How Intero handles your data

Your Intero data stays on your device, and in your own iCloud account when enabled. Your data does not pass through Intero's servers.

The app stores the symptom entries you log each day: a numeric score, the activities you mark, and any free-text notes you add. It also stores the activity definitions you configure and your in-app settings. All of this lives on your device. If you turn on iCloud Backup, this same record is also kept in your own personal iCloud account, so it can return if you reinstall Intero or move to a new device. Voice recordings used to quickly capture symptoms are discarded upon processing and never stored on your device.

In order to provide support to you or to improve app functionality, the app may offer an optional choice to share diagnostics. If you choose to do so, this could include limited app, device, operating-system, language, model, registry, and timing information needed to investigate the problem. With your explicit consent, it may also include limited symptom logging information for that specific transaction only. This would be made clear within the app at the time of submission. This information would be reviewed only for the purpose of addressing the above and immediately discarded upon resolution, or within 30 days, whichever comes first. Nothing sent to Intero includes your name, email, account or analytics identifiers, health profile information, Apple Health data, or unrelated records.

If you grant Apple Health access, the app reads whatever health data you allow. Apple Health data is not transmitted to Intero's servers or to any analytics service, and it is never included in iCloud Backup.

When you visit the Intero website, our hosting provider receives the standard data that any web server receives: your IP address, browser type and version, operating system, the page you requested, the referring URL if you followed a link to get here, and the time of the request. This is logged automatically as part of delivering the site and maintaining security.

No account or email address is required to use the app. If you choose to provide your email address on the website, we use it to send occasional updates about Intero, and you can unsubscribe at any time.

If you generate a PDF export from the app and share it, that copy goes to whoever you send it to. Intero does not receive the exported document, and we do not control how that recipient handles health information.

We may also disclose limited information if legally required, such as in response to a valid court order.

The app and website may send limited analytics events to help us understand how Intero is used, improve the product, understand whether our ads are effective, and show Intero ads to people who have expressed interest in Intero.

Analytics may include limited website and app activity, such as page views, app interactions, and device or browser information. We use this information to improve Intero and to measure effectiveness of our ad campaigns without identifying users. The app does not access Apple's IDFA identifier and does not ask to track you across other companies' apps or websites.

We do not send symptom entries, notes, Apple Health readings, daily log data, or insight content to analytics. On the website, analytics require consent for visitors in the EU and UK. We also honor the Global Privacy Control signal for California visitors. You can opt out of app analytics at any time in Settings.

You can deny or revoke Apple Health permissions at any time in iOS Settings under Privacy and Security. You can turn iCloud Backup on or off at any time in the app's Settings; turning it off stops new backups but does not delete a copy already in iCloud. Deleting the app removes the Intero data stored on your device, but not a backup already stored in your iCloud account — manage or delete that from your iPhone's iCloud storage settings.

The app includes an analytics preference in Settings. Turning it off stops app analytics immediately. On the website, visitors in the EU and UK see a consent prompt and must agree. Visitors who have enabled the Global Privacy Control signal in their browser will have analytics suppressed automatically. Website visitors can reopen their choice at any time from the Privacy choices link in the footer.

Sharing diagnostics is optional and off by default each time it is offered. You can finish logging without sharing them. If you choose to share diagnostics and have a submission identifier, contact privacy@getintero.app to request deletion before the 30-day limit.

For website server logs, security-related processing, and correspondence you send us, we generally rely on legitimate interests in operating, securing, and improving the service. For website analytics shown to visitors in the EU and UK, we rely on consent where required.

If you are in the EEA or UK, you may have rights to request access, correction, deletion, restriction, objection, or portability for personal data we control, and to withdraw consent where processing is based on consent. Because Intero does not maintain a server copy of your symptom record, and cannot access data you store in your own iCloud account, those rights generally apply to the limited data we actually hold, such as diagnostics you chose to share, website logs, analytics data, and correspondence. Data kept in iCloud Backup is governed by Apple's own privacy practices for your iCloud account, not by this policy. To exercise these rights, contact privacy@getintero.app. You may also have the right to complain to your local data protection authority.

Intero is not directed to children under 13. If we become aware that personal information from a child under 13 was submitted through the website, we will remove it where reasonably possible.

We use appropriate technical and organizational measures for a product whose symptom record stays on your device (and, if you choose, in your own iCloud account) and whose optional diagnostics are separately consented, access-controlled, and time-limited. No transmission method or storage system can be guaranteed secure. If this policy changes in a meaningful way, we will update the date at the top and revise the text here rather than hiding changes in fine print.

For questions about this policy, contact us at privacy@getintero.app.