Last updated: September 7, 2026
Before the app launches. This page describes the planned privacy practices for the Intuoris app, which is not yet available for general use. The practices, providers, locations, controls, and timeframes below are subject to verification before launch. We will publish the confirmed Policy with its effective date before the app becomes available. This advance publication does not limit your rights under applicable law.
Intuoris株式会社 ("Intuoris," "we," "us," or "our") is a Japanese joint-stock company (kabushiki kaisha), corporate number 9010001267810. We are responsible for the personal information described in this Policy.
This Policy covers the Intuoris iOS application and associated account, purchase, and customer-support services, not browsing the company website. Where applicable U.S. consumer health data laws require a separate Consumer Health Data Privacy Notice, we will make that notice available before the relevant collection begins.
Intuoris offers personal reflection and new perspectives. It does not provide medical care, mental health care, counseling, psychotherapy, or other therapy. Even so, what you write or receive may reveal sensitive information, including information about health, emotional experiences, beliefs, or relationships. Those protections apply independently of how our Service is described.
1. Information we collect
Account and sign-in information. We use Sign in with Apple only. We receive an app-specific identifier, authentication information, and the email address you authorize Apple to share. If you use Hide My Email, we receive Apple's relay address. We do not request your real name, Apple Account password, or full date of birth. We record your confirmation that you are at least 18, account preferences, and consent choices.
Reflections and responses. We process the text you submit and the AI-generated response. We save both, together with their dates, a record identifier, and delivery status, so you can review them in History. We do not create a separate long-term memory, psychological profile, or embedding database from your reflections. Responses can contain interpretations about what you share; these are not verified facts.
You choose what to write. Avoid unnecessary names and identifying details about other people. Do not submit another person's sensitive information without appropriate authority. The app accepts text and does not collect voice recordings, images, contacts, HealthKit data, or precise device location.
Purchase and usage records. We receive Apple transaction identifiers, product and purchase information, subscription dates and status, and refund or revocation information. We maintain free-use status, monthly allowances, additional-purchase balances, and successful deductions and reversals. Apple handles payment credentials; we do not receive your full payment card details.
Support communications. We receive the email or in-app messages and attachments you choose to send us. A support request does not automatically attach your entire history. If resolving an issue requires access to a saved reflection, we explain the access and obtain your permission, except for the narrow security or legal circumstances in Section 4.
Technical records. Our systems process IP addresses, request times, app and operating-system versions, request identifiers, authentication events, error codes, and security events to deliver and protect the Service. An IP address can indicate an approximate location. Routine operational logs exclude reflection text and generated responses. We do not use third-party analytics SDKs, advertising identifiers, advertising trackers, or session-replay tools.
2. How we use information
| Purpose | Information used |
|---|---|
| Create and secure your account | Apple sign-in identifier, authentication records, email, and eligibility confirmation |
| Generate your requested response | The text submitted for that reflection |
| Let you review your history | Saved text, response, date, and delivery status |
| Deliver free and paid entitlements | Purchase records, usage counts, subscription dates, and balances |
| Resolve a request or reported problem | Support messages and the relevant records needed for that issue |
| Prevent abuse and maintain reliability | Necessary technical and security records |
| Handle privacy choices and essential service notices | Consent records, request records, and contact information |
| Meet recordkeeping obligations and address legal claims | The specific records necessary for that obligation or claim |
We do not use reflections or responses for advertising, model training, unsolicited marketing, or routine human quality review. We do not sell personal information or share it for cross-context behavioral advertising. We do not send promotional email. Essential notices include purchase-related support, privacy or Terms changes, security information, and advance notice of inactive-account closure.
3. OpenAI processing and your choices
We use OpenAI's Responses API with GPT models. For each reflection, we send the text you submit with our instructions for how the Service should respond. We do not automatically send saved history, your account email, Apple sign-in identifier, or purchase details. If you copy earlier information into a new submission, it becomes part of the new request.
Before your first reflection is sent, the app explains the collection and use of reflection content, including sensitive information, and separately asks permission to send it to OpenAI. We obtain any additional express consent required by applicable law before the relevant processing. Accepting our Terms or acknowledging this Policy does not replace those choices.
If you decline necessary processing, response generation is unavailable. Account and privacy controls, subscription management, deletion, and support remain available. You can withdraw permission in Settings → Privacy → AI Processing or contact privacy@intuoris.com. Withdrawal stops new requests to OpenAI. It does not automatically cancel a subscription or delete existing history; those controls are available separately, and you may request both. Information already processed remains subject to the retention rules below and applicable law.
You may separately withdraw consent to our collection and use of sensitive reflection content in Settings → Privacy → Reflection Data Consent or by contacting us. This stops further processing based on that consent and starts deletion of existing reflection content for which consent was the basis, under Section 6, except for specifically permitted lawful retention. Essential account controls remain available. Withdrawal does not make earlier lawful processing unlawful.
No model training. Intuoris does not train or fine-tune AI models using your reflections or responses. OpenAI states that API data is not used to train or improve its models unless a customer explicitly opts in. Intuoris does not opt in to that use of your data.
OpenAI storage. We disable optional stored-response state and do not use OpenAI's Conversations API as a history store. This does not mean OpenAI retains no information. Under its standard controls, abuse-monitoring logs may contain request and response content and may be retained for up to 30 days, with longer retention where required by law or reasonably necessary to protect its services or others from harm. Applicable technical features, including prompt caching, can also involve temporary retention. Authorized provider personnel may access information for security, abuse prevention, or legal purposes under applicable terms and controls.
We do not represent that our API use has approved Zero Data Retention or that we can erase every provider-held copy immediately. See OpenAI's API data controls. Our own deletion deadlines do not replace OpenAI's separate retention obligations.
4. Human access and security
Within Intuoris, access to reflection content is restricted to one designated developer. That developer may access relevant content with your permission to resolve a support request. Without that additional permission, access is limited to what is necessary and legally permitted to investigate a specific security incident, comply with law, or address a particular legal claim. Access is limited and recorded. We do not routinely read reflections for product research or quality scoring.
This restriction concerns Intuoris's internal access; OpenAI's authorized processing is described above. The Service is not continuously monitored for emergencies, clinical concerns, or crisis intervention. Do not rely on it to arrange help.
We encrypt data in transit and stored account and reflection information at rest, separate content from purchase and operational records, restrict administrative access, and log administrative actions. The Service is not end-to-end encrypted in a way that prevents Intuoris and OpenAI from processing the necessary text. No security method is infallible. We provide security-incident notifications required by applicable law.
5. Storage, recipients, and international processing
Intuoris systems. Account information, history, purchase-entitlement records, and our support mailbox are stored in an Intuoris-managed environment in Japan. Encrypted backups under our control remain in Japan. The application keeps only the local information needed for sign-in and display. We do not use a separate third-party cloud history or analytics service. Our developer accesses information from Japan.
OpenAI. Submitted reflection text is sent to OpenAI for processing in the United States under the launch configuration. OpenAI also uses service providers and authorized operational access as described in its subprocessor information and applicable data-processing terms. Regional processing of submitted text does not mean every type of provider system data or operational access is confined to that region.
OpenAI's published list includes the United States, Canada, and the Philippines for certain moderation services, and the United States, Ireland, the United Kingdom, and Japan for affiliate technical and operational support. These locations may be involved where the relevant processing occurs; this does not mean each reflection is reviewed by a person or sent to every listed location.
Apple. Apple provides sign-in, App Store distribution, and payments. We exchange authentication and transaction-verification information with Apple but do not send reflection content for these functions. Apple processes information for its own services under its Privacy Policy. Its processing may take place in the United States and other countries described there.
Other disclosures. We may disclose necessary records to professional advisers or authorities when legally required or lawfully necessary for a particular claim, obligation, or protective purpose. We do not disclose reflections to other users or publish testimonials without separate permission. A business transfer may involve information only where lawful, with safeguards, required notice, and required consent; it does not authorize an unrelated new use or unlawful sale of sensitive data.
For providers processing information on our behalf, we require appropriate contractual privacy, confidentiality, security, and use restrictions. Cross-border processing can involve different laws and lawful government access. We use the transfer arrangements required by applicable law, including required Japanese-law contractual protections or consent and accompanying disclosures. Contact privacy@intuoris.com about recipients, locations, or applicable safeguards. Consent to use the Service does not waive international-transfer protections.
6. Retention and deletion
Canceling renewal does not delete your account. Paid access continues until the end of the paid period. Afterward, history remains accessible while the account is open, and unused additional purchases remain available.
Individual deletion. In History, select the reflection and choose Delete. It disappears from your account immediately, is removed from production storage within 24 hours, and is removed from routine backups within 30 days. You can also request deletion at privacy@intuoris.com; we may first verify an email request where necessary.
Account deletion. In Settings → Account → Delete Account, you can confirm immediate deletion. Sign-in access ends immediately. We remove the active account and history from production systems within 24 hours and complete routine backup deletion within 30 days. The 30-day period allows secure completion of deletion and backup rotation. It is not for continued ordinary use of reflections or a promised account-restoration period. If a backup is restored for disaster recovery, deletion instructions are reapplied before restored data returns to service.
Inactive accounts. With no active subscription and no account use for 12 months, an account may be closed after at least 30 days' advance notice by email. This applies to free-only accounts and former subscribers. Use before the notice deadline prevents closure. We do not apply this inactivity rule to active subscribers. Additional purchased reflections do not expire; minimal entitlement records are retained separately.
| Record | Retention period or deletion rule |
|---|---|
| Active account and history | While the account is open, subject to deletion and inactivity rules; on deletion, production removal within 24 hours and routine backup removal within 30 days |
| Routine operational and security logs | Up to 30 days from creation; no reflection content |
| Specific investigated security incidents | Necessary records up to 90 days after investigation closes, unless law or a specific legal hold requires otherwise |
| Support correspondence | Up to 12 months after resolution; reflection excerpts and sensitive attachments removed within 30 days after resolution, or earlier when required by an applicable deletion request |
| Consent and privacy-request records | Minimal record of choice or request, date, policy version, and action taken for three years after withdrawal, account closure, or request completion, as relevant; no reflection text |
| Outstanding additional-purchase entitlements | Identifiers, transaction references, and unused balance needed to restore, redeem, or refund the purchase, until the entitlement is resolved; no reflection content or account email |
| Required transaction and accounting records | Generally seven years from the day after the filing deadline for the relevant Japanese business year; ten years or another period only where applicable recordkeeping law requires it; no reflection content |
| Specific legal holds | Only identified records necessary for a particular legal obligation or claim, until that obligation or claim and applicable review or appeal period end; reviewed at least every 90 days |
These periods include routine backups under our control unless expressly stated otherwise. We follow any law requiring earlier deletion or prohibiting an exception. A possible future support request is not a reason to retain all deleted reflections.
An outstanding-purchase record can include a protected form of the Apple sign-in identifier to link remaining purchases if you return. It remains personal information despite being separate from the deleted active account. Its purpose is to preserve what you paid for, not to retain your reflections. You can request an explanation or review at privacy@intuoris.com.
OpenAI's retention is described in Section 3. Apple retains information under its own rules. Copies you export or send elsewhere are outside our deletion process. Deleting the app alone does not delete server-held information or cancel Apple billing.
7. Your choices, rights, and complaints
You can review History, delete reflections, withdraw AI-processing permission, and request account deletion in the app. Contact privacy@intuoris.com for access, a copy, correction, deletion, or information about recipients and processing. Depending on applicable law, you may also have rights to portability, restriction, objection, consent withdrawal, or an appeal of a denied request.
We verify identity proportionately and accept authorized representatives where permitted. We respond within applicable legal deadlines, explain any lawful extension or refusal, and identify available complaint or appeal routes. We do not unlawfully discriminate or retaliate for exercising privacy rights. Contact us for an accessible alternative to an in-app control.
United States. We do not sell information or use it for targeted advertising. Where state law provides an appeal right, email privacy@intuoris.com with the subject "Privacy appeal." We provide our decision and the available route to the relevant state authority. Where applicable, the separate Consumer Health Data Privacy Notice made available before collection will explain rights concerning covered health data.
Canada. Contact us about access, correction, consent withdrawal, or overseas processing. You can complain to the Office of the Privacy Commissioner of Canada or the provincial regulator with jurisdiction, including the Commission d'accès à l'information du Québec where applicable.
Australia. You can request access or correction and complain to us. We acknowledge and investigate complaints and aim to respond within 30 days. If unresolved, you may contact the Office of the Australian Information Commissioner where it has jurisdiction. We also accept deletion requests, although statutory deletion rights depend on applicable law.
Japan. Where applicable under the Act on the Protection of Personal Information, you may request disclosure, correction, cessation of use or provision, deletion, and relevant third-party provision records, subject to that law's conditions.
Your applicable rights are not restricted merely because a country or region is not listed here.
8. Children
Intuoris is for people aged 18 and over. We do not knowingly collect personal information through the Service from people under 18. If you believe someone under 18 has submitted information, contact privacy@intuoris.com so we can investigate and take appropriate action, including deletion where required.
9. Changes to this Policy
We publish revisions with a new effective date and give appropriate notice of material changes. Before introducing a new purpose, recipient, or practice requiring consent, we obtain it. Continued use does not replace consent required by law.
10. Contact
Privacy Officer — Intuoris株式会社
Japanese joint-stock company (kabushiki kaisha)
Corporate number: 9010001267810
6F, N&E BLD., 1-12-4 Ginza, Chuo-ku, Tokyo 104-0061, Japan
Privacy: privacy@intuoris.com
App support: support@intuoris.com
General and press: hello@intuoris.com