Effective date: July 22, 2026 · Version 1.0
When you use Intentional, we collect: • Account information: your email address and password (stored as a secure hash — we never store your plain-text password) • Profile information: your display name, if you choose to provide one • Content you create: goals, schedules, recurring events, projects, and daily lists • Household data: if you create or join a household, we store the relationship between accounts • Usage data: when you access the App, which features you use (no third-party tracking or advertising analytics) • Audit logs: records of sensitive actions (goal creation, moderation events) for security purposes
We do not collect or sell: • Your location • Payment information (we use Stripe, which handles payments directly — we never see your card details) • Your contacts or calendar data • Any data from your device beyond what you enter in the App • Any data for advertising purposes • Any data shared with third parties for marketing
We use your data exclusively to: • Provide and improve the Intentional app • Authenticate your identity and keep your account secure • Generate your personalized daily lists • Enable household sharing features you opt into • Moderate content to keep the platform safe • Respond to your support requests • Comply with legal obligations
Your data is stored on Supabase's infrastructure hosted on AWS in the United States. We implement: • AES-256 encryption at rest • TLS 1.3 encryption in transit • Row-level security ensuring users can only access their own data • Automatic daily backups • Multi-factor authentication support • Regular security audits
When you share content with a Household, that content becomes visible to other household members you have explicitly invited. You control the visibility of every item (Private, Shared, or Household). You can revoke sharing at any time. Household members cannot access your private data. We cannot see your shared content except for moderation purposes.
We retain your data for as long as your account is active. When you delete your account, all of your personal data is permanently deleted within 30 days. Audit logs may be retained for up to 90 days for security purposes, after which they are permanently deleted.
You have the right to: • Access: Request a copy of all data we hold about you • Correction: Update or correct your personal information at any time through the App • Deletion: Delete your account and all associated data • Portability: Export your data in a machine-readable format • Opt out: Contact us to opt out of any non-essential data processing To exercise these rights, use the Account Settings in the App or contact privacy@intentionalapp.com.
Intentional is not directed at children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will delete it immediately.
We will notify you of material changes to this Privacy Policy by email and by displaying a notice in the App. Continued use after changes constitutes acceptance of the updated policy.
For privacy questions or to exercise your rights, contact privacy@intentionalapp.com. We respond to all requests within 30 days.