To create an account we collect your phone number (your login), a password (stored only as a one-way hash), a display name, your confirmation that you're 18 or older and when you gave it, and your agreement to our Terms. You can add an email address to recover your account; it's optional. When you sign up from our app, we record an identifier for the device you used, only to spot multiple accounts being made on one phone; it's never used for advertising or tracking.

We store the calls you make on each day's questions, any private note you add (only you can ever see it), and the scores, streaks and accuracy we work out from them. The app shows your last 30 days; older calls are kept in your account's archive until you delete your account. Other members only ever see totals, such as the share of members who picked each answer — never your own calls or notes.

When you answer a Read me question, we store your answer; nobody else can see it until they've guessed. In the app, your question for the day (never your answer) also waits to be guessed by people you and they have both added as contacts, and by anyone who has guessed one of your links before; never by anyone you've blocked. When someone guesses your answer, we store their guess and show you their name and whether they were right. If you guess without an account, we store the first name you type, your guess and when you confirmed you're 18 or older, and keep a cookie on your browser so you can't guess the same question twice; if you later sign in or join, your guesses are added to your account. To have guesses you made without an account deleted, write to us at the address below. The person who shared a link can remove any guess from their page.

You add contacts by phone number, either by typing it or by picking one person at a time from your phone's contact picker — only the number you pick is sent to us; we never upload your address book. We store who you sent a signal to, which of the five signals you chose and when. A signal that isn't returned within 24 hours is permanently deleted, and the other person is never told it existed. If you both send one, a match is kept in both your histories, along with the options you pick in the conversation that follows. That conversation's suggestions are written by an AI model that runs on our own server; your messages aren't sent to an outside AI company.

If you register an ID, we store the skill description and category you write, which other members can find in the directory (without your phone number). When a member sends you an inquiry, you receive their message, display name and phone number so you can reply. The ₹99 badge is paid through Cashfree on our website: Cashfree handles your card or UPI details and we never see them; we keep the order number, amount, date and whether it was paid.

If you host a tournament, we store its name, settings and house rules, which other members can see. When you join one, we store your Lichess username (chess) or eFootball name, and your results; other players in it can see your display name, that username and your results. For chess, we check your username and the games you report with Lichess's public service. For eFootball, the screenshot you upload is checked, re-saved without its hidden data (such as where a photo was taken) and stored privately: only the two players and the host can open it, through a link that expires after 15 minutes. Anyone with a tournament's share link can see its name, the players' display names and their game usernames.

If you allow notifications, we store a push token for your phone and your notification settings (which kinds you want, your morning time and quiet hours). Your phone's push service (Apple or Google) and Expo, which relays our notifications to them, receive that token and the notification's text. Notifications about the Emotion Vault never name anyone.

We don't collect your location or your phone's contact list, we don't use advertising or analytics SDKs, we don't track you across other apps or websites, and we don't sell your data or share it with anyone for their own marketing. Our home-screen widgets show only the day's public questions and hold nothing about you.

We use these service providers, only to run the service and under their own privacy and security commitments: DigitalOcean (servers, database and private file storage); Expo, Apple and Google (push notifications); Cashfree (ID badge payments); Brevo (account emails such as password resets); 2Factor (verification text messages to Indian numbers); Sentry (error reports from our servers, which can include technical details of a failed request); and Lichess (we look up the Lichess usernames and games you give us). Your data may be processed on servers outside India. We may disclose information where the law requires it, including to respond to valid legal requests and to protect members' safety.

All traffic between the app or website and our servers is encrypted (HTTPS). Passwords are hashed, never stored in plain text. Tournament screenshots are kept private and only shared through short-lived links. Access to production data is limited to the people who operate Intuitio.

You can delete your account at any time, right in the app (Settings, then Delete account) or on the website. Deleting it permanently removes your profile, contacts, signals, matches, calls and notes, ID profile and inquiries, tournament entries and screenshots, and tournaments you host. Cashfree keeps its own payment records as the law requires. You can also ask us for a copy of your data or to correct it. Under India's Digital Personal Data Protection Act, 2023 you may raise a grievance with us at the address below, and we'll respond within the time the law sets.

Intuitio is only for people 18 and over. Everyone confirms their age when they sign up. If we learn that an account belongs to someone under 18, we delete it.

When this policy changes in a way that matters, we'll update the effective date above and, where required, let you know in the app.