Privacy Policy

Intent is published by ColetonCodes, LLC ("we," "us," or "our"). This policy covers the Intent iOS app and the intent-app.com website. For purposes of data protection law, we are the controller of the personal data described here.

When you create an account, we store the minimum needed to identify you and sync your data:

• Sign in with Apple: an opaque Apple user identifier and, if you choose to share it, your email address and name. Apple may relay a private, app-specific email address rather than your real one.
• Email and password: your email address and a securely hashed password.
• Optional profile: a display name and time zone, and your in-app preferences.

Accounts and authentication are handled by Supabase, which provides our authentication and Postgres database. The iOS app never connects to the database directly; it talks only to our API, which verifies your session and reads or writes your data on your behalf.

The content you create -- your tasks, areas, subtasks, and nightly reflections -- is stored in our database and associated with your account. Every row is owner-scoped: database row-level security and our API both restrict access so that only your authenticated session can read or change your data. We do not sell your content, and we do not use it for advertising.

Intent can connect to your device's calendar, with your permission, to help you turn calendar events into planned tasks. Calendar access uses Apple's EventKit and is granted by you in the app (or in iOS Settings); you can revoke it at any time in Settings > Privacy & Security > Calendars.

When you import or link an event, we read that event's details -- such as its title and its start and end times -- to create a task in Intent. The resulting task, and a reference to the linked calendar event, are stored in your account like your other planning content. We do not sync, upload, or store your full calendar, and we do not use your calendar data for advertising.

Intent can send you reminders and nudges about your own tasks -- a due-date reminder, a next-day intention nudge, a weekly review prompt. These are off until you turn them on, and you can turn them off at any time in the app or in iOS Settings > Notifications.

When you are signed in, the app registers your device with Apple, and Apple gives us a device token -- an identifier Apple issues for your installation of the app -- whether or not notifications are turned on. We store it with your account and send it to the Apple Push Notification service (APNs) to deliver each message. The token identifies a device, not you personally, and we do not use it for advertising or share it with anyone other than Apple for delivery. In Intent 3.0 and later, when you sign out, the app asks our server to remove the token as soon as it can reach it. If another account signs in on the same device, the token moves to that account. It is also deleted when you delete your account, and when Apple tells us it is no longer valid. Turning notifications off, in the app or in iOS, stops delivery to your device but does not by itself delete the token.

We only send the emails your account needs: a confirmation code when you sign up and a code when you reset your password. We do not send marketing email. If that ever changes, we will update this policy first and give you a way to opt out before the first one is sent.

If you joined the waitlist on our website before launch, we stored the email address you gave and used it to send a one-time email when the beta opened. Reply to that email to have your address removed. These emails are delivered through Resend; we do not sell or rent your email address to anyone.

Intent Premium is an auto-renewing subscription sold by Apple through the App Store. Apple processes your payment; we never receive or store your payment card details. We use RevenueCat to manage entitlements and tell our app whether your subscription is active. We keep a small server-side mirror of your subscription status -- for example, whether it is active, expired, or has a billing issue, the product purchased, and renewal or expiration dates -- keyed to your account so the app can unlock the right features. This mirror is written only by our server in response to events from RevenueCat.

To keep Intent reliable, we use Sentry for error monitoring. When the app or our API hits an unexpected error, Sentry receives diagnostic information about the crash or failure -- such as the error type, a stack trace, and technical context about the device or request. We do not put your planning content or sign-in credentials into these reports, and the app does not attach your email address or screenshots to them automatically. They do include technical context such as the device model, iOS version, app version, and a trail of recent app activity.

Sentry is also how messages reach us. When you send in-app feedback, Sentry receives the message you write, the email address you give, any screenshots you attach, and basic device details. Messages sent through the contact form on our website are delivered the same way. We use them only to answer you and to fix what you report.

We use PostHog for product analytics to understand how Intent is used in aggregate -- for example, which features are opened and where people get stuck -- so we can improve the app. Analytics events are tied to your account identifier and a one-way hash of your email address rather than to your planning content, and single-use tokens are stripped from any URLs we record. The hash is not anonymous: anyone who already knows the address can compute the same hash and match it. Versions of the app before 3.0 also attached your email address itself to your analytics profile; version 3.0 and later send only the hash. We use this data to improve the product, not to build advertising profiles.

We do not track you across apps or websites owned by other companies, we do not use the advertising identifier on your device, and we do not share your data with data brokers or ad networks.

If you suggest a feature in the app, the title you write is shown to other Intent users on the community roadmap only after we review it, along with its vote count; your name is not shown. The optional note is visible only to us. We copy each request into Linear, the tool we use to plan our work. In Intent 3.0 and later you can report a request you think is inappropriate, and you can ask us to remove one of yours at any time.

We use the information above to:

• provide the app, sync your data across your devices, and keep you signed in;
• operate subscriptions and unlock Premium features you have purchased;
• monitor errors and maintain the security and reliability of the service;
• understand product usage in aggregate so we can improve Intent.

We do not sell your personal data. We share data only with the service providers that make Intent work, and only as needed for them to provide their service to us: Apple (sign-in, payments, and push notification delivery), Supabase (authentication and database hosting), RevenueCat (subscription management), Resend (sending account emails and the waitlist announcement), Sentry (error monitoring, in-app feedback, and website contact messages), PostHog (product analytics), and Linear (feature requests you submit). We may also disclose information where required by law.

We keep your account information and content for as long as your account exists. When you delete your account, your data is removed (see below). Error-monitoring and analytics records are retained only for the limited period our providers keep them, after which they are deleted or aggregated. A feature request's title and note are copied to Linear when you submit it; deleting your account does not remove that copy from Linear unless you ask us to.

You can permanently delete your account at any time from within the app: Settings > Delete Account. Deleting your account removes your profile, tasks, areas, subtasks, reflections, feature requests and votes, push device tokens, subscription mirror, and other data tied to your account from our database, and asks RevenueCat and PostHog to delete their records of you. In Intent 3.0 and later, if you signed in with Apple, you confirm with Apple first and we ask Apple to disconnect Intent from your Apple ID. If Apple cannot be reached, your Intent data is still deleted, and you can remove Intent yourself in your Apple ID settings under Sign in with Apple. Deletion does not cancel an active App Store subscription -- that is managed by Apple, and you can cancel it in your Apple ID settings (Settings > your name > Subscriptions).

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can exercise the most common of these directly in the app: your content is editable at any time, and account deletion is one tap away in Settings. For any other request, contact us using the details below and we will respond as required by applicable law.

Intent is not directed to children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, please contact us and we will delete it.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above, and material changes will be reflected in the app or on this page.

Questions about your privacy or this policy? Reach us at support@intent-app.com.