Inside Outside Health Privacy Policy

Effective Date: August 27^th, 2026

This Privacy Policy describes how Inside Outside Health LLC (“IOH,” “we,” “us,” or “our”) collects, uses, and shares information in connection with the website located at insideoutsidehealth.org and the Inside Outside Health mobile application (collectively, the “Site”).

The Site is a non-clinical, peer-support, journaling, and informational wellness resource for athletes and former athletes. It is not a healthcare provider and does not provide healthcare services or medical advice. If you are in crisis, call or text 988 (Suicide & Crisis Lifeline) or your local emergency number.

The Site is for adults. You must be at least 18 years old to create an account (see “Children” below).

Information Collection

We collect the following categories of information:

Account information you provide when you register and complete your profile: name, email address, date of birth, and password; and, optionally, phone number, location (for example, “Denver, CO”), time zone, the sports you play, gender (including an optional self-description), whether you currently have an injury and your stage of recovery, the areas you want to focus on, and the communities you join.
Journal entries, including the topic, what you write, a takeaway, your mood before and after writing (on a 1–5 scale), and whether writing helped.
Stories you write and submit for publication, including the title, the body, the sport it is about, the feed you post it to, and how you chose to be attributed.
Saved collections: stories you bookmark and the toolkits you build.
Reports and blocks: reports you file about a story (a reason and an optional note) and authors you block.
Communications with us, such as support requests, feedback, and responses to optional in-app surveys.
Sign-in and device information, collected automatically: your IP address, device model, operating system and version, app version, language and time zone, the time of each sign-in and sign-out, and the screens and features you use.

The mobile app does not use cookies; it stores an identifier on your device for analytics (see “Analytics and Crash Reporting” below). Our website uses only the cookies needed to sign in and protect forms.

Health-related information

Some of what you provide — journal entries, mood ratings, injury and recovery status, and stories — may contain or reveal information about your physical or mental health. This may include information considered “sensitive” under certain privacy laws. You control what you submit: none of the health-related profile questions are required, and you should avoid including more detail than you are comfortable sharing, particularly in a story other people will read.

Information Use

We use the information we collect to:

Operate, maintain, and improve the Site, including the journaling, mood-tracking, story, and toolkit features;
Personalize what the Site shows you, for example by ordering resources by your sports;
Show you your reported mood over time in the journal calendar;
Screen content for safety and offer support (see “Automated Safety Screening” below);
Communicate with you about your account, security, and support requests;
Detect, investigate, and address violations of the Terms of Service, fraud, or misuse;
Comply with legal obligations and respond to lawful requests; and
Any other purpose with your consent or as disclosed at the time the information is collected.

We currently send only account and service emails: verification codes, password-reset codes, security alerts, and notices about account deletion and data exports. If we begin sending marketing emails, each will include an unsubscribe link.

We may use information that has been de-identified or aggregated without limitation.

Automated Safety Screening

To help keep the community safe and to offer support to people who may need it, every story you submit and every journal entry you save — including entries you keep private — is automatically screened by a third-party content-moderation service (currently OpenAI’s Moderation API). The service receives the text only, without your name or account identifier, and returns category labels and confidence scores. We store those results with the content and delete them when the content is deleted.

No person reads a private journal entry as part of this process. If the screening suggests you may be at risk, designated IOH staff are notified with a link to review the content, and the app may show you a notice offering crisis resources. The notice does not say what prompted it. If you do not want your journal entries screened this way, please do not use the journal feature.

Stories, Journal Sharing, and Staff Access

The Site does not offer direct messaging, comments, or public profiles. The only content other users can see is a story you choose to submit for publication.

Stories. Every story is reviewed by IOH staff before it is published. You choose how each story is attributed: anonymously (the default), by the location on your profile, or by your full name. Your location is the only profile detail that can appear to other users, and only on stories you mark “location only.” Once published, other users in the feed you chose can read and save your story. You can remove it from the feed at any time, from the story itself or from My Stories.
Sharing a journal entry. Journal entries are private by default. If you turn on “Share Anonymously” for an entry, IOH staff may read that entry, without your name attached, to understand what athletes are experiencing and improve the Site. Shared entries are never published to other users. You can turn sharing off at any time; because staff may already have read the entry, deleting it is the only way to remove it entirely.
Staff access. IOH staff can see your profile, your stories, and the journal entries you have shared, in order to operate the Site and respond to support requests. Staff accounts require multi-factor authentication, and staff actions on member accounts are logged.

IOH does not control, and cannot guarantee, what other users do with a story you publish. Please use judgment about what you disclose. If you encounter content that violates our Content Standards or Terms of Service — including harassment, hate speech, or content promoting self-harm or suicide — report it from within the app (Report on any story), block the author, or email ioh@insideoutsidehealth.org. We may remove content, restrict an account, or suspend or terminate an account in response, though we are not obligated to take any specific action.

Analytics and Crash Reporting

We use PostHog, a product-analytics service hosted in the United States, to understand how the Site is used and to diagnose crashes. PostHog receives an identifier for your account; the screens you view; the actions you take (for example, saving a journal entry or submitting a story); your device model, operating system, app version, language, and time zone; and details of app errors. For journal entries this includes your mood ratings, the topic you chose, and your intent — never the text you wrote. We may also show short, optional in-app surveys through PostHog.

We do not use Google Analytics, session recording, or advertising or tracking SDKs.

Advertising

We do not show advertisements in the Site, do not use advertising networks or tracking pixels, and do not share your information with third parties for their own marketing. If that changes, we will update this Privacy Policy before doing so.

Information Sharing

We share information only as follows:

Service providers that process information on our behalf and under our instructions: Fly.io (application hosting and database), Tigris (file storage), Postmark (email delivery), PostHog (analytics and crash reporting), and OpenAI (automated safety screening). All are located in the United States. We do not currently process payments.
Other users, when you publish a story (see “Stories” above).
Legal and business advisors.
Affiliates or joint venture partners that we may have in the future.
A successor, as part of an actual or potential corporate sale, merger, acquisition, or other transfer of all or part of our assets, including as part of a bankruptcy proceeding.
As required by law, pursuant to a subpoena, court order, governmental inquiry, or other legal process, or to protect our rights or the rights of third parties, or the safety or security of any person.
With your consent, or as otherwise disclosed at the time of collection.

From time to time, you may have the option to share a testimonial, success story, or quote for use in IOH’s marketing materials, website, or social media. We use your name, likeness, or story in this way only with your permission at the time you submit it. You may withdraw this permission for future use at any time by contacting us, though we may not be able to recall materials already published.

We may share information that has been de-identified or aggregated without limitation.

Data Retention

We keep your account information and content for as long as your account exists.

When you delete your account, your profile, stories, journal entries, saved items, toolkits, reports, blocks, and sign-in credentials are permanently deleted at the end of a 30-day grace period, and we email you to confirm. A few records are kept for a limited time afterwards for security and legal purposes:

Sign-in history and account change logs: up to one year;
Copies of emails we sent you: up to 90 days;
A record that you accepted our agreements (version, date, IP address, and device), with your account identity removed.

Data-export files are deleted 7 days after they are created. Information held by our service providers is deleted according to their own retention periods.

Security and Sign-In Records

We protect your information with encryption in transit, hashed passwords, expiring sign-in tokens, and multi-factor authentication for staff. To detect unauthorized access, we record the IP address, device, and time of each sign-in and sign-out, keep that record for up to one year, and may email you about unusual sign-in activity. You can see where your account is signed in, and sign out everywhere, under Account → Signed-in Devices.

Biometric sign-in. You may choose to sign in with Face ID, Touch ID, or your device’s fingerprint reader. If you do, your email address and password are stored in your device’s secure storage so the app can sign you in after your device confirms it is you. Your biometric data is handled entirely by your device’s operating system and is never sent to or stored by IOH.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Where We Process Information

We are based in the United States and process and store information there. If you use the Site from outside the United States, your information will be transferred to and processed in the United States.

Third-Party Links

The Site links to third-party websites and apps, such as podcasts on Spotify, videos on YouTube, and crisis-support services. We do not control the privacy practices of those services, and they are not covered by this Privacy Policy.

Children

The Site is for adults. You must be at least 18 years old to create an account, and we ask for your date of birth at sign-up to confirm this. We do not knowingly collect personal information from anyone under 18; if you believe we have, contact us and we will delete it.

Privacy Rights and Choices

You can exercise most of your rights directly in the app, under the Account tab:

Edit Profile to review and correct your information;
Export My Data to receive a complete copy of your account as a downloadable file, available for 7 days;
Delete Account to permanently delete your account after a 30-day grace period, during which you can change your mind by signing back in;
Signed-in Devices to see where your account is signed in and sign out everywhere;
Blocked Authors to review and undo blocks.

Residents of certain states may have additional rights with respect to personal information, such as the right to access, correct, or delete it, or to opt out of its “sale” or sharing. We do not sell personal information. To exercise a right not covered by the tools above, contact us using the information below. If we deny your request, you may appeal by contacting us at ioh@insideoutsidehealth.org. We may need to verify your identity before responding.

Changes to Our Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will ask you to review and accept the updated policy in the app before continuing to use it.

Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us using one of the following methods:

Email: ioh@insideoutsidehealth.org

Phone: 732-336-9369

Address: 8 Budapest Street, Monroe NJ 08831