Our account is set so that ElevenLabs does not use this to train its models.	United States. Certified under the UK Extension to the EU-US Data Privacy Framework.
Railway	Runs our checkout and mixes your affirmations with your background sound.	United States. Certified under the UK Extension to the EU-US Data Privacy Framework.
Bunny.net	Stores your finished audio and delivers it when you press play or download.	Stored in its UK region. Bunny.net is based in the European Union and delivers files through servers around the world.
Google (Gmail)	Sends our emails and holds our mailbox.	United States. Certified under the UK Extension to the EU-US Data Privacy Framework.
Stripe	Takes payments and manages membership billing. Stripe acts as its own controller for payment information.	UK and United States. Certified under the UK Extension to the EU-US Data Privacy Framework.
Etsy	Only if you order through our Etsy shop. Etsy acts as its own controller for your Etsy account and purchase.	See Etsy's privacy policy.
ipapi.co	When you open our Other support page, your browser asks ipapi.co which country your internet address is in, so the page can show helplines for your country. We do not receive or keep your internet address.	United States.

We do not sell your information and we do not share it with anyone for advertising. We would only share it with anyone else if the law required it, to protect someone's life or safety, or if the business were transferred to a new owner, who would then have to follow this notice.

Your browser

We do not use cookies, and there is no analytics or advertising tracking on our website. Your membership page stores your private membership key in your browser, so the page recognises you. Your browser also remembers where you are in the 30 day mood check-in, whether you have already answered this month's question, and that you have said yes to the health information box on the member tools, so you are not asked every time. This is needed for the pages to work, and it stays on your device. The only mood information we receive is the summary you choose to send at the end.

How long we keep it

Information	How long
Your finished audio	Deleted 90 days after it is made. Audio for a gift is kept while the gift record exists, so the recipient's link keeps working.
The voice recording of your affirmations held by ElevenLabs	Deleted 90 days after it is made.
Copies of emails that contain what you wrote, or anything written from it (your track email, guides, plans and our internal alerts)	Removed from our mailbox after 30 days. They then sit in Gmail's bin for up to 30 more days before Google deletes them. If you replied to one of these emails, we keep that conversation as business correspondence.
An order paused by the safety check	Kept until we release or decline it. If it has not been released 14 days after you ordered, it is closed, refunded in full and deleted. Every paused order is deleted within 30 days.
An Etsy order waiting for your one-tap yes	Deleted as soon as you tap, or after 7 days if you do not.
Record of your consent to us using health information (your order reference or email address, the date and the wording you agreed to)	12 months. For members, the date is also kept on your membership record while your membership lasts.
Gift records	Deleted 30 days after the gift is sent, used or runs out. A gift that is waiting to be used is kept for its full 12 months.
Your membership record	Until your membership ends, then deleted.
Workplace place records (the email address that claimed a place)	Deleted within a week of the place being freed up or the employer's membership ending.
Usage record (no name, no email, nothing you wrote)	100 days.
Team session check-in reminder	Deleted when the 2 week check-in is sent.
Monthly feedback answers and 30 day check-in summaries (no name, no email)	400 days.
Quiz entry	18 months, then deleted.
Automatic reply record (your email address and the date)	180 days.
Employer records	Deleted 90 days after the workplace membership ends.
Sales records	As long as UK tax law requires: at least 5 years after the 31 January filing deadline for that tax year. Stripe keeps its own payment records under its privacy policy.

Your rights

You have the right to:

• get a copy of the information we hold about you;
• have anything wrong corrected;
• have your information deleted;
• object to us using it on the basis of our legitimate interests, and ask us to limit how we use it;
• receive information you gave us in a format you can take elsewhere;
• withdraw your consent at any time, including for health information and quiz emails;
• unsubscribe from any email that is not part of the service.

Members can see everything we hold, or delete everything, from the Your account section of their membership page. Deleting ends your membership straight away. For anything else, email hello@buildyourinnervoice.com. We reply within one month.

You do not have to give us any information, but we need your email address and your choices to make and deliver a track, and your email address to run a membership. Telling us what is going on in your own words is optional, and it is what makes the result personal to you.

Complaints about your information

If you are unhappy with how we have handled your information, please tell us first at hello@buildyourinnervoice.com or by post. You can raise a complaint with us in any way you like. We will acknowledge it within 30 days, look into it without undue delay, keep you updated and tell you the outcome.

You also have the right to complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.

If you live outside the UK

We follow UK data protection law for everyone, wherever you live, and everyone has the rights described on this page. There is also something specific for people in the United States and New Zealand.

United States

Some US states, including Washington and Nevada, have laws about consumer health data. What you write about your health is consumer health data under those laws, and this section is our consumer health data privacy notice.

• What we collect and why: anything about your health that you choose to write, only to write your affirmations, guides and plans and to run the safety check, as described in Health information and The safety check.
• How we get it: only from you, and only after you say yes.
• Who we share it with: only the companies in Who helps us that need it to make what you asked for (Make.com, Anthropic, ElevenLabs, Railway, Bunny.net and Google), acting on our instructions. We never sell it and never use it for advertising.
• Your rights: you can ask to see it, ask for the list of companies we have shared it with, withdraw your consent and ask us to delete it, by emailing hello@buildyourinnervoice.com. We reply within 45 days. If we turn down a request, you can ask us to look at it again by replying to our answer, and if you are still unhappy you can contact your state attorney general.

New Zealand

We follow the New Zealand Privacy Act 2020 when we handle information about people in New Zealand. You can ask to see and correct your information by emailing us. If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner at privacy.org.nz. If a privacy breach is likely to cause serious harm, we will tell you and the Privacy Commissioner.

Age

Our service is for adults aged 18 and over. We do not knowingly collect information about anyone under 18. If you think we have, please tell us and we will delete it.

Updates to this notice

We update this notice from time to time as the service grows. The latest version is always on this page, with the date it was last updated at the top.