Privacy, plainly.

What stays on your Mac, what is sent to a service, and how to ask for help.

Effective September 5, 2026

Intentive is an independently operated software project, not a registered company. For privacy questions or requests, contact srujan@heyintentive.com.

1. Records on your Mac

Intentive keeps its durable product records in account-specific storage on your Mac. Depending on the features you use, these can include transcripts, Memories, tasks, goals, Chat history and attachments, Focus and Insight data, settings, and Rewind screenshots, video, extracted text, and embeddings.

These product records are not automatically mirrored to Firestore. That does not mean all processing is local: selected content is sent to managed services when you use the features described below.

2. Account, website, and service records

Firebase handles sign-in. Intentive retains limited server-side account and usage information, such as your account ID, available email/profile details, language or time-zone settings, subscription state, and managed-feature usage totals. Hosted requests can also produce technical logs containing IP address, account ID, route, status, timing, and error information.

The main website is hosted by Vercel and embeds Tally content. Those services receive the technical information needed to deliver their pages. If you submit information through a Tally form, that information is processed through Tally. These Privacy, Terms, and Support pages add no analytics scripts or forms.

3. Services used by Intentive

Information is processed to provide the feature you request, maintain accounts and usage limits, diagnose problems, protect the service, and respond to support requests.

Firebase and Google Cloud

Authentication, limited account and usage records, backend hosting, task delivery, and operational logs.

Upstash Redis

Short-lived sign-in/session information and cached account, feature-processing, and service state. This can include account IDs, display names, and account- or IP-based rate-limit counters. Retention depends on the cache or session's configured expiry.

Google Gemini

Chat, realtime voice, translations, embeddings, and conversation, Memory, and fair-use processing. Selected prompts, context, images or attachments, audio, and transcripts may be sent when needed for the feature.

Modulate

Speech-to-text processing for live audio and recorded audio used by transcription or recovery features.

OpenAI

Text-to-speech only: text selected for spoken playback is sent to generate audio. It is not Intentive's managed Chat provider.

Langfuse

Private managed-Chat tracing. Traces can contain account/session correlation, model input and output, prompt references, usage, errors, and timing.

PostHog

Product analytics in production-family builds. This can include account ID, email, display name, app/device metadata, and bounded feature events. Intentive's analytics event contract excludes prompts, responses, transcripts, audio, screen images, and file paths.

Sentry

Crash, hang, error, and submitted-report diagnostics. These can include account ID, app/build and device/OS metadata, stack traces, error details, and redacted incident context.

Providers may process information outside your country, including in the United States. Their applicable terms and account controls govern their own handling. We do not make a blanket promise that every provider deletes immediately, never retains submitted data, or excludes all service-improvement use.

4. Your controls

Product analytics is off in development builds. In Stable and Beta builds it defaults on and can be turned off in Settings → Privacy → Share product analytics. Sentry crash/error reporting is separate from that setting.

Beta builds also have a separate Enhanced Diagnostics setting, enabled by default in Advanced Settings. It adds bounded technical context and is designed to exclude prompts, transcripts, and raw log files.

You control microphone and screen-recording permissions through macOS System Settings. Removing a permission prevents the corresponding capture feature from operating.

5. Retention, export, and deletion

There is no single automatic retention period for all local records. They remain on your Mac until you delete applicable records or an implemented product lifecycle removes them. Uninstalling the app should not be treated as proof that its stored files were erased. Hosted operational logs are currently configured for 30 days; other provider records follow the applicable retention settings and legal or security requirements.

Export My Data creates a JSON file containing supported local product records and settings. Retained account, subscription, and usage metadata has a separate server export; contact us if you need help obtaining it.

Delete Account & Data starts deletion of Firebase Authentication and retained Firestore user records, then signs the app out. It does not currently guarantee immediate erasure of every local file or every record held in analytics, AI-tracing, diagnostics, or logging systems. Export anything you want to keep and contact us for help with remaining local or provider-held records.

6. Security and sharing

We use authenticated protected routes, encrypted network connections, account-specific local storage, and redaction of known sensitive logging fields. No system is perfectly secure. Please do not send passwords, API keys, recordings, or unnecessary sensitive content by email.

We share information with the service providers described above to operate Intentive. Information may also be disclosed when legally required, to address abuse or security threats, or during a future change of ownership with appropriate notice. Billing is currently disabled and Intentive does not call a payment processor.

7. Requests and changes

You can contact us to request access, correction, or deletion of information associated with you. We may need to verify your identity before acting on a request. We will update the effective date when this notice changes.