1. Information We Collect
Account Information
IntimID requires email address registration to create and maintain your account. We implement a pseudonymous system with the following technical safeguards:
- Your email is stored separately from all health-related data
- A cryptographically generated, anonymous user identifier is created for your account
- Technical and administrative controls prevent linking your user ID to your email
- All health data is exclusively associated with your anonymous user identifier
- Email is retained only for account authentication and recovery purposes
Information We Do Not Collect
IntimID is designed with privacy by design principles. We do not collect, store, process, or transmit:
- Personal identifying information beyond email address
- Health test results or medical information on our servers
- Sexual activity data or partner information on our servers
- Precise location data or GPS coordinates
- Device advertising identifiers or fingerprinting data
- Behavioral analytics or usage tracking linked to personal identity
- Biometric data (processed locally only)
Local Device Storage
The following sensitive information is processed and stored exclusively on your device using platform-specific secure storage (iOS Keychain/Android Keystore):
- STD test results and dates
- Sexual activity logs and risk assessment data
- Partner verification information (encrypted)
- Health analytics and trend calculations
- Application preferences and settings
- Biometric authentication templates
Technical Telemetry (Limited)
For application stability and security purposes only, we may collect minimal, non-personal technical information:
- Application crash reports (anonymized, no personal data)
- General usage statistics (aggregated, non-identifiable)
- Security incident detection (for fraud prevention)
Important: Any technical data collected is processed separately from your account information and cannot be linked to your identity or health data.
2. Data Storage & Security
Data Storage Architecture
IntimID uses a hybrid privacy architecture designed to maximize both security and functionality:
- Local Health Data: All STD test results, sexual activity records, and personal health information are encrypted and stored exclusively on your device using HMAC-SHA256 encryption.
- Cloud Account Management: Your email address and anonymous IntimID are stored securely on Supabase cloud services for account functionality and partner verification.
- Technical Separation: Your health data and account information are kept separate by design - your anonymous IntimID cannot be linked back to your email address or personal identity.
- No Health Data Transmission: Your sensitive health information never leaves your device and is never transmitted to our servers or any third-party services.
Encryption Standards
- HMAC-SHA256 Encryption: Health data encrypted with HMAC-based authenticated encryption using cryptographically secure random initialization vectors
- Local Secure Storage: Device-specific encrypted storage using Flutter Secure Storage with hardware security module integration where available
- Authentication Security: All encrypted data includes authentication tags to prevent tampering and ensure data integrity
- Key Management: Master encryption keys generated using cryptographically secure random number generation and stored in device secure storage
Cloud Service Providers
- Supabase: Provides account authentication, user management, and partner verification services. Supabase is SOC 2 Type II compliant and uses industry-standard security practices.
- Data Minimization: Only essential account data (email address and anonymous IntimID) is stored in cloud services
- Geographic Location: Supabase servers are located in secure data centers with appropriate data protection regulations
Data Isolation & Access Controls
Multiple technical safeguards prevent unauthorized access:
- Health data isolated from other applications using platform security features
- Biometric authentication required for application access
- Automatic session timeouts and application locking
- Local data excluded from device backup systems by default
- Administrative controls preventing employee access to health data
Data Retention
We maintain different retention policies for different data types:
- Email addresses: Retained while account remains active
- Authentication data: Retained for account security purposes
- Health data: Stored locally only, controlled by user
- Technical logs: Retained for 30 days maximum, then automatically deleted
3. How We Use Information
Email Address Usage
Your email address is used exclusively for the following purposes:
- Account creation and authentication
- Password reset and account recovery
- Critical security notifications (breach notifications, suspicious activity)
- Legal compliance notifications (policy changes, regulatory requirements)
Limitations: Your email is not used for marketing, user profiling, behavioral tracking, or any commercial purposes beyond account management.
Health Data Processing
All health-related data processing occurs exclusively on your device:
- Risk assessment calculations performed using local algorithms
- Health trend analysis computed on-device
- Testing reminders and scheduling managed locally
- Partner verification processed using cryptographic protocols
Anonymous Group Features
When participating in group sessions or partner verification:
- Only temporary, anonymous session identifiers are transmitted
- No personal health data leaves your device
- Session data automatically expires within 24 hours
- Cryptographic protocols prevent participant identification
- Group data cannot be correlated with individual accounts
4. Third-Party Services & Integrations
Healthcare Provider Integration
Optional clinic and healthcare provider integrations operate under strict privacy controls:
- Integration requires explicit user consent for each data sharing instance
- Users control which specific information is shared
- QR code scanning processed locally without data transmission
- Healthcare providers bound by separate privacy agreements
- Integration can be revoked at any time
Third-Party Services
IntimID minimizes third-party dependencies to protect your privacy:
- Analytics: No third-party analytics or tracking services
- Advertising: No advertising networks or tracking pixels
- Cloud storage: No third-party cloud storage of personal data
- Social media: No social media integrations or sharing
Platform Dependencies
Certain platform-level services are required for application functionality:
- App stores: Installation and update distribution (Apple App Store, Google Play)
- Push notifications: System-level notification services (when enabled)
- Biometric authentication: Platform-provided biometric services
Note: These services operate under their respective privacy policies and are beyond our direct control.
5. Your Rights & Controls
Data Control Rights
You maintain comprehensive control over your information:
- Access: View all data associated with your account
- Modification: Edit or correct any stored information
- Deletion: Permanently delete your account and associated data
- Portability: Export your health data (future feature)
- Restriction: Limit processing of specific data types
Account Deletion
You may delete your account at any time with the following effects:
- Email address and authentication data permanently deleted within 30 days
- Health data remains on your device until manually deleted
- Anonymous user identifier rendered inactive immediately
- No recovery possible once deletion is confirmed
Limitations on Data Recovery
Due to our privacy-by-design architecture:
- We cannot recover health data if you lose device access
- We cannot provide health data to third parties (including family members)
- We cannot transfer data between devices (current technical limitation)
- We cannot decrypt health data without your biometric authentication
6. Legal Compliance & Disclosures
Legal Obligations
We may be required to disclose information in response to:
- Valid legal process (subpoenas, court orders, search warrants)
- National security or law enforcement requests
- Regulatory investigations or compliance audits
- Emergency situations involving imminent harm
Important Limitation: Due to our architecture, we can only disclose email addresses and account metadata. Health data stored on your device cannot be accessed by us or disclosed to authorities.
Regulatory Compliance
IntimID is designed to comply with applicable privacy regulations:
- General Data Protection Regulation (GDPR) - EU
- California Consumer Privacy Act (CCPA) - California
- Health Insurance Portability and Accountability Act (HIPAA) - US Healthcare
- Personal Information Protection and Electronic Documents Act (PIPEDA) - Canada
Breach Notification
In the event of a security incident:
- We will notify affected users within 72 hours of discovery
- Regulatory authorities will be notified as required by law
- Health data breaches are technically impossible due to local storage
- Incident details and remediation steps will be provided transparently