InstintPrivacy policy
Last updated 2 November 2026. This replaces the policy of 14 September 2021.
The short version
- No ads, no tracking, no analytics, and we never sell or share your data for marketing.
- You sign in with Apple. We keep no passwords.
- Your household data and photos are stored on servers in Amsterdam.
- Your calendar and contacts stay on your phone, except the birthdays you choose to share with your household.
- You can delete your account and your photos yourself, in the app.
Who is responsible
Instint is a sole proprietorship (eenmanszaak) in the Netherlands, registered at the Chamber of Commerce (KvK) under number 72772018. We are the controller for the personal data described here.
Address: Koningin Julianaweg 15, 8375 AA Oldemarkt, the Netherlands. Email: privacy@instint.app.
What we store, and why
| What | Why |
|---|---|
| Your Apple sign-in identifier, name and email address (Apple may give us a private relay address) | To sign you in and to show your name to your household. |
| Household information: its name, its members and their roles, the currency | To run the household you create or join. |
| Tasks: title, category, due date, who it is assigned to, status, and any reward amount | This is the core of the app. |
| Status updates you set | To show family what you are doing. |
| Birthdays you choose to share: name, day and month, and the year if you have one | To remind your household. Only the birthdays you select or enter are uploaded. They can belong to other people, so share only what you are comfortable sharing. |
| Photos and profile pictures you upload | To show them to your household in the app and in the Memories widget. |
| Your device’s notification token | To send notifications you allowed, through Apple. |
| Server logs such as your IP address and the requests you make | To keep the service running and secure, and to fix problems. |
What stays on your phone
- Contacts: the app reads your Contacts only to let you pick which birthdays to follow.
- Calendar: if you allow calendar access, events are read on your phone (for example, birthdays). They are not uploaded.
- Camera and photo library: only the photos you choose or take are uploaded.
What we do not collect
We do not collect your location, an advertising identifier, or analytics about how you use the app. The app contains no advertising or analytics SDKs and does not track you across other apps or websites.
Who helps us run Instint
| Provider | What for |
|---|---|
| DigitalOcean (data centre in Amsterdam) | Hosts our servers, the database, photo storage and encrypted backups. |
| Apple | Sign in with Apple and push notifications. |
| Cloudflare | Passes traffic to our servers securely and protects them from abuse. It can see technical request data. |
| Twilio SendGrid | Sends the email for the in-app contact form and for household invitations by email. It receives the email address and message involved. |
These providers process data on our behalf and only for these purposes. We do not sell your data and we do not share it with advertisers. We may disclose data if the law requires it.
Some of these providers are based outside the European Union, such as Apple, Cloudflare and Twilio. Where data goes there, it is covered by their own safeguards, such as the EU standard contractual clauses or the EU-US Data Privacy Framework.
Why we may use your data (legal basis)
- To provide the app you asked for (performance of a contract): accounts, households, tasks, birthdays, photos.
- Your permission: notifications, contacts, calendar, camera and photos. You can withdraw these any time in iOS Settings.
- Our legitimate interest in running a secure service: server logs and abuse protection.
How long we keep it
- While your account exists. You can delete it yourself at any time, see how deleting works. Deleting removes your profile, tasks, birthdays and photos right away.
- Encrypted backups of our database are kept for disaster recovery for up to about twelve months, so deleted data leaves them gradually. They are never used to restore a deleted account.
- Server logs rotate automatically and only the most recent files are kept: at our current traffic, roughly the last one to two months.
- Photos are removed from storage when you delete them, replace them, or delete your account.
Your rights
Under the GDPR you can ask us to show you your data, correct it, delete it, restrict how we use it, give you a copy in a common format, or stop using it. Most of this you can do in the app. For the rest, email privacy@instint.app from the address of your account. We reply within one month.
You can also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.
Children
Instint is a family app. Apple limits Sign in with Apple to people aged 13 and over, so children under 13 cannot create their own account. Parents and guardians decide what they put in their household, including information about their children. We do not knowingly collect personal data from children under 13 ourselves. If you think we have, contact us and we will delete it.
Security
Traffic between the app and our servers is encrypted. Backups are encrypted. Access to the servers is limited to the person who runs Instint. No system is perfectly secure, and if a breach affects you we will tell you and the authorities as the law requires.
Changes to this policy
If we change what we collect, we update this page and the date at the top, and tell you in the app for significant changes.
Questions? Email privacy@instint.app or see support.