Privacy Policy

Intent is published by ColetonCodes, LLC ("we," "us," or "our"). This policy covers the Intent iOS app and the intent-app.com website. For purposes of data protection law, we are the controller of the personal data described here.

When you create an account, we store the minimum needed to identify you and sync your data:

• Sign in with Apple: an opaque Apple user identifier and, if you choose to share it, your email address and name. Apple may relay a private, app-specific email address rather than your real one.
• Email and password: your email address and a securely hashed password.
• Optional profile: a display name and time zone, and your in-app preferences.

Accounts and authentication are handled by Supabase, which provides our authentication and Postgres database. The iOS app never connects to the database directly; it talks only to our API, which verifies your session and reads or writes your data on your behalf.

The content you create -- your tasks, areas, subtasks, and nightly reflections -- is stored in our database and associated with your account. Every row is owner-scoped: database row-level security and our API both restrict access so that only your authenticated session can read or change your data. We do not sell your content, and we do not use it for advertising.

Intent can connect to your device's calendar, with your permission, to help you turn calendar events into planned tasks. Calendar access uses Apple's EventKit and is granted by you in the app (or in iOS Settings); you can revoke it at any time in Settings > Privacy & Security > Calendars.

When you import or link an event, we read that event's details -- such as its title and its start and end times -- to create a task in Intent. The resulting task, and a reference to the linked calendar event, are stored in your account like your other planning content. We do not sync, upload, or store your full calendar, and we do not use your calendar data for advertising.

Intent can send you reminders and nudges about your own tasks -- a due-date reminder, a next-day intention nudge, a weekly review prompt. These are off until you turn them on, and you can turn them off at any time in the app or in iOS Settings > Notifications.

When you enable notifications, your device gives us a device token -- an identifier Apple issues for your installation of the app. We store it with your account and send it to the Apple Push Notification service (APNs) to deliver each message. The token identifies a device, not you personally, and we do not use it for advertising or share it with anyone other than Apple for delivery. It is removed when you disable notifications, sign out, or delete your account.

From time to time we send account holders a short email about what's new in Intent -- a feature that shipped, a change worth knowing about. We tell you this when you create your account, and these are separate from the emails the app has to send you, such as a confirmation code or a password reset.

Every one of these emails has an unsubscribe link in it, and unsubscribing takes effect for all future product updates. You can also turn them off at any time in the app under Settings. Opting out never affects your account or the service emails you still need to receive. We send these ourselves through Resend -- we do not sell or rent your email address to anyone.

Intent Premium is an auto-renewing subscription sold by Apple through the App Store. Apple processes your payment; we never receive or store your payment card details. We use RevenueCat to manage entitlements and tell our app whether your subscription is active. We keep a small server-side mirror of your subscription status -- for example, whether it is active, expired, or has a billing issue, the product purchased, and renewal or expiration dates -- keyed to your account so the app can unlock the right features. This mirror is written only by our server in response to events from RevenueCat.

To keep Intent reliable, we use Sentry for error monitoring. When the app or our API hits an unexpected error, Sentry receives diagnostic information about the crash or failure -- such as the error type, a stack trace, and technical context about the device or request. Our API is built to keep raw error details and personal content out of these reports; they are used only to find and fix bugs.

We use PostHog for product analytics to understand how Intent is used in aggregate -- for example, which features are opened and where people get stuck -- so we can improve the app. Analytics events are tied to an identifier for your session or account rather than to your planning content, and single-use tokens are stripped from any URLs we record. We use this data to improve the product, not to build advertising profiles.

We use the information above to:

• provide the app, sync your data across your devices, and keep you signed in;
• operate subscriptions and unlock Premium features you have purchased;
• monitor errors and maintain the security and reliability of the service;
• understand product usage in aggregate so we can improve Intent.

We do not sell your personal data. We share data only with the service providers that make Intent work, and only as needed for them to provide their service to us: Apple (sign-in, payments, and push notification delivery), Supabase (authentication and database hosting), RevenueCat (subscription management), Resend (sending you account and reminder emails), Sentry (error monitoring), and PostHog (product analytics). We may also disclose information where required by law.

We keep your account information and content for as long as your account exists. When you delete your account, your data is removed (see below). Error-monitoring and analytics records are retained only for the limited period our providers keep them, after which they are deleted or aggregated.

You can permanently delete your account at any time from within the app: Settings > Delete Account. Deleting your account removes your profile, tasks, areas, subtasks, reflections, and subscription mirror from our database. Deletion does not cancel an active App Store subscription -- that is managed by Apple, and you can cancel it in your Apple ID settings (Settings > your name > Subscriptions).

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can exercise the most common of these directly in the app: your content is editable at any time, and account deletion is one tap away in Settings. For any other request, contact us using the details below and we will respond as required by applicable law.

Intent is not directed to children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, please contact us and we will delete it.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above, and material changes will be reflected in the app or on this page.

Questions about your privacy or this policy? Reach us at support@intent-app.com.