In2mee

Consumer Health Privacy Notice

Last updated: October 18, 2026

This Consumer Health Privacy Notice explains how Night Tech LLC (“we,” “us”) collects, uses, and shares consumer health data in connection with In2mee. It supplements, and should be read together with, our Privacy Policy. In2mee is a private journal for adults 18 and older, with optional health-alert features. It is not a medical device, not a HIPAA covered entity by default, and does not provide medical advice, diagnosis, or treatment.

1. Who We Are & How to Contact Us

In2mee is operated by Night Tech LLC. For consumer health privacy questions, access, deletion, or other requests, email privacy@in2mee.com. We will respond as required by applicable law, including within the timelines in section 10.

2. What This Notice Covers

This Notice covers “consumer health data” you provide or that we process in the app — information that identifies or could reasonably be linked to you and that relates to your physical or sexual health, reproductive or sexual health status, treatment or testing, or similar health-related information you choose to record. It does not cover de-identified data that cannot reasonably be linked back to you.

3. Categories of Consumer Health Data We Collect

Depending on what you choose to enter, categories may include:

  • Sexual / intimate health journal data: for each entry, the date, city, ratings (overall, chemistry, passion and connection), whether protection was used, whether you would repeat, tags and private notes you record about your own experiences.
  • Partner-related entries you create: screen names, tags, and notes you associate with partners in your private journal (these are your records about your life, not a public profile of another person), an optional email address for a partner, used only to deliver anonymous in-app health alerts you choose to send, and an optional phone number for a partner, kept only in your private journal and never used to contact anyone.
  • Health alert data: condition type, test date, and exposure window dates you report when creating an alert, plus a record of which partners and email addresses you selected and when you sent it.
  • Blocks and reports: if you block or report an alert you received, the record of that block or report, as described in our Privacy Policy.
  • Account identifiers linked to that data: email and screen name used to authenticate and store your journal.

    • 4. Sources of Consumer Health Data

  • You, when you create an account and enter journal, partner, entry, or health-alert information.
  • Other In2mee users, only when they send an anonymous health alert to the verified email address on your account, or report an alert you sent.
  • Our hosting provider, Lovable (through its Lovable Cloud service, built on Supabase), to the extent needed to operate sign-in and store your records.
  • We do not buy consumer health data from data brokers.

    • 5. Purposes for Collection and Use

    We collect and use consumer health data only to:

  • Provide your private journal (store and display your own entries, partners, and insights back to you).
  • Operate optional anonymous in-app health-alert notices to people you designate within an exposure window you set.
  • Secure the service, prevent abuse (including false or malicious alerts), review reports, and enforce our Terms.
  • Comply with law and respond to lawful requests.
  • Improve reliability and safety of features you use (using aggregated or limited operational signals where possible, such as error reports that do not include your journal content).

    • 6. How Health Alerts Work (Sharing)

    When you send a health alert, we generate an anonymous notice for recipients you select within the exposure window you provide. Alerts are shown only inside the app, and only to people who have an In2mee account with a verified email address that matches the one you saved; nothing is sent to other addresses. People who have blocked you are not notified. Recipients see only the notice text and the date it arrived. They are not shown your identity, and the condition you enter is not shown to them. Alert content is limited to an informational nudge to consider testing. You are responsible for using alerts only for genuine concerns and accurate windows. Misuse may violate our Terms.

    In2mee does not send health alerts by email, text or any other message. If you receive an alert, you can block its sender or report the alert from Health Alerts → Received. Blocking removes that sender's alerts from your Received list and stops further alerts from that sender to you, and the sender is not told. You can delete a health alert you sent at any time, and it is then removed from recipients' notifications.

    7. Sharing, Selling, and Targeted Advertising

  • No sale: We do not sell your consumer health data.
  • No advertising share: We do not share your entries, partner journal entries, or health-alert records with third parties for cross-context behavioral advertising.
  • Service providers: In2mee is built with and hosted by Lovable. Through its Lovable Cloud service, which is built on Supabase, Lovable stores the app's database, runs sign-in, keeps security logs, error reports and backups, and sends account emails (sign-up verification and password-reset) from an auth.lovable.cloud address. We choose providers whose terms require them to protect your data consistent with this Notice and our Privacy Policy. Lovable and Supabase use other sub-processors to run their platforms, listed in their published sub-processor lists. Emails you send to our in2mee.com addresses, including consumer health privacy requests, are received through an email-forwarding service. Account emails and their link tracking are described in our Privacy Policy; they do not contain your journal or health-alert content.
  • Where your data is stored: The app's database is hosted in Canada (Central). If you use In2mee from outside Canada (for example, the United States), your consumer health data is stored and processed outside your country, where privacy laws may differ.
  • Other users: When you send a health alert, recipients receive only the anonymous notice described in section 6.
  • Legal / safety: We may disclose information if required by law, or to protect users, the public, or Night Tech LLC from fraud, abuse, or imminent harm, to the extent permitted by law.
  • Business transfers: If we are involved in a merger, acquisition, or asset sale, consumer health data may transfer subject to this Notice or equivalent protections, with notice where required.

    • 8. Retention

    We retain consumer health data in your account until you delete the relevant records or delete your account. You can delete individual entries, partners and health alerts you sent at any time. Deleting a partner also deletes your entries with that partner. In Settings, Delete Account & All Data permanently deletes your login account and all of your consumer health data in the app (partners, entries, health alerts, alert notifications you sent, your alert-sending log, anonymous alerts other users sent to your email, and your blocks) and signs you out. This cannot be undone. Reports are handled as described in the Data Retention & Deletion section of our Privacy Policy: when you delete your account, your details are removed from reports, and the rest of each report is kept only as long as reasonably needed to review abuse and keep In2mee safe. Our hosting provider makes a daily backup of the app's database; deleted data may remain in those backups for up to about 14 days, until older backups are automatically removed, and is not used for any other purpose in the meantime.

    9. Your Rights & Choices

    Subject to applicable law (including state consumer health privacy laws such as Washington’s My Health My Data Act, where it applies), you may have the right to:

  • Know / access: view your journal data in the app, get a copy of your account data any time in Settings → Export my data, and request confirmation of what consumer health data we hold.
  • Confirm and get a list of who received it: confirm whether we collect, share or sell your consumer health data (we do not sell it), and access that data, including a list of all third parties and affiliates we have shared it with or sold it to, with an active email address or other online way to contact each of them.
  • Delete: delete individual records in-app, or permanently delete your account and all of your consumer health data in Settings (Delete Account & All Data). For help, email privacy@in2mee.com.
  • Withdraw consent / stop use: stop using health-alert features; delete alerts you created; block senders of alerts you receive; request that we stop certain processing where the law requires consent and you withdraw it (except where we must retain data for legal or security reasons).
  • Non-discrimination: we will not discriminate against you for exercising privacy rights available under applicable law.

    • 10. How to Submit a Request

    Email privacy@in2mee.com with the subject line “Consumer Health Privacy Request,” and tell us whether you want access, deletion, or another right. We may need to verify your identity (for example, confirming control of the account email). Authorized agents may submit requests where state law allows; we may require proof of authorization and still verify the consumer. We will respond to your request within 45 days of receiving it. If we need more time, we may extend this once by up to 45 more days; if we do, we will tell you within the first 45 days and explain why.

    10A. How to Appeal a Decision

    If we decline to act on your request, in whole or in part, we will tell you why. You can appeal our decision by emailing privacy@in2mee.com with “Appeal” in the subject line within a reasonable time after you receive it. We will respond in writing within 45 days of receiving your appeal, telling you what action we took or did not take and the reasons for our decision. If we deny your appeal, you can contact your state attorney general to submit a complaint, for example:

  • Washington State Office of the Attorney General: https://www.atg.wa.gov/file-complaint
  • Connecticut Office of the Attorney General: https://portal.ct.gov/ag/common/complaint-form-landing-page
  • Nevada Office of the Attorney General: https://ag.nv.gov/Complaints/CSU_Complaints___FAQ/

    • 11. Age Restriction

    In2mee is for adults 18 and older. We do not knowingly collect consumer health data from anyone under 18. If you believe a minor has used the service, contact privacy@in2mee.com so we can delete the account and related data.

    12. Not Medical Advice; No HIPAA Claim

    Health alerts and journal tools are informational only. They are not diagnosis, treatment, or medical advice. Always consult a licensed healthcare professional. Unless we enter a separate business associate agreement and expressly say so, do not assume In2mee is a HIPAA “covered entity” or that journal data is protected health information under HIPAA.

    13. Security

    We use access controls (including per-user isolation of journal records through row-level security), HTTPS connections, and the default protections of our hosting provider, Lovable (Lovable Cloud, built on Supabase). We do not provide end-to-end encryption. No method of transmission or storage is 100% secure.

    14. Changes

    We may update this Notice when our practices or the law change. We will revise the “Last updated” date above and, for material changes, provide additional notice in the app where appropriate.

    15. Related Policies

    See also our Privacy Policy and Terms & Conditions. For accessibility requests, or to get this Notice in another format, email support@in2mee.com.

    Questions about this page: privacy@in2mee.com