Privacy notice
Last updated: 12.10.2026.
Controller and contact
Žilić Consult, obrt za usluge, vl. Tonći Žilić, Split, Zagrebačka 19; OIB 83543978252; MBO 99364352. The operator controls platform account, booking, communication and support processing. Contact info.innerpath.app@gmail.com. Practitioners may be independent controllers for their own service records; Stripe acts under the roles stated in its applicable terms.
Telephone: +385 91 987 6456.
Data and purposes
We use identity/contact details, account security data, bookings, payment references, plan entitlements and meeting details to operate the contracted service. Legal and tax obligations support required financial records. Proportionate fraud prevention, access auditing and complaint handling rely on applicable legitimate interests or obligations. Optional marketing and non-essential tracking require separate consent that can be withdrawn.
Private content
Messages and notebooks are encrypted at rest. Journals are private to the client; routine administrator access to journal or conversation bodies is not provided. Authorised staff may reveal a reported message or support request for a documented purpose, with an audit record. Avoid unnecessary health, belief or third-party details. Special-category processing requires a valid additional legal condition; ordinary terms acceptance is not treated as explicit consent to such processing.
Service providers and transfers
Hosting and delivery use Hostinger and Vercel; payments use Stripe; email uses Resend; meeting scheduling/video and CAPTCHA use Google. They receive only data needed for their roles. We must maintain applicable provider agreements and transfer safeguards; EU hosting does not itself prove that every provider process stays in the EEA. We do not sell your private messages or journal. Optional analytics/advertising runs only when configured and consented to.
Retention
Ordinary message bodies are erased after one year from creation. Unresolved reported messages are retained for review; resolved report content is erased after one year from resolution. The saved notebook, including preferences stored with it, is deleted after one year without an update. Export needed content before expiry. Ordinary resolved support requests are deleted after one year from their last update. Hourly bounded deletion jobs process eligible records; exceptional backlog is monitored.
Account information remains while required for the active account. Account closure removes or anonymises ordinary profile and authored content after paid obligations are resolved. Access audit records are kept for one year. Email-log personal data is redacted after 30 days and remaining log rows after 12 months. Weekly cleanup can add up to seven days to those log periods.
Financial, tax and contractual records are kept for 11 years from the end of the financial year to which they relate, in accordance with Articles 10 and 13 of the Croatian Accounting Act. Consumer complaint records are kept for one year from receipt, in accordance with Article 10(7) of the Consumer Protection Act. Backup expiry and recovery tests are governed by the operator's internal procedure; applicable deletion periods are reapplied after restoration. These records are not subject to the ordinary one-year purge described above.
Your rights
You can request access, correction, deletion, restriction or portability where applicable, object to processing based on legitimate interests, and withdraw consent without affecting earlier lawful processing. Use account privacy/export controls or write to info.innerpath.app@gmail.com. We verify identity proportionately and respond within the applicable GDPR period. If some records must be retained, we explain the reason. You may complain to AZOP (azop.hr) or the competent supervisory authority where you live or work.
Choices and changes
Required account/payment data is necessary to provide the requested service. Optional data and marketing choices are not conditions of purchase. We do not use private journal/chat content for automated decisions producing legal or similarly significant effects. Material privacy changes are communicated before they take effect.