Privacy Policy
The company that operates Intentional (“Intentional,” “we,” “us,” or “our”) provides a personal relationship app that helps you remember the people in your life, keep notes, and stay in touch. This Privacy Policy describes how we process personal information collected through our website at beintentional.app, the Intentional iOS app, and related services that link to this Privacy Policy (together, the “Services”).
California and other U.S. state privacy rights are described under State privacy rights. Information for people in the European Economic Area or United Kingdom is under Notice to European users.
Intentional is not end-to-end encrypted. Your account data is encrypted in transit and at rest, and access is scoped to your account, but authorized systems can read what you store so we can sync it across your devices and power optional AI features. We do not claim that your data never leaves your device.
Personal information we collect
Information you provide to us
Personal information you may provide through the Services includes:
- Account data, such as your email address and sign-in identifiers from Google or Apple if you choose those options.
- People and relationship data you add about others — names, how you know them, contact details you choose to store, birthdays and other dates, notes, photos, and stay-in-touch reminders. This can include information about family or other relationships. Please only add information you have a right to keep.
- Conversation and journal data, such as notes, reflections, and details you log after you spend time with someone.
- Device-contact imports you specifically choose. If you import people from your device address book, we collect only the contacts you select — not your full address book by default.
- Communications data when you email support, send in-app feedback, or otherwise contact us. Feedback we store is the message you type plus basic device or app version details — not your conversation history.
- Waitlist data, such as an email address if you join the waitlist on our website.
- Transactional data about web subscriptions (plan, status, and trial history). Payment card details are collected by Stripe, not stored by us as full card numbers.
We do not ask for government ID numbers, financial account numbers, or income information. We do not scrape or buy third-party data to enrich the people you add.
Third-party sources
We may receive personal information from:
- Sign-in providers. If you continue with Google or Apple, we receive the account identifiers and email those services share based on your settings with them (including a Hide My Email address from Apple, if you use that).
- Payment processors. Stripe tells us whether a web subscription is active, trialing, past due, or canceled.
- You, about other people. Most of the people data in Intentional is information you choose to record. Those people are not users of the Services unless they create their own account.
Information collected automatically
We, and some of our service providers, may automatically collect:
- Device and log data, such as browser or app type, operating system, language, IP address, and general location derived from IP (for example city or region) — not precise GPS.
- Website activity on beintentional.app, such as pages viewed, button clicks on the marketing site, and waitlist or sign-in events. This uses Google Analytics 4 on the website only. We do not currently run Google Analytics in the iOS app. In the iOS app, we collect first-party product metrics (event names, counts, enums, and result codes only) so we can see activation, the core loop, and where people fail; this is not Google Analytics and is not a sale or share of personal information.
We do not collect precise geolocation. We do not use advertising pixels or interest-based advertising partners.
Cookies and similar technologies
The website uses cookies and similar technologies. Some are needed to keep you signed in (Supabase authentication). On the website only, we also load Google Analytics 4 so we can understand how the site is used. Analytics may set first-party cookies and collect device and usage information as described by Google’s privacy policy and Google Analytics opt-out.
We do not show a cookie-consent banner or other consent-management platform, and we do not wait for consent before loading website analytics. You can block or delete cookies in your browser, or use Google’s opt-out. If you block authentication cookies, parts of the website that require a signed-in account will not work. Some Internet browsers can send a “Do Not Track” signal; we do not currently respond to Do Not Track or Global Privacy Control signals.
AI features. Optional AI features send the text needed for that feature (for example a note you just saved) through our backend to commercial AI APIs. Today that is Anthropic’s Claude for suggestions and related text features, and OpenAI’s Whisper when a voice-to-text feature is used. We send what the feature needs — not your entire history by default. We do not use your customer content to train our own models. When a feature calls a commercial AI API, that provider processes the submitted text or audio under its own terms, which can change. This page does not promise that a vendor will never use submitted content for training.
How we use your personal information
We use personal information to:
- Provide, operate, and sync the Services across devices you sign into.
- Create and maintain your account, including sign-in and security.
- Show your people, notes, reminders, and photos back to you.
- Run optional AI features you choose to use.
- Process web subscriptions and trials through Stripe.
- Respond to support and feedback, and diagnose problems.
- Email you about the waitlist or account and service notices.
- Understand website usage with Google Analytics 4 so we can improve the site. We do not use this for advertising.
- Protect the Services, prevent abuse, and comply with law — including investigating fraud, security incidents, or requests we believe in good faith we must answer.
- Create aggregated or de-identified statistics that no longer identify you. We do not use your customer content to train our models.
We do not sell your personal information. We do not use it for advertising. We do not share the notes you write with the people you write about.
How long we keep it
We keep personal information as long as needed to provide the Services, including your people, notes, and reminders until you delete them or close your account, and as needed for security, accounting, dispute resolution, or legal requirements.
If you delete your account from Settings, we erase your account and the people, conversation, feedback, and related data tied to it immediately and permanently. That cannot be undone. There is no recoverability window. An active web subscription is canceled immediately (not at the end of the billing period). If an account has an App Store subscription, Apple requires you to cancel it with Apple before deleting the account. We do not retain an archived product profile. We and our payment processors may retain only the limited invoice, tax, fraud-prevention, or dispute records required by law or a documented retention policy; those records are access-restricted and are not used to recreate your account. Authentication providers may retain their own security logs. Encrypted backups may hold residual copies until those backups expire.
When we no longer need personal information, we delete it, anonymize it, or isolate it from further use (for example in backups) until deletion is possible.
How we share your personal information
We share personal information with service providers who help us operate the Services, and otherwise as described here or at the time of collection. Examples we actually use:
- Supabase — authentication, database, file storage for contact photos, and backend functions (including account deletion and the AI proxy).
- Vercel — hosts the website.
- Stripe — processes web payments. Stripe uses payment data under its privacy policy.
- Anthropic and, when voice transcription is used, OpenAI — commercial AI APIs called from our backend, not from your device as a consumer chat app.
- Google — Google sign-in if you choose it, and Google Analytics 4 on the website.
- Apple — Sign in with Apple if you choose it.
- Linear — optional triage of authenticated in-app feedback you send us.
We may also share personal information with:
- Professional advisors such as lawyers, accountants, or insurers, when they need it to advise us.
- Authorities and others when we believe in good faith it is required or appropriate for compliance, safety, or to protect rights.
- Business transferees if we explore or complete a financing, sale, merger, or similar transaction. We may share information with counterparties and their advisors, and with a successor that continues the Services.
Your people, notes, and photos are not a social feed. Other users and the public cannot browse your journal. Photos you add are stored so the app can show them back to you on the devices you sign into.
We do not have corporate affiliates to share with today. We do not use advertising partners. We do not operate social features that identify you to other Intentional users.
Your choices
- Access or update. Sign in and edit your people, notes, and account details in the app.
- Export. Settings includes Export my data, which downloads a JSON copy of your contacts and conversations. You can do this on the website and in the iOS app.
- Delete your account. In the website or iOS app, open Settings, find the Privacy section, and choose Delete my account. Deletion is immediate and permanent. You can also email support@beintentional.app and ask us to delete your account.
- Opt out of marketing email. Waitlist and similar emails will include a way to unsubscribe, or you can email us. You may still receive account or service messages.
- Cookies and analytics. Use browser controls and the Google Analytics opt-out linked above. The website does not offer a cookie-consent banner. The iOS app does not use Google Analytics.
- Linked sign-in. You can change Google or Apple permissions in those accounts. Revoking access does not automatically delete information we already received.
- Declining to provide information. Some information is required to create an account or use a feature. If you do not provide it, that part of the Services may not work.
Other sites and services
The Services may link to other websites or services we do not control, including Stripe Checkout, Google, and Apple sign-in pages. Those services have their own privacy practices. We are not responsible for them.
Security
We use technical and organizational measures designed to protect personal information, including encryption in transit and at rest and account-scoped access in our database. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.
International data transfer
We are based in the United States and use service providers that may operate in other countries. If you use the Services, your personal information may be processed in the United States or elsewhere, where privacy laws may differ from those in your country. People in Europe should also read the Notice to European users.
Children
The Services are not intended for anyone under 18. If you are a parent or guardian and believe we collected personal information from a child in a way the law does not allow, contact us. If we learn we collected personal information from a child without required consent, we will delete it as the law requires.
Changes to this Privacy Policy
We may update this Privacy Policy. If we make material changes, we will update the effective date and post the new policy on the Services, or use another appropriate notice. Your use of the Services after the effective date means the updated policy applies to that use.
How to contact us
Questions about this policy, or requests to exercise a privacy right, can be sent to support@beintentional.app.
State privacy rights
This section applies to residents of U.S. states that have privacy laws granting the rights below, to the extent those laws apply to us (the “State Privacy Laws”). Not every right is available in every state. We may decline a request as the law allows, including if we cannot verify you or understand the request.
“Personal Information” and “Sensitive Personal Information” have the meanings given in those laws, excluding information the laws do not cover.
Depending on your state, you may have the right to:
- Get information about the personal information we have collected and how we use and share it.
- Access a copy of personal information we have collected about you.
- Correct inaccurate personal information.
- Delete personal information we have collected from you.
- Appeal our denial of a valid request.
- Be free from discrimination for exercising these rights.
Targeted advertising. We do not process your personal information for targeted advertising.
Profiling. We do not use your personal information for profiling or automated decisions that produce significant legal or similarly significant effects (for example housing, employment, or credit).
Sale and sharing. We do not sell your personal information for money, and we do not share it for cross-context behavioral advertising.
Consumers under 16. We do not have actual knowledge that we collect, sell, or share the personal information of consumers under 16.
Sensitive personal information. You may choose to store sensitive details in notes about people in your life. We process that content to provide the Services you requested. We do not use sensitive personal information to infer characteristics about you for advertising. Please do not submit government ID numbers, health records, or similar sensitive data unless you intend them to be stored in your account.
How to submit a request. Use in-app export or account deletion, or email support@beintentional.app. We may need to verify your identity — typically by confirming control of the email on the account. If an authorized agent writes on your behalf, we may ask for proof of authority, such as a power of attorney or signed permission plus verification of you.
We honor the substance of state opt-out rights by not selling personal information and not using it for targeted ads. We do not currently detect Global Privacy Control signals as an automated opt-out, because we do not run that kind of advertising.
Information practices
The following describes our practices now and during the past 12 months. We collect the categories below from you, your device, sign-in providers, and Stripe, and we use them for the purposes in this policy. We do not attempt to reidentify de-identified information except to test whether our de-identification works.
| What we collect | CCPA category | Why | Disclosed to | Sold or shared? |
|---|---|---|---|---|
| Email, account id, Google or Apple sign-in identifiers | Identifiers | Account, security, support, waitlist | Supabase, Vercel, Google or Apple (if used) | No |
| People, notes, reminders, photos you add | Identifiers; customer records; other personal information | Provide and sync the Services; optional AI | Supabase; Anthropic or OpenAI when you use AI features | No |
| Subscription status and checkout events | Commercial information | Web billing and access | Stripe, Supabase | No |
| Website pages, clicks, and device or IP data | Internet or electronic activity; coarse geolocation | Operate, secure, and improve the website | Google Analytics (web only); Vercel; Supabase | No |
| Support and feedback messages | Customer records | Respond and fix issues | Supabase; Linear for authenticated feedback | No |
Additional information for California residents
Under California’s Shine the Light law, California residents may ask for certain information about personal information disclosed to third parties for those parties’ direct marketing. We do not disclose personal information to third parties for their own direct marketing. You may still write support@beintentional.app with the subject “Shine the Light Request,” your name, mailing address, and a statement that you are a California resident.
Nevada. Nevada residents may opt out of the sale of certain covered information for money. We do not sell that information. To make a request anyway, email support@beintentional.app.
Notice to European users
This section applies to individuals in the United Kingdom and the European Economic Area (“Europe”). References to “personal information” include “personal data” under the GDPR.
The company that operates Intentional is the controller of personal information covered by this policy. Contact us at support@beintentional.app. We have not appointed an EU or UK representative or a Data Protection Officer.
Legal bases
We process personal information only when we have a legal basis:
| Purpose | Typical data | Legal basis |
|---|---|---|
| Provide the account, sync, and core journal features | Account, people, notes, photos, reminders | Contractual necessity |
| Optional AI suggestions or transcription | The text or audio you submit for that feature | Contractual necessity; consent where required |
| Web subscriptions | Email, Stripe customer and subscription status | Contractual necessity |
| Website analytics | Device and site activity | Legitimate interests in understanding and improving the site. We do not currently collect cookie consent or operate a consent-management platform; website analytics load without a prior opt-in. |
| Waitlist and service email | Legitimate interests; consent where required | |
| Support and feedback | Message and basic device metadata | Legitimate interests; contractual necessity if the request is about your account |
| Legal compliance and protection of rights | Whatever is relevant to the request or claim | Legal obligation; legitimate interests |
We do not use automated decision-making that produces legal or similarly significant effects.
Your GDPR rights
You may ask us to:
- Give you access to your personal information.
- Correct inaccurate personal information.
- Delete personal information where we no longer have a good reason to keep it.
- Transfer a machine-readable copy to you or another party.
- Restrict processing in certain cases.
- Object to processing based on legitimate interests, or to direct marketing.
- Withdraw consent where we rely on consent, without affecting prior processing.
Email support@beintentional.app. We may need to verify you. Whether we must fulfill a request depends on why and how we process the data. If we refuse, we will explain unless the law prevents us from doing so.
You may also lodge a complaint with your local supervisory authority. In the EEA, find yours via the European Data Protection Board members list. In the UK, contact the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, telephone +44 303 123 1113, ico.org.uk.
Transfers outside Europe
We are U.S.-based, and many processors (including Supabase, Vercel, Stripe, Google, Apple, Anthropic, and OpenAI) process data in the United States or other countries that may not have an adequacy decision. Where we transfer personal information out of Europe, we rely on appropriate safeguards such as standard contractual clauses, an adequacy decision where one exists, or another lawful mechanism. You may email us for more information about the mechanism used for a particular transfer.
These Terms of Service also apply to your use of Intentional. Read them at beintentional.app/terms.