Privacy Policy

Last updated: October 12, 2026

Intentional (“we”) runs intentional.day. This policy explains what we collect, why, and the choices you have. Short version: we collect what we need to run the app for you, encrypt the sensitive parts, never sell it, and you can export or delete it anytime.

What we collect

• Account: email, name, optional profile picture (from Google), time zone, and a hashed password if you set one.
• What you log: habits, day ratings, moods and sleep, journal entries, gratitude notes, intentions and priorities, timebox plans, meals and nutrients, weight, time entries, goals, things you are quitting (counter, cravings, slips, reasons), meditation sessions, books, screen-time numbers, Coach conversations, and profile details you choose to add (birthday, sex, height, activity level, diet, values, interests, occupation, “about me”). Sensitive free text and photos are encrypted at rest.
• Security data: IP address and browser type for active sessions and a security log (sign-ins, password changes), so you can review account activity.
• Push subscription (if you enable reminders), used only to send your reminders.

We do not use advertising trackers or sell data. We don't run third-party analytics cookies. The only cookie is your sign-in session; your theme preference is stored in your browser.

AI features

When you use an AI feature, the relevant data is sent to our AI provider (DeepSeek) to generate a response:

• Meal logging: the photos you add (re-encoded, without location metadata) and your note.
• Screen-time coach: your screenshots, the extracted app usage, and your first name, age, interests, “about me” and goal titles.
• Goal plans, Coach, timebox drafts, book suggestions, affirmations and reviews: a summary of your profile (first name, age, sex, country, occupation, values, interests, “about me”, diet), goals, habits and completion rates, things you are quitting (days free, triggers), recent day ratings, moods and sleep, nutrition averages, today's intention and priorities, and screen-time totals. For the craving SOS, your own reasons for quitting are included. Coach also sees your recent Coach conversation. Your journal and gratitude notes are never sent to the AI.

AI features are optional; everything else works without them.

Service providers

• Google: Sign in with Google (only if you choose it).
• Resend: sending account emails (verification, sign-in links, security alerts).
• DeepSeek: AI processing as described above.
• Have I Been Pwned: breached-password check; only the first 5 characters of a SHA-1 hash are sent.
• Your browser’s push service (Apple, Google or Mozilla) delivers reminders if you turn them on.

Retention & deletion

We keep your data while your account exists. Deleting your account (Settings → Your data) immediately and permanently deletes all of it from our live database. Backups roll off within 14 days.

Your rights

You can access, correct, export (Settings → Export) and delete your data at any time. Depending on where you live (e.g. GDPR, UK GDPR, CCPA) you have additional rights; contact us and we'll help.

Children

Intentional is not intended for children under 13 (or 16 where required by local law).

Contact

Questions? Email privacy@intentional.day.