GDPR
Last updated 9 October 2026.
If you’re in the European Union, the European Economic Area or the United Kingdom, data protection law gives you specific rights over your personal data. Here’s how they apply to within. What we hold, and for how long, is on the privacy page.
read the privacy policy →Who is responsible
Sandbox Incubator LLC is the controller of your personal data. You can reach us at [email protected].
Why we may use it
- To provide within — your email, name, photo, circle and voice lines are needed to run the service you asked for (performance of a contract).
- To keep it secure and working — technical logs and error reports (our legitimate interest in a safe, reliable service).
- Notifications — only once you turn them on, and only until you turn them off (your consent).
Your rights
To use any of these, email [email protected] from the address you sign in with. We’ll answer within one month.
- Access — ask for a copy of what we hold about you.
- Correction — fix your name, photo or email yourself in Settings, or ask us.
- Erasure — delete your account from Settings, and everything goes: profile, circle and any lines still waiting.
- Portability — receive your data in a machine-readable format.
- Objection and restriction — object to, or ask us to limit, how we use your data.
- Withdraw consent — turn notifications off at any time.
- Complain — to the data protection authority where you live, though we’d like the chance to put it right first.
Where it goes
Some of the services that help run within — email delivery, push delivery, our network and error reporting — may process data outside the EU and UK, including in the United States. Where they do, the transfer is covered by the safeguards the law requires, such as the European Commission’s standard contractual clauses.
No automated decisions
within makes no automated decisions about you, does no profiling, and never uses your voice lines for anything but delivering them.