intori Privacy Policy

Last Updated: August 11, 2026

This policy covers the intori website and the intori mobile app. There is one policy for both.

What changed in this update

This update covers the intori mobile app for iPhone. It describes the dietary and health-adjacent information you declare and how we use it. It names every AI processor and data provider that receives context from intori, not just OpenAI. It adds subscription and billing information. It also replaces the old note that export and deletion tools were still being built. You can now download your data and delete your account yourself. It removes the old description of matching and friends, because intori no longer has social features.

Who we are

The intori service is owned by Tuum Technologies, Inc. ("Tuum", "we", "us", or "our").

You can contact us by email at contact@tuum.tech.

In writing to:

What intori is

intori is a household personalization service. You declare preferences and constraints for your household, and intori uses those declared signals to produce daily suggestions with sources attached: what to cook or eat, what to watch, live music and events, and sports. The features that produce those suggestions are called helpers.

How your declarations are used:

• What you declare can bind a hard filter. A declared constraint can remove results.
• What intori infers from your activity can only change the order of results. It cannot remove a result or add one back.
• Safety-class items fail closed. If the information available to intori does not show that an item meets a declared safety constraint, intori leaves it out rather than guess.
• intori shows you which declared constraints it applied to a result, so you can correct anything that looks wrong.

intori applies what you declared to what its sources say. It is not a verification or certification service, and it does not independently confirm that a source is correct. Please read the dietary, allergen, and safety section of our Terms of Use before relying on a suggestion for a food allergy or a medical dietary need.

intori is built around user-owned data and user-controlled consent. Your answers, preferences, declared constraints, local context, and personal signals are yours. We use them to provide the services you ask for, personalize your experience, and help you control where your context is used.

Eligibility

intori is not directed to children under 13. You must be at least 13 years old to use intori. If the law where you live requires a higher age to consent to the processing of your personal data, you must be old enough to provide that consent or use intori only with valid permission from a parent or legal guardian. If we learn that we collected personal information from a child under 13, we will take steps to delete it.

Children in your household are treated differently from children who use intori. A parent or guardian may declare a dietary constraint that applies to a child in the household, for example a nut allergy. intori does not collect the child's name, age, birthdate, photo, or any other direct identifier. The constraint is stored as an unnamed household constraint. There is no profile for that child and no account for that child. See "Dietary constraints and health-adjacent information" below.

Information we collect

We collect information from you, from the platforms you use to sign in, from your use of intori, and from service providers that help us operate intori.

Account and sign-in information

Depending on how you access intori, we may collect or process:

• Your email address, when you sign in on the web using a one-time email magic link.
• Sign in with Apple identifiers, including the user identifier Apple gives us and the email address Apple passes along, which may be a private relay address if you chose to hide your email.
• World App, World Mini App, World ID, or wallet-based identifiers, such as wallet address, username, profile image, authentication messages, signatures, nonce records, and verification results.
• Farcaster account identifiers, such as FID, username, display name, profile image, bio, and related public profile data.
• Account-linking records that connect the sign-in methods you use into a single intori account, so your subscription, runs, and personalization stay unified across the web, the app, and supported platforms.
• Session tokens and cookies used to keep you signed in.
• Information about the client app or platform through which you accessed intori.

Answers, preferences, and context

When you answer questions, complete onboarding, declare constraints, rate results, or interact with helper surfaces, we collect the information you choose to provide. This may include:

• Answers to questions about preferences, tastes, interests, values, activities, identity, and context.
• Declared household constraints, including the dietary constraints described below.
• Topics, groups, streaks, and other progress within intori.
• Feedback, ratings, likes, skips, and other interaction signals.
• Helper share links and preview images that you choose to create or distribute.

Dietary constraints and health-adjacent information

You can declare dietary constraints for your household. You type or select these yourself. We do not buy them, infer them from medical records, or read them from Apple Health or any other health app. Declared dietary constraints may include:

• Allergies and intolerances, such as peanuts, shellfish, or lactose.
• Medical dietary needs, such as celiac disease, diabetes, or a low-sodium diet.
• Faith-based dietary practice, such as halal, kosher, or a fasting period.
• Dietary choices, such as vegetarian, vegan, or pescatarian.
• Dislikes and ingredients you would rather avoid for reasons that are not health related.

Some of this is health information. Apple's App Privacy framework treats user-provided health or medical data as Health data, and we treat declared dietary constraints that way too.

We use declared dietary constraints to filter and rank what intori suggests, to explain why a suggestion was included or left out, and to decide what to ask you next. We do not use them for advertising. We do not sell them. We do not show them to other intori users.

We store the constraint and whether it applies to you or to someone else in your household. We do not store the names, ages, birthdates, photos, relationships, or any other identifying details of the people in your household. A constraint is recorded as something like "severe peanut allergy, applies to a household member", not as a profile of that person. intori does not have household member profiles.

You can view, correct, and delete your declared dietary constraints at any time in intori. Deleting a constraint stops intori from applying it to future suggestions.

Local context

If you choose to add local context, we may store information such as city, region, country, place label, place source, and radius. Local context is user-declared and can be paused, updated, or deleted. The current product is designed around coarse local context, not precise GPS coordinates, raw coordinates, or inferred home or work location.

Derived and inferred data

intori may create derived data from your activity, such as topic signals, sensitivity tiers, visibility states, your vibe, helper context summaries, and personalization profiles. These derived records help intori decide what questions to ask, what context to include, what to exclude, and what may be relevant to you. Inferred data can change the order of your results. It cannot bind a hard filter, and it cannot override something you declared.

Consent and connected app records

When you grant, deny, or revoke consent, we may store consent records, scope, sensitivity level, metadata, timestamps, connected app identifiers, authorization codes, grant status, expiration, revocation status, and receipts showing when a connected app accessed a context bundle.

AI helper and result data

When you use AI-assisted features, we may process selected intori context, local context when active, source-search results, your displayed request, generated output, result receipts, feedback, model name, prompt version or hash, token estimates, cost estimates, duration, errors, and related metadata.

AI outputs may be incomplete, outdated, or inaccurate, and should be checked before you rely on them.

Payments and subscriptions

If you subscribe to intori, we store subscription records such as plan, status, trial status, start date, renewal date, cancellation date, purchase reference, provider, transaction identifier, and receipt validation results. If you subscribe in the iOS app, Apple processes the payment and gives us a receipt and a subscription status. We do not receive your payment card number from Apple. If you subscribe on the web, Stripe processes the payment. Stripe handles your card details, and we store a customer reference, the card brand and last four digits where Stripe provides them, and the status of the payment. We do not store full payment card numbers.

If you previously bought credits, we may keep the related purchase records, including provider, amount, transaction identifier, status, failure codes, confirmation time, and verification metadata, for accounting, fraud prevention, and dispute purposes. Credit purchases made through a wallet or a blockchain network on the World App and Farcaster surfaces may include a transaction hash and may be public on that network. Those payment methods are not part of the iOS app. We do not collect your private keys.

Notifications

If you enable notifications, we may store notification tokens, notification URLs, opt-in status, notification campaign information, send logs, and delivery or failure metadata. You can opt out through the applicable platform or intori notification controls. See the mobile app section below for how this works on iOS.

Usage, safety, and support information

We may collect technical and usage information such as device or browser information, request metadata, logs, approximate location derived from context or platform data, abuse and fraud signals, rate-limit data, red flags, quality scores, and error reports. If you contact us, we may collect your message, contact details, and any information you choose to provide.

Information we do not collect

We try to avoid collecting personal information that intori does not need. Unless you choose to provide it to us in a support request or another free-form message, we do not ask for or intentionally collect:

• Your legal name.
• Your mobile or other phone number.
• The names, ages, birthdates, or identities of the people in your household.
• Medical records, clinical diagnoses, prescriptions, or data from Apple Health or any other health app.
• Government ID numbers, KYC documents, or biometric identifiers.
• Private keys, recovery phrases, or wallet seed phrases.
• Payment card numbers or bank account numbers.
• Precise GPS coordinates, raw coordinates, or inferred home or work location.
• Your device address book, phone contacts, photos, calendar, or microphone.

Third-party platforms you use with intori, such as Apple, Farcaster, World App, wallets, payment providers, or blockchain networks, may collect information under their own policies.

The intori mobile app

The intori app for iPhone works the same way as the website, and this policy applies to both. A few things are specific to the app.

Push notifications

If you allow notifications, we store a device push token so we can send the reminders and daily suggestions you asked for, along with your opt-in status, send logs, and delivery or failure information. Notifications are delivered through Apple Push Notification service. You can turn notifications off at any time in the iOS Settings app, under Notifications, and in intori wherever the app offers a notification control. Turning them off in iOS stops delivery.

Approximate location

The app may ask permission to use your approximate location. If you allow it, we use it to fill in your local context, so helpers can suggest nearby restaurants, venues, and events. The app asks for approximate location, not precise location. We do not track you in the background, we do not build a location history, and we do not infer your home or work address. You can deny the request and type a city instead, and you can change the permission later in the iOS Settings app. The app works either way.

Device and diagnostic information

The app collects device model, operating system version, app version, language and region, and crash and performance diagnostics. We use this to keep the app working and to fix problems, and it may be linked to your account for support and abuse prevention.

intori collects all of this itself and writes it to our own records. The app contains no third-party analytics, crash reporting, attribution, or advertising software development kits. Nothing about your use of the app is sent to an analytics company. The app does not use the device advertising identifier and does not track you across other companies' apps or websites. If we ever add a third-party diagnostics tool, we will update this policy and the App Store privacy label before it ships.

Deleting your account in the app

You can delete your intori account from inside the app. See "Your controls and choices" below.

How we use information

We use information to:

• Provide, maintain, personalize, and improve intori.
• Authenticate users and maintain sessions.
• Build and update your preferences, declared constraints, groups, answers, local context, and personalization state.
• Apply your declared constraints as filters, use inferred signals only to change ranking, and show you which constraints were applied to a result.
• Generate suggestions, helper results, and context summaries.
• Decide what to ask you next.
• Let you control topic, group, local context, notification, AI sharing, and connected app consent.
• Process subscriptions, verify purchases, and manage trials, renewals, and cancellations.
• Send notifications you request or allow.
• Detect, prevent, and respond to spam, abuse, fraud, security incidents, and violations of our terms.
• Provide customer support and communicate with you.
• Measure performance, reliability, and product usage.
• Comply with law and enforce our rights.

We do not use your information for purposes that are materially different from those described in this policy without providing appropriate notice or obtaining consent where required.

How information is shared

We share information only as described below.

With AI processors

Two of the companies we work with are AI processors. To produce a helper result, intori sends them a limited amount of context. We send what the request needs and no more. We do not send your email address, sign-in identifiers, or payment information to them.

• OpenAI. Used to interpret your request, summarize sources, and write the result. May receive your request text, the declared preferences and dietary constraints relevant to that request, coarse local context, and source material retrieved for the request.
• Perplexity. Used for search and retrieval when a helper needs current information. May receive a search query built from your request and the relevant declared preferences, which can include dietary constraints.

These processors receive context in order to answer a request. They do not receive your intori account. We reach both companies through their developer APIs, not through their consumer products. We send them context to answer your request. We do not send it for model training, and we do not ask them to train on it. What each company does with data it receives through its API is governed by that company's own terms. If our use changes, we will update this policy first.

With data providers

The following are data APIs, not AI services. intori queries them for facts and listings. They do not generate results, and they do not receive your intori account.

• Spoonacular. Used for recipe and ingredient data. May receive recipe search terms, including dietary constraints and excluded ingredients such as allergens.
• Google Places. Used to find and describe local venues such as restaurants. May receive coarse local context, such as a city and a search radius, and venue search terms.
• Ticketmaster. Used for live event and ticket listings. May receive coarse local context, date ranges, and event search terms such as a genre or an artist.

How you control what goes to an AI processor

Context goes to OpenAI or Perplexity only when you run a feature that needs one of them. Running that feature is what sends it. Nothing goes to either company when you are not using an AI-assisted feature, and the rest of intori works without them.

We are building a dedicated permission control for this, and it will live in Everything we hold, on the You tab. It is not in the product yet. Until it ships, you decide by choosing whether to run an AI-assisted feature. We will update this section when the control is available.

If you have a question or a request about your context, email contact@tuum.tech.

With other intori users

We do not share your information with other intori users. There is no matching, no friends, no chemistry summaries, no shared vibes, and no mutual friends. intori has no social graph. Your answers, your declared preferences, and your declared dietary constraints are not visible to anyone else using intori.

You can create a share link or a preview image for a Helper and send it to whoever you like. Those show information about the Helper. They do not carry your answers, your declared constraints, or anything else personal to you.

With connected apps you approve

If you approve a connected app, intori may share a scoped context bundle with that app. For example, a music scene scope may include music preference summaries, independent-artist openness or support style, coarse active local context, and missing areas that help the app ask useful follow-up questions.

The current connected app design excludes raw answers, raw questions, declared dietary and health-adjacent constraints, exact location, GPS coordinates, inferred home or work location, payment data, wallet claims, KYC claims, biometric claims, and identity claims unless a future feature clearly asks for additional consent. You can disconnect a connected app whenever you want. Open Connected apps under Your data and choose Disconnect. That stops future access.

Once a connected app receives information, that app's own terms and privacy policy may apply to its handling of the information.

With service providers

We use service providers to host and operate intori, store data, process payments, deliver notifications, provide AI processing and source data, secure intori, and provide customer support. These providers may process information only as needed to perform services for us, subject to appropriate contractual and security obligations.

Service providers include cloud hosting and database providers, Apple for app distribution, sign-in, push notifications, and App Store billing, Stripe for web payments, OpenAI and Perplexity for AI processing, Spoonacular, Google Places, and Ticketmaster for recipe, venue, and event data, Farcaster and Farcaster data providers, World App and Worldcoin services, wallet or blockchain infrastructure providers, and support tools.

With third-party platforms

When you use intori through Apple, Farcaster, World App, wallets, blockchain networks, or other third-party platforms, those platforms may process information under their own terms and privacy policies. Blockchain transactions may be public and difficult or impossible to delete.

For legal, safety, and business reasons

We may disclose information if we believe disclosure is reasonably necessary to comply with law, respond to legal process, protect rights or safety, investigate abuse or fraud, enforce our terms, or complete a merger, acquisition, financing, reorganization, or similar transaction.

Selling or sharing for advertising

We do not sell or rent your personal information. We do not share personal information for cross-context behavioral advertising. We do not sell, rent, or share your declared dietary and health-adjacent information for any advertising purpose, and we do not use it to target ads to you. If any of this changes, we will update this policy and provide any required choices.

Your controls and choices

intori is designed to give you control over your data and your consent. Depending on the feature, you can:

• Skip questions or choose what answers to provide.
• View, correct, or delete a declared dietary or household constraint.
• Pause, edit, or delete local context.
• Grant or turn off consent for sensitive topics in your permission ledger, under Everything we hold. Turning one off changes what intori may ask you next. It does not delete helper context that already exists.
• Grant or withdraw permission for intori to send your context to an AI processor.
• Download a copy of your data, clear what intori has learned about you, or delete your account, from the You tab.
• Approve a connected app, or disconnect one, in Connected apps under Your data.
• Enable or disable notifications through the iOS Settings app or intori notification controls.
• Choose whether to create or distribute Helper share links and preview images.
• Contact us to request access, correction, export, deletion, or other privacy rights.

Deleting your account

You can delete your intori account yourself. In the app, open the You tab and choose Delete your account. You can also reach it from Everything we hold. On the web, email contact@tuum.tech and we will delete the account.

Deleting your account removes your answers, declared preferences, declared dietary constraints, local context, helper results, and connected app grants, except for records we must keep for legal, accounting, security, or fraud-prevention reasons. If you signed in with Apple, deleting your account also revokes the Sign in with Apple token, so intori no longer holds an active sign-in relationship with your Apple ID.

Deletion is permanent. We cannot restore a deleted account. Deleting your intori account does not cancel an App Store subscription. Cancel that separately in your Apple account subscription settings.

Getting a copy of your data

You can download a copy of your data yourself, in the app and on the web. Open Your data and choose Download everything. intori builds the file straight away and your device downloads it as a JSON file. There is no queue and no waiting for an email.

The export includes your account and sign-in details, your answers, your declared preferences, your declared dietary constraints including whether each one applies to you or to a household member, your local context, your consent records, your helpers and runs, your connected app grants and receipts, and your vibe. If you would rather ask us for it, email contact@tuum.tech.

Retention

We keep information for as long as needed to provide intori, maintain user controls and receipts, prevent abuse, comply with legal obligations, resolve disputes, and enforce agreements.

Session cookies are intended to expire after a limited period. Partner grants may expire or be revoked. Payment, subscription, and transaction records may be retained for accounting, fraud prevention, charge dispute, tax, and legal reasons. Profile, answer, declared constraint, consent, AI result, receipt, and derived records are kept until you delete them, delete your account, or request deletion. Turning off a topic consent changes what intori may ask you next. It does not by itself delete helper context that already exists.

We are continuing to define more specific retention periods for each data category.

Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information. No online service can guarantee absolute security. You are responsible for keeping your device, platform account, and any authentication credentials secure.

International processing

We are based in the United States, and we and our service providers may process information in the United States and other countries. The laws of those countries may differ from the laws where you live.

Privacy rights

Depending on where you live, you may have rights to request access, correction, deletion, portability, restriction, objection, or information about how your personal information is used and disclosed. You may also have rights to limit the use of sensitive personal information, or to opt out of certain sales, sharing, or targeted advertising. Declared dietary and health-adjacent information is treated as sensitive. We use it only to provide intori, and we do not sell it or share it for advertising.

To make a privacy request, contact contact@tuum.tech. We may need to verify your identity before fulfilling a request. We will not discriminate against you for exercising privacy rights.

Changes to this policy

We may update this policy from time to time. If we make material changes, we will provide reasonable notice, such as by updating the date above, posting notice in intori, or using another appropriate method.

Contact us

For questions or privacy requests, contact us at contact@tuum.tech.