In2mee

Privacy Policy

Last updated: October 18, 2026

Your privacy is the foundation of In2mee. This policy explains what personal and sensitive information we collect, how we use it, and the choices you have. Because In2mee stores intimate health and relationship data, we treat your information with extra care and never sell it.

1. Who Operates In2mee & Contact

In2mee is operated by Night Tech LLC. If you have privacy questions, requests, or concerns, you can contact us at privacy@in2mee.com. For app support, email support@in2mee.com. Report misuse of alerts or other Terms violations to support@in2mee.com, or use Report in the app.

2. Information We Collect

We collect only what is needed to provide the service:

  • Account information: your email address, your password and the screen name you choose. Sign-in (email and password, with an emailed verification code or link) is handled by our hosting provider, Lovable, through its Lovable Cloud service, which is built on Supabase; we never see your password.
  • Profile content: partner screen names, tags, private notes and, if you add them, a partner's email address and phone number. The email address is used only to deliver an anonymous in-app health alert you choose to send, and only if that email matches the verified email address of an In2mee account. The phone number is kept only in your private journal; In2mee never calls, texts, invites or alerts anyone using it.
  • Journal entries: for each entry, the date, city, ratings (overall, chemistry, passion and connection), whether protection was used, whether you would repeat, tags and notes.
  • Health alert records: condition type, test date, and exposure window dates you report when sending an alert.
  • Alert sending records: when you send an alert, we store which partners you selected, the email addresses you selected, and a private log of when you sent it and how many recipients you selected, so we can deliver it and enforce sending limits.
  • Age confirmation: that you confirmed you are 18 or older, and when.
  • Blocks and reports: If you block alerts from a sender, their alerts are removed from your Received list, and we store your email address and an internal ID for that sender; we never show you who the sender is. If you report an alert, we store your email address, your account ID, the alert's ID and the reason you give. If someone reports an alert you sent, the report is linked to your internal account ID so we can review it; we never tell the reporter who you are.
  • Login and security records: when you sign up, sign in or reset your password, our hosting provider records technical security events, such as your account ID, the time, your IP address and your device or browser information.

    • 3. How We Use Your Information

    We use your data to:

  • Display your own entries, partners, and insights back to you.
  • Show an anonymous in-app health-alert notice to past partners who have an In2mee account with a verified email address that matches the one you saved, when you report a concern.
  • Keep the app working, stable, and safe, including reviewing reports of abusive or fake alerts.
  • Authenticate you and keep your account secure.

    • 4. Data Isolation & Security

    Each user can only access their own records. Partner, entry, health-alert, and notification data is isolated to your account through row-level security — no other user can read, edit, or delete your information. Connections to In2mee use HTTPS, and we enforce per-user access controls on every record. We do not provide end-to-end encryption; your notes and other content are stored with the default protections of our hosting provider, Lovable (Lovable Cloud, built on Supabase).

    5. Anonymous Health Alerts

    When you send a health alert, the recipient sees an anonymous notice in the app that someone they were connected with during the exposure window reported a health concern. The recipient sees only the notice text and the date it arrived. Your identity is never shared with recipients, no sender information is included, and the condition you enter is not shown to them. Alerts are shown only inside the app, and only to people who have an In2mee account with a verified email address that matches the one you saved. No email, text or other message is sent to anyone, and nothing is sent to addresses without an account. People who have blocked you are not notified.

    5A. Cookies, Analytics & Email

    The In2mee app and website do not use analytics, advertising networks or third-party advertising SDKs, and we do not track you across other companies' apps or websites. The only cookies and browser storage we use are the essential ones that keep you signed in and maintain your session. If the app hits an error, technical details (the page, error message and browser information) may be sent to our hosting provider, Lovable, so the error can be fixed. They do not include your journal content.

    In2mee sends only account emails: sign-up verification codes or links, and password-reset links. They are sent for us by our hosting provider's email service, from an auth.lovable.cloud address. In2mee does not send health alerts by email. The links in these emails pass through a redirect run by our hosting provider's email service, which lets it record that a link was clicked and when, along with technical details such as IP address and device or browser type. These emails may also load a font from Google Fonts when you open them. This information is used only to deliver email and troubleshoot delivery problems. We do not use it for advertising or profiling, and we do not sell it.

    If we add any other analytics or tracking, we will update this policy before the change ships.

    5B. Consumer Health Data

    Some information you enter (including entry and health-related notes and health-alert records) may be consumer health data under certain state laws. See our separate Consumer Health Privacy Notice for additional disclosures.

    6. What We Do Not Do

  • We do not sell your personal data.
  • We do not share your entries or partner information with third parties for advertising.
  • We do not make your data public or searchable.
  • We do not use your content to train AI models.

    • 7. Third-Party Services

    In2mee is built with and hosted by Lovable. Lovable serves the app from locations around the world. Through its Lovable Cloud service, which is built on Supabase, it stores the app's database in Canada (Central), runs sign-in, keeps security logs, error reports and backups, and sends the app's account emails (sign-up verification and password-reset) through its email service. Our database is hosted in Canada, so if you use In2mee from outside Canada (for example, the United States), your information is stored and processed outside your country, where privacy laws may differ. Google receives your IP address and basic browser information when you open an account email that loads a Google font. Emails you send to our in2mee.com addresses are received through an email-forwarding service. Lovable and Supabase use other sub-processors to run their platforms, listed in their published sub-processor lists. We rely on these providers only as needed to deliver the app. We do not transfer your personal data to data brokers. We choose providers whose terms require them to protect your data consistent with this policy.

    8. Data Retention & Deletion

    We keep each record until you delete it or delete your account. You can delete individual entries, partners and health alerts you sent at any time. Deleting a partner also deletes your entries with that partner, and deleting a health alert you sent also removes it from recipients' notifications.

    In Settings, Delete Account & All Data permanently deletes your login account and all of your data in the app: your profile and sign-in record, partners, entries, health alerts, alert notifications you sent, your alert-sending log, anonymous alerts other users sent to your email, and your blocks (including blocks other users made against you). You are then signed out. This cannot be undone, and we cannot restore deleted data for you.

    Our hosting provider makes a daily backup of the app's database. Deleted data may remain in those backups for up to about 14 days, until older backups are automatically removed; it is not used for any other purpose in the meantime. Login and security records (such as your account ID, IP address and device or browser information) are kept for a limited period set by our hosting provider, and records of account emails delivered to you are kept by its email service for a limited period. These are used only for security, troubleshooting and email delivery.

    When you delete your account, we remove your email address and account ID from any reports you made, and your account ID from any reports about alerts you sent. The rest of each report (the alert ID and the reason) is kept for as long as reasonably needed to review abuse and keep In2mee safe, and is no longer linked to you.

    Information that another user saved in their own private journal, such as your email address in their partner list or in health alerts they sent, belongs to their journal and is not deleted when you delete your account.

    If you later register again with the same email, a new, empty account is created. If someone who sent you an anonymous alert deletes their account, that alert is removed from your notifications. If deletion does not finish, try again or contact privacy@in2mee.com.

    9. Your Rights

  • Access: view your partners, entries, sent alerts and received alerts in the app, and get a copy of your account data any time with Export.
  • Export: Open Settings → Export my data to get a JSON copy of your account email and screen name, your partners, entries and health alerts (each health alert shows which partners you selected), and the anonymous alerts you received, without any sender details. On iPhone, you can save or share the file from the share sheet, or copy the data.
  • Delete: remove individual records anytime, or permanently delete your login account and all of your data in Settings (Delete Account & All Data).
  • Withdraw alerts: you may delete health alerts you sent at any time; they are then removed from recipients' notifications.
  • State consumer health rights: additional rights may apply under state consumer health privacy laws; see the Consumer Health Privacy Notice and contact privacy@in2mee.com.

    • 10. Children and Age

    In2mee is for adults 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If we learn that an account belongs to someone under 18, we will delete it. Contact privacy@in2mee.com to report an under-age account.

    11. Not a Medical Service

    In2mee does not provide medical advice, diagnosis, or treatment. Health alerts are informational nudges to consider testing. Always consult a licensed healthcare professional for medical concerns.

    12. Changes to This Policy

    We may update this policy to reflect changes in the app or law. We will update the "Last updated" date above and, for material changes, notify you in the app.

    Questions about this page: privacy@in2mee.com