Privacy Policy
Overview
IntoHarmony is designed to be privacy-first. The majority of your data stays only on your device, and we take a limited, curated subset off-device only for the purposes described below. Data stored on your device is encrypted at rest, and all communication with our servers is encrypted in transit (TLS).
Data Stored On Device Only
The following categories of data are stored in your device’s local storage, encrypted, and are never transmitted to our servers: • Raw health metric values from Apple Health (sleep, heart rate, HRV, respiratory rate, activity) • Your daily cycle log (bleeding and symptom entries) • Behavioural episode logs (individual urges, meals, tools used) • Your full check-in history, including what you felt and noted • Thought notes and reflections (“Map a moment”), if you use them • Rhythm engine personalization weights In this release, sharing with a care provider and sharing with another person are switched off: nothing from the categories above is sent to anyone else. If you switch on the web view (described under “Your summaries on the web”), the app derives reduced summaries from some of these records and stores those summaries, not the underlying records, in your account, where only you can see them.
Data Transmitted to Our Servers
When you create an account and sign in, we receive: • Account identifiers (email, Supabase user ID) and the date you finished onboarding • Your profile names and settings (for example wake time and which features you switched on), so they can be restored on a new device • Support tickets and feedback you explicitly submit. Basic device details (app version, OS, device model) are included only if you leave “include device info” switched on If you switch on “See your summaries on the web”, the summaries described under “Your summaries on the web” are also transmitted and stored. Model-training data sharing, care-provider sharing, and anonymous statistics are switched off: your check-in inputs, state results, cycle phase, health signals, urges, meals, notes and reflections are not transmitted for those purposes. Kid-profile data is never transmitted. These records are linked to your account (they are not anonymous).
Your summaries on the web
You can choose to have the app store reduced summaries of your IntoHarmony use in your account, so that you can view them on the IntoHarmony web dashboard. This is off until you turn it on in Profile → Privacy & data → Data & research. Only you can see these summaries: you sign in to the dashboard with the email on your account, and our servers return them to your account alone. They are not shared with a care provider or anyone else. What is stored. Summaries the app generates on your device, refreshed at most once a day when you open Insights: • Patterns the app has surfaced for you, and how well established each one is • Estimates of how your state changed after practices you tried (“since you started”) • An estimate of whether your recent use of the app looks active, drifting or lapsed • Your state trajectories and interoception progress over recent weeks Three further kinds are stored only if you switch each one on: • Aggregate urge patterns: how often urges came, what kind they were, at what times of day, and how they went, as counts over the past four weeks; never an individual episode • A daily diary card for the past week, day by day: that day’s check-in levels, mood, and the context tags you chose; each urge you logged, limited to what kind, how strong, whether you acted on it, and how it went; and which practices you tried. Never your notes or triggers • Body-signal aggregates over the past four weeks: where your internal pace has been landing and how often it returns to settled, which body regions and sensation words you chose most often, and how many distinct sensation words you have used, as counts only. Cells with fewer than five mentions are not stored, and nothing from your meal or eating logs is included Each summary covers a trailing window: seven days for the diary card, four weeks for urge patterns and body-signal aggregates, and up to eight weeks for trajectories. So the first summary stored after you switch something on includes activity from before you switched it on. What is never stored. Your raw Apple Health values, your cycle log, your meal logs, your notes, reflections, and any free text. Your individual urge and check-in entries are not stored unless you switch on the diary card, which stores the reduced day-by-day view described above. Urges you log about eating are counted like any other urge in urge patterns and the diary card if you switch those on; what you ate is not. The app does not generate these summaries from a kid profile. While care mode is on, the diary card and body-signal aggregates are not generated at all. How the dashboard reads. The dashboard was designed as the view a care provider would have, and its wording reflects that. In this release it is shown only to you. Stopping. Switching one of the three optional kinds off deletes what was stored of that kind. Turning the web view off is a single request to our server that records your withdrawal and deletes every stored summary together. If our server does not confirm either of these, the app tells you and keeps trying; until it succeeds the summaries are still stored, visible only to you. Our server keeps a record of your choice to turn the web view on or off, with the version and a fingerprint (a hash) of the wording shown, and the time, so that what you agreed to can be shown later. Provider sharing. Sharing with a care provider is switched off in this release. If we offer it later, it will be a separate choice, described in this policy before it is available.
How We Use Your Data
We use the limited data we receive to: (a) authenticate your account and restore your settings on a new device, (b) respond to support requests and feedback, (c) fix the bugs you report, and (d) if you switch on the web view, show you your own summaries on the web dashboard. We do not use your data for advertising, and in this release we do not use it to train models.
Data Sharing
We do not sell your personal data. We share data only with: (a) our cloud infrastructure provider (Supabase, United States) for hosting; (b) government authorities when required by law. Third-party crash reporting is switched off in this release; nothing is sent to a crash-reporting service.
Your Rights
You can: (a) view your local data in the Insights and History tabs; (b) export the data stored on this device as a file from Profile → Privacy & data (“Export device data”) — this export is device-only and comes with a list of what it includes and excludes; to receive a copy of the records held on our servers, contact us at the address below; (c) correct or delete individual reflections from History; (d) delete your account and all associated server records from Profile → Privacy & data. Deletion is permanent and cannot be undone; (e) see the summaries stored for your web view on the dashboard, and stop storing them or delete them from Profile → Privacy & data → Data & research.
Data Retention
On-device data persists until you delete it or uninstall the App. Server records are retained for as long as your account is active. When you delete your account, the app confirms with our servers that your account record and the records linked to it have been removed before it clears this device; if that confirmation fails, the app tells you and nothing is reported as deleted. A consent-history entry without your account identifier may be retained as a legal record. Routine database backups are overwritten on a rolling schedule. Summaries stored for your web view are kept while the web view is on; turning it off deletes them, and deleting your account removes them with it. Data shared under earlier versions of this app for model training or with a care provider is no longer accessible to those features and is removed with your account.
Children’s Privacy
The App is not directed to children under 13, and children do not hold accounts. A parent or legal guardian may operate a kid profile on a child’s behalf; the child’s check-in data is stored only on the device and is never transmitted to our servers or used to train models. We do not knowingly collect personal data from children under 13.
International Transfers
Your cloud data may be processed in the United States or other countries where our infrastructure providers operate. By using the App you consent to this transfer.
Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via in-app notice before they take effect.
Contact
Questions about your privacy, or a request for a copy of the records held on our servers? Use the in-app Contact Support form or email privacy@intoharmony.com.