Privacy Policy

Effective October 26, 2026

The company that operates Intentional (“Intentional,” “we,” “us,” or “our”) provides a personal relationship app that helps you remember the people in your life, keep notes, and stay in touch. This Privacy Policy describes how we process personal information collected through our website at beintentional.app, the Intentional iOS and Android apps, and related services that link to this Privacy Policy (together, the “Services”).

California and other U.S. state privacy rights are described under State privacy rights. Information for people in the European Economic Area or United Kingdom is under Notice to European users.

Intentional is not end-to-end encrypted. Your account data is encrypted in transit and at rest, and access is scoped to your account, but authorized systems can read what you store so we can sync it across your devices and power optional AI features. We do not claim that your data never leaves your device.

Personal information we collect

Information you provide to us

Personal information you may provide through the Services includes:

• Account data, such as your email address and sign-in identifiers from Google or Apple if you choose those options.
• People and relationship data you add about others — names, how you know them, contact details you choose to store, birthdays and other dates, notes, photos, and stay-in-touch reminders. This can include information about family or other relationships. Please only add information you have a right to keep.
• Conversation and journal data, such as notes, reflections, and details you log after you spend time with someone.
• Device-contact imports you specifically choose. If you import people from your device address book, the app may read contacts on your device to display a selection list. Only the contacts you choose are uploaded to your Intentional account.
• Text-capture data, if you turn on text capture: your mobile phone number, the date and version of your consent, and the texts you send to our number. Messages are stored as conversation notes in your account. Photo texts are not supported, and we do not fetch or store them. If you send a photo anyway, our text provider may keep it for up to 30 days.
• Communications data when you email support, send in-app feedback, or otherwise contact us. Feedback we store is the message you type plus basic device or app version details — not your conversation history.
• Email engagement data, such as delivery status, opens, or link clicks, when those measurements are available through our email service provider.
• Waitlist data, such as an email address if you join the waitlist on our website.
• Transactional data about subscriptions (plan, status, trial history, and store purchase identifiers used to verify access). Web payments are processed by Stripe; mobile subscriptions use Apple or Google Play. We do not store full payment card numbers.

We do not ask for government ID numbers, financial account numbers, or income information. We do not scrape or buy third-party data to enrich the people you add.

Third-party sources

We may receive personal information from:

• Sign-in providers. If you continue with Google or Apple, we receive the account identifiers and email those services share based on your settings with them (including a Hide My Email address from Apple, if you use that).
• Payment processors. Stripe, Apple, and Google Play provide subscription and transaction information so we can verify access and handle billing changes.
• You, about other people. Most of the people data in Intentional is information you choose to record. Those people are not users of the Services unless they create their own account.

Information collected automatically

We, and some of our service providers, may automatically collect:

• Device and log data, such as browser or app type, operating system, language, IP address, and general location derived from IP (for example city or region) — not precise GPS. For reliability and security, service providers may process network information; when we use an IP-to-location lookup, we use it to derive approximate checkout geography and do not put the raw IP address in Stripe checkout metadata or send it to Proofly.
• Website and mobile activity. The website uses Google Analytics 4 for page views, marketing clicks, and waitlist events. Mobile releases with analytics enabled use Google Analytics for Firebase for app-use information and limited product events such as account lookup, paywall views, and core actions. After sign-in, those mobile analytics records use your opaque Supabase account ID and limited account properties: your plan category (free or pro) and signup week. The custom events we send contain event names and limited categories or counts, not contact names, conversation notes, email addresses, purchase tokens, or other free text. Firebase Analytics may derive approximate location from network information; the app does not request precise GPS location. We also send a limited set of product events to our service backend as first-party metrics for activation and reliability. We do not use analytics for advertising.

Checkout social proof. When you begin a web checkout, we may derive an approximate region and country from network or edge-provider location signals. We attach those coarse location fields to the Stripe Checkout Session so we can associate a completed signup with its general region. For a new subscription or trial, we send Proofly a limited conversion notice containing the first name provided at checkout (or a generic label if none is available), approximate region and country, and plan category. Proofly uses this to display subscription activity on our public website. We do not send Proofly your last name, email, account ID, payment details, or raw IP address. You can object to this use by contacting us at support@beintentional.app.

Mobile notifications and installations. Firebase services process installation identifiers and app or device information when the mobile app initializes. Firebase Cloud Messaging uses this information for notification delivery. When you enable reminders, we additionally register a device token and timezone with your account. Notification permission does not control mobile analytics collection.

Error diagnostics and performance. The app reports errors to our backend. When Sentry is enabled on web or mobile, it receives structural error and device diagnostics with an opaque account identifier, plus a sample of performance traces. We configure reports to omit customer text, personal profile fields, request bodies, and raw IP addresses from event payloads. URL details are reduced to the scheme and host. Session replay, screenshots, view hierarchies, and trace-header propagation are disabled. Providers still process network information to deliver and secure these reports and may derive approximate geography. Performance sampling is configurable and defaults to 10%.

We do not collect precise geolocation. We do not use advertising pixels or interest-based advertising partners.

Cookies and similar technologies

The website uses cookies and similar technologies. Some are needed to keep you signed in (Supabase authentication). On the website only, we also load Google Analytics 4 so we can understand how the site is used. Analytics may set first-party cookies and collect device and usage information as described by Google’s privacy policy and Google Analytics opt-out.

We do not show a cookie-consent banner or other consent-management platform, and we do not wait for consent before loading website analytics. You can block or delete cookies in your browser, or use Google’s opt-out. If you block authentication cookies, parts of the website that require a signed-in account will not work. Some Internet browsers can send a “Do Not Track” signal; we do not currently respond to Do Not Track or Global Privacy Control signals.

Optional mobile note scanning. If you choose to scan a handwritten note, the photo you select or take is sent through our backend to Anthropic to transcribe the handwriting. You can review the returned text before saving it. If you save the capture, its text and photo are stored in your account. Typing and saving an ordinary note does not automatically send that note to an AI provider. We do not use customer content to train our own models. Providers process submitted content under their own terms, which can change; this policy does not promise that a vendor will never use submitted content for training.

Experimental web lab. The separate next-conversation lab is for fictional examples only and does not load your saved contacts or conversation history. If you choose to use it, the example note and dates you enter are sent through our backend to the selected provider: Anthropic, or OpenAI when that option is enabled. Comparing providers sends the example to both. We retain submitted examples, generated questions, and evaluation feedback for 90 days; examples selected for our evaluation collection are kept until deleted by the owner, as described on the lab form. Do not submit real personal information or customer data to the lab.

How we use your personal information

We use personal information to:

• Provide, operate, and sync the Services across devices you sign into.
• Create and maintain your account, including sign-in and security.
• Show your people, notes, reminders, and photos back to you.
• Transcribe a handwritten-note image when you choose mobile note scanning; process fictional examples and feedback when you choose the experimental web lab.
• Send texts you have opted in to, and receive and save the texts you send back, if you turn on text capture. Text capture uses name-matching rules, not AI, to file your messages.
• Process subscriptions and trials through Stripe, Apple, or Google Play.
• Show limited subscription activity as social proof, using a first name when available (otherwise a generic label), approximate region and country, and plan category.
• Respond to support and feedback, and diagnose problems.
• Send account and security messages, and welcome-series emails that introduce the Services and help you get started. Measure delivery and engagement with email links or similar technologies where enabled. You can unsubscribe from welcome or other promotional emails; account, security, and essential service messages may still be sent.
• Understand website usage with Google Analytics 4 so we can improve the site. We do not use this for advertising.
• Understand mobile app use with Google Analytics for Firebase where enabled, including account lookup, paywall views, and core product actions. We do not use this for advertising.
• Protect the Services, prevent abuse, and comply with law — including investigating fraud, security incidents, or requests we believe in good faith we must answer.
• Create aggregated or de-identified statistics that no longer identify you. We do not use your customer content to train our models.

We do not sell your personal information or use it for targeted advertising. We do use the limited checkout details described above to display subscription activity as social proof. We do not share the notes you write with the people you write about. We do not share your phone number or text-messaging consent with third parties for their own marketing. Text messaging originator opt-in data and consent are not shared with any third parties.

How long we keep it

We keep personal information as long as needed to provide the Services, including your people, notes, and reminders until you delete them or close your account, and as needed for security, accounting, dispute resolution, or legal requirements. If you turn on text capture, we keep the record of your consent (phone number, date, and consent version) while the feature is on and after you opt out while your account remains open. A keyed hash of unknown senders' numbers prevents repeated signup replies; it contains no message content.

Successful account deletion removes the active Intentional account, people, conversation notes, photos, reminders, feedback, and first-party product-event rows tied to it from our active systems. That is permanent and cannot be undone. A request may require ownership verification or resolution of a subscription or processing error. An active web subscription is canceled immediately (not at the end of the billing period). If an account has an App Store subscription, Apple requires you to cancel it with Apple before deleting the account. For Google Play subscriptions, we request cancellation of renewals before removing your account. We do not retain an archived product profile. We and our payment processors may retain only the limited invoice, tax, fraud-prevention, or dispute records required by law or a documented retention policy; those records are access-restricted and are not used to recreate your account. Authentication providers may retain their own security logs. Encrypted backups may hold residual copies until those backups expire.

When we no longer need personal information, we delete it, anonymize it, or isolate it from further use (for example in backups) until deletion is possible. Deleting an Intentional account does not automatically erase historical analytics or diagnostics held by providers. Limited operational, diagnostic, billing, and backup records may also have separate retention or deletion processes. Those records are subject to the relevant retention settings and legal obligations; contact us if you want to make a privacy-rights request about them.

Delete your Intentional account

In the Android app, iOS app, or website, open Settings and choose Delete account in the Privacy section. You can also request deletion without installing or opening the app: email support@beintentional.app from the email address on your Intentional account and ask us to delete it. We may verify control of that email before completing your request.

Successful deletion removes the active Intentional account, people, notes, photos, reminders, and first-party product-event rows. It is permanent and cannot be undone. Subscription cancellation and limited billing, security, and backup retention are described in How long we keep it. If you have an Apple subscription, cancel it with Apple first; contact support if you need help.

How we share your personal information

We share personal information with service providers who help us operate the Services, and otherwise as described here or at the time of collection. Examples we actually use:

• Supabase — authentication, database, file storage for contact and scanned-note photos, and backend functions (including account deletion and the AI proxy).
• Telnyx — delivers and receives texts if you turn on text capture. Telnyx processes your phone number and message content to deliver messages on our behalf, under its privacy policy. Twilio remains a fallback and processes the same information only if we switch text capture to Twilio, under its privacy policy.
• Resend — delivers account emails and welcome-series emails on our behalf. It processes your email address and delivery status to deliver messages. Open and click tracking is enabled for our sending domain, so Resend may also record email opens and link clicks.
• Vercel — hosts the website.
• Stripe — processes web payments and stores coarse checkout-region fields in Checkout Session metadata. Stripe uses payment data under its privacy policy.
• Proofly — receives limited web subscription or trial conversion notices (first name when available or a generic label, approximate region and country, and plan category) to show social proof on our public website.
• IP-to-location lookup provider — may receive an IP address when an edge-provided location is unavailable and a lookup is configured; it returns approximate location used for checkout-region reporting.
• Anthropic — transcribes a handwritten-note image you choose to submit through our backend and processes fictional examples in the experimental web lab.
• OpenAI — processes fictional experimental-lab examples through our backend only when that provider option is enabled.
• RevenueCat — processes opaque account identifiers and subscription information for server-side billing records and reconciliation.
• Google — Google sign-in if you choose it, Google Analytics 4 on the website, Google Analytics for Firebase in the mobile apps, Google Play billing, and Firebase Cloud Messaging for mobile notifications.
• Sentry — structural error diagnostics and sampled performance traces with an opaque account identifier in releases where reporting is enabled.
• Apple — Sign in with Apple if you choose it, and App Store billing.
• Linear — optional triage of authenticated in-app feedback you send us.

We may also share personal information with:

• Professional advisors such as lawyers, accountants, or insurers, when they need it to advise us.
• Authorities and others when we believe in good faith it is required or appropriate for compliance, safety, or to protect rights.
• Business transferees if we explore or complete a financing, sale, merger, or similar transaction. We may share information with counterparties and their advisors, and with a successor that continues the Services.

Your people, notes, and photos are not a social feed. Other users and the public cannot browse your journal. Photos you add are stored so the app can show them back to you on the devices you sign into.

We do not have corporate affiliates to share with today. We use Proofly only for the limited subscription social-proof notices described above; we do not use cross-site targeted advertising partners. We do not operate social features that identify you to other Intentional users.

Your choices

• Access or update. Sign in and edit your people, notes, and account details in the app.
• Export. Settings includes Export my data, which downloads a JSON copy of your contacts and conversations. You can do this on the website and in the mobile apps.
• Delete your account. In the website, iOS app, or Android app, open Settings, find the Privacy section, and choose Delete my account. Completed deletion is permanent. You can also email support@beintentional.app and ask us to delete your account.
• Text messages. If you turn on text capture, reply STOP to stop texts, or turn off text capture in Settings. Reply HELP for help. Message and data rates may apply. Message frequency varies with how often you text us and how much time you book.
• Email choices. Welcome-series and other promotional emails include an unsubscribe option. You can also email us to opt out. You may still receive account, security, and essential service messages. Where supported, you can block email tracking images or links through your email app; that may not stop all delivery reporting.
• Cookies and analytics. Use browser controls and the Google Analytics opt-out linked above for website analytics. The website does not offer a cookie-consent banner. Mobile releases with analytics enabled use Google Analytics for Firebase and are not gated on a separate app opt-in. These records use the limited identifiers, categories, and counts described above rather than conversation text or contact names. Notification permission does not change this collection. Contact us if you have a question about this processing.
• Linked sign-in. You can change Google or Apple permissions in those accounts. Revoking access does not automatically delete information we already received.
• Declining to provide information. Some information is required to create an account or use a feature. If you do not provide it, that part of the Services may not work.

Other sites and services

The Services may link to other websites or services we do not control, including Stripe Checkout, Google, and Apple sign-in pages. Those services have their own privacy practices. We are not responsible for them.

Security

We use technical and organizational measures designed to protect personal information, including encryption in transit and at rest and account-scoped access in our database. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

International data transfer

We are based in the United States and use service providers that may operate in other countries. If you use the Services, your personal information may be processed in the United States or elsewhere, where privacy laws may differ from those in your country. People in Europe should also read the Notice to European users.

Children

The Services are not intended for anyone under 18. If you are a parent or guardian and believe we collected personal information from a child in a way the law does not allow, contact us. If we learn we collected personal information from a child without required consent, we will delete it as the law requires.

Changes to this Privacy Policy

We may update this Privacy Policy. If we make material changes, we will update the effective date and post the new policy on the Services, or use another appropriate notice. Your use of the Services after the effective date means the updated policy applies to that use.

How to contact us

Questions about this policy, or requests to exercise a privacy right, can be sent to support@beintentional.app.

State privacy rights

This section applies to residents of U.S. states that have privacy laws granting the rights below, to the extent those laws apply to us (the “State Privacy Laws”). Not every right is available in every state. We may decline a request as the law allows, including if we cannot verify you or understand the request.

“Personal Information” and “Sensitive Personal Information” have the meanings given in those laws, excluding information the laws do not cover.

Depending on your state, you may have the right to:

• Get information about the personal information we have collected and how we use and share it.
• Access a copy of personal information we have collected about you.
• Correct inaccurate personal information.
• Delete personal information we have collected from you.
• Appeal our denial of a valid request.
• Be free from discrimination for exercising these rights.

Targeted advertising. We do not process your personal information for targeted advertising.

Profiling. We do not use your personal information for profiling or automated decisions that produce significant legal or similarly significant effects (for example housing, employment, or credit).

Sale and sharing. We do not sell your personal information for money, and we do not share it for cross-context behavioral advertising.

Consumers under 16. We do not have actual knowledge that we collect, sell, or share the personal information of consumers under 16.

Sensitive personal information. You may choose to store sensitive details in notes about people in your life. We process that content to provide the Services you requested. We do not use sensitive personal information to infer characteristics about you for advertising. Please do not submit government ID numbers, health records, or similar sensitive data unless you intend them to be stored in your account.

How to submit a request. Use in-app export or account deletion, or email support@beintentional.app. We may need to verify your identity — typically by confirming control of the email on the account. If an authorized agent writes on your behalf, we may ask for proof of authority, such as a power of attorney or signed permission plus verification of you.

We honor the substance of state opt-out rights by not selling personal information and not using it for targeted ads. We do not currently detect Global Privacy Control signals as an automated opt-out, because we do not run that kind of advertising.

Information practices

The following describes our practices now and during the past 12 months. We collect the categories below from you, your device, sign-in providers, and Stripe, and we use them for the purposes in this policy. We do not attempt to reidentify de-identified information except to test whether our de-identification works.

In this table, “sold or shared” uses the applicable state-law definitions, including cross-context behavioral advertising. We still disclose information to the providers described in this policy to operate the Services.

Additional information for California residents

Under California’s Shine the Light law, California residents may ask for certain information about personal information disclosed to third parties for those parties’ direct marketing. We do not disclose personal information to third parties for their own direct marketing. You may still write support@beintentional.app with the subject “Shine the Light Request,” your name, mailing address, and a statement that you are a California resident.

Nevada. Nevada residents may opt out of the sale of certain covered information for money. We do not sell that information. To make a request anyway, email support@beintentional.app.

Notice to European users

This section applies to individuals in the United Kingdom and the European Economic Area (“Europe”). References to “personal information” include “personal data” under the GDPR.

The company that operates Intentional is the controller of personal information covered by this policy. Contact us at support@beintentional.app. We have not appointed an EU or UK representative or a Data Protection Officer.

Legal bases

We process personal information only when we have a legal basis:

We do not use automated decision-making that produces legal or similarly significant effects.

Your GDPR rights

You may ask us to:

• Give you access to your personal information.
• Correct inaccurate personal information.
• Delete personal information where we no longer have a good reason to keep it.
• Transfer a machine-readable copy to you or another party.
• Restrict processing in certain cases.
• Object to processing based on legitimate interests, or to direct marketing.
• Withdraw consent where we rely on consent, without affecting prior processing.

Email support@beintentional.app. We may need to verify you. Whether we must fulfill a request depends on why and how we process the data. If we refuse, we will explain unless the law prevents us from doing so.

You may also lodge a complaint with your local supervisory authority. In the EEA, find yours via the European Data Protection Board members list. In the UK, contact the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, telephone +44 303 123 1113, ico.org.uk.

Transfers outside Europe

We are U.S.-based, and many processors (including Supabase, Resend, Vercel, Stripe, Google, Apple, RevenueCat, Sentry, Proofly, Anthropic, Telnyx, and Twilio, and OpenAI where the experimental-lab option is enabled) process data in the United States or other countries that may not have an adequacy decision. Where we transfer personal information out of Europe, we rely on appropriate safeguards such as standard contractual clauses, an adequacy decision where one exists, or another lawful mechanism. You may email us for more information about the mechanism used for a particular transfer.

These Terms of Service also apply to your use of Intentional. Read them at beintentional.app/terms.