How Intero handles your data

The app stores the symptom entries you log each day: a numeric score, the activities you mark, and any free-text notes you add. It also stores the activity definitions you configure and your in-app settings. All of this lives on your device.

If Intero does not organize a natural-language entry correctly, the app may offer an optional, unchecked choice to share that one example with us. If you choose it, the upload can include the final words you reviewed, the details Intero noticed or added, how those details were mapped, the dates assigned to them, your controlled feedback reason, and limited app, device, operating-system, language, model, registry, and timing information needed to investigate the problem. It does not include your name, email, account or analytics identifiers, advertising identifiers, push token, Apple Health data, unrelated records, exact symptom score, or a voice recording.

If you grant Apple Health access, the app reads whatever health data you allow. Apple Health data is not transmitted to Intero's servers or to any analytics service.

When you visit the Intero website, our hosting provider receives the standard data that any web server receives: your IP address, browser type and version, operating system, the page you requested, the referring URL if you followed a link to get here, and the time of the request. This is logged automatically as part of delivering the site and maintaining security.

No account or email address is required to use the app. If you choose to provide your email address on the website, we use it to send occasional updates about Intero, and you can unsubscribe at any time.

The app and website may send limited analytics events to help us understand how Intero is used, improve the product, understand whether our ads are effective, and show Intero ads to people who have expressed interest in Intero.

Analytics may include limited website and app activity, such as page views, app interactions, device/browser information, and advertising identifiers. Analytics events are not tied to an Intero account because Intero does not use accounts.

We do not send symptom entries, notes, Apple Health readings, daily log data, or insight content to analytics. On the website, analytics require consent for visitors in the EU and UK. We also honor the Global Privacy Control signal for California visitors. You can opt out of app analytics at any time in Settings.

Daily logs, Apple Health context, notes, and activity history are stored locally on your iPhone. Intero does not maintain a server copy of your symptom record. The only symptom-related content Intero receives from the app is a single natural-language logging example that you separately and explicitly choose to share after reviewing it.

A shared logging example is sent over an encrypted connection to a private Intero database hosted by Railway, is available only to authorized Intero review, is not sent to product analytics or included in notification email, and is automatically deleted after 30 days. A random sample identifier is used to operate and delete the submission; Intero does not use it to connect the example to your product analytics. Analytics events may be stored and processed by the third-party analytics services we use to understand product usage, improve Intero, measure ad performance, and show Intero ads to people who have expressed interest in Intero. We do not sell your data, and we do not send symptom entries, notes, Apple Health readings, daily log data, or insight content to analytics services. We may also disclose limited information if legally required, such as in response to a valid court order. If you generate a PDF export from the app and share it, that copy goes to whoever you send it to. Intero does not receive the exported document, and we do not control how that recipient handles health information.

You can deny or revoke Apple Health permissions at any time in iOS Settings under Privacy and Security. Deleting the app removes the Intero data stored on your device.

The app includes an analytics preference in Settings. Turning it off stops app analytics immediately. On the website, visitors in the EU and UK see a consent prompt and must agree. Visitors who have enabled the Global Privacy Control signal in their browser will have analytics suppressed automatically. Website visitors can reopen their choice at any time from the Privacy choices link in the footer.

Sharing a logging example is optional and off by default each time it is offered. You can finish logging without sharing it. If you shared an example and have its sample identifier, contact privacy@getintero.app to request deletion before the automatic 30-day deletion date.

For website server logs, security-related processing, and correspondence you send us, we generally rely on legitimate interests in operating, securing, and improving the service. For website analytics shown to visitors in the EU and UK, we rely on consent where required.

If you are in the EEA or UK, you may have rights to request access, correction, deletion, restriction, objection, or portability for personal data we control, and to withdraw consent where processing is based on consent. Because Intero does not maintain a server copy of your symptom record, those rights generally apply to the limited data we actually hold, such as a logging example you chose to share, website logs, analytics data, and correspondence. To exercise these rights, contact privacy@getintero.app. You may also have the right to complain to your local data protection authority.

Intero is not directed to children under 13. If we become aware that personal information from a child under 13 was submitted through the website, we will remove it where reasonably possible.

We use appropriate technical and organizational measures for a product whose symptom record stays on the device and whose optional logging examples are separately consented, access-controlled, and time-limited. No transmission method or storage system can be guaranteed secure. If this policy changes in a meaningful way, we will update the date at the top and revise the text here rather than hiding changes in fine print.

For questions about this policy, contact us at privacy@getintero.app.