Privacy Policy for Intenca Progress
Effective date: June 15, 2026 Last updated: June 15, 2026
Intenca ("we", "our", or "us") collects, uses, and protects your personal data when you use Intenca Progress ("the App"). We do not use analytics, crash reporting, or any form of behavioural tracking. All data processing is strictly necessary to provide the App's core functionality.
1. What Data We Collect and Why
We collect only the minimum personal data required to operate your account and deliver paid features.
| Data category | Specific data | Purpose | Lawful basis (GDPR) |
|---|---|---|---|
| Account information | Email address, hashed password | Create and manage your account, secure login | Performance of a contract |
| Authentication data | Supabase auth tokens / cookies | Keep you logged in between sessions | Performance of a contract |
| User content | Tasks, areas, tags, and other data you create | Provide core App functionality | Performance of a contract |
| Purchase data | RevenueCat transaction history, subscription status | Grant access to paid features, manage subscriptions | Performance of a contract |
We never collect analytics events, crash logs, device location, contacts, or behavioural data.
2. How We Store and Process Your Data
- Supabase (supabase.com) — stores your email, hashed password, auth tokens, and synced task data. Supabase is a data processor under a Data Processing Agreement (DPA).
- RevenueCat (revenuecat.com) — stores your purchase history and subscription status. RevenueCat is a data processor under a DPA.
- Local storage — your task data is stored locally on your device (SQLite on mobile, IndexedDB on web) for offline access.
Neither Supabase nor RevenueCat is permitted to use your personal data for their own purposes.
3. Third-Party Payment Processors
When you make a purchase, payment processing is handled directly by the Apple App Store or Google Play Store. Intenca never sees or stores your payment card details. RevenueCat receives only receipt tokens and subscription status to grant you access to paid features.
4. Account Deletion
You can delete your account at any time by signing in on intenca.com and visiting your Account page, or through the in-app settings.
5. Data Retention
- Account data — retained while your account is active. Permanently removed within 30 days of account deletion.
- Purchase data — retained as legally required for tax and accounting purposes (typically 7–10 years).
- Auth tokens — expire on logout or after a period of inactivity.
- Local data — removed when you uninstall the App or clear app data.
6. Your Rights Under GDPR
If you are in the European Union, you have the right to access, rectify, erase, restrict processing of, and port your data. To exercise these rights, contact us at [email protected]. We will respond within 30 days.
7. Data Transfers Outside the EU
Supabase and RevenueCat are based in the United States. Both rely on Standard Contractual Clauses (SCCs) for lawful data transfers from the EU. We have ensured both processors commit to EU-level data protection standards.
8. Changes to This Privacy Policy
We may update this policy occasionally. Material changes will be notified via the App or by email. The "Last updated" date at the top always reflects the latest version.
9. Contact
For questions about this policy or to exercise your data rights, contact us at [email protected].
This policy is governed by the laws of Australia.