Privacy policy
Last updated: 2 November 2026
Inner Path is a quiet place for teachings, exercises, meditations and a personal journal. This page says, in plain words, what happens to information when you use the site. It is written for the Swiss Federal Act on Data Protection (nLPD) and, where it applies to you, for the General Data Protection Regulation (GDPR).
Who is responsible
The publisher of this site is the Association du Mahajrya Suisse, seated at Chemin Monséjour 16, 1700 Fribourg, Suisse. For personal data that the association actually holds, it is the controller.
The contact person is Simon Pythoud (JivaTan). You can write to simonpythoud@gmail.com.
What stays on your device
The journal and the notes are kept in this browser, on this device. The pages that create them do not send them to a server.
The journal stores each entry — title, text, an optional mood, tags and dates — under the local name meditation-app-journal. Notes store a title, a text, the teaching, exercise or meditation you attached if you attached one, and dates, under the local name inner_path_notes. You can download your notes as a file onto your own device from the notes page. That file is not uploaded.
Other practice marks stay in the same browser:
- Favourites (the local name favorites): which teachings, exercises or meditations you marked, and when.
- Progress (meditation-app-progress): whether a page was marked complete, a percentage, and a date.
- Exercise answers (meditation-app-exercise-responses, one entry per exercise): the words and choices you type into an exercise.
- Recent searches (recentSearches): a short list of words you have searched for.
- Practice streaks and a practice log (practiceStreaks and practiceLog), if a practice is recorded: dates and the name of the activity. This recording, when it runs, also stays in the browser.
If you open the site in another browser, or on another device, this writing is not there. If you clear the data for this site in your browser, it is deleted. The publisher cannot read it, correct it, or restore it.
What the server receives
Reading a page, and asking the server for the public catalogue of teachings, exercises and meditations, does not include your journal or your notes.
When you search, the words you type are sent to the server so it can look through that published catalogue. They are not written into a database. Like any address you open, they may remain in the host’s connection logs.
Each page also asks the server whether a sign-in session exists. That request does not contain your writing.
Accounts are not open
The application code contains server routes for a journal, notes, favourites, progress and practice streaks. Those routes would store such records in a PostgreSQL database, and only for a person who is signed in. They refuse the request when there is no session.
No sign-in method is configured. The journal and the notes pages do not call those routes. They write only to this browser, including in the notes code that mentions a user id. If accounts are offered later, this page will be updated before any personal writing is stored on the server.
Cookies
The site may store your chosen language in a cookie named NEXT_LOCALE, so a later visit can open in that language. It is not used to follow you for advertising.
This code does not install analytics, advertising, or social-media cookies. A session cookie would be used only if sign-in were offered and you used it. That is not part of reading the site today.
Hosting
The site is configured to be hosted by Vercel Inc., in the United States (region iad1 in the project configuration). To deliver the pages, the host may process your IP address, the date and time, the page address, and the technical description of your browser. These are connection logs. The publisher does not use them to build a profile of you. How long the host keeps them is decided by the host.
Because the host is in the United States, this technical data may be processed outside Switzerland and the European Economic Area. Your journal and your notes are not part of that transfer: the pages do not send them. A separate list of subprocessors is not published here.
How long data is kept
What is stored in your browser remains until you delete it, or until the browser drops it. Search words are not stored by the application. Connection logs follow the host’s own retention. The database routes described above do not receive your writing from the current pages.
Your rights
The Swiss nLPD applies to this site. If you are in the European Economic Area, the GDPR applies to you as well.
You may ask for access to personal data the publisher holds about you, for correction of what is inaccurate, and for deletion when the law requires it. Where the GDPR applies, you may also ask to restrict processing, object to certain processing, and receive a portable copy when that right applies. The site does not take a decision about you based solely on automated processing.
Most of the practice data described here is on your device. Only you can delete it, from your browser. For data the publisher or the host does hold, write to simonpythoud@gmail.com.
You may lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC) in Switzerland: www.edoeb.admin.ch. If the GDPR applies to you, you may also complain to the supervisory authority of your country.
Children
The site is not directed at children, and it does not ask a child to create an account. If a young person writes in the journal, that writing stays in the browser they used.
Changes
This page may be updated. The date at the top will change with it. A change to this text does not move the writing stored in your browser.
Contact
Association du Mahajrya Suisse
Simon Pythoud (JivaTan)
Email: simonpythoud@gmail.com.
Postal address: Chemin Monséjour 16, 1700 Fribourg, Suisse.
The legal notice says who publishes the site and where it is hosted.