Your data belongs to you. We collect only what is necessary to deliver your Intoma experience — nothing more. We will never sell, share, or use your information for any purpose beyond that.
Who We Are
Intoma is a self-knowledge platform designed to help you understand the emotional and behavioural patterns behind your physical symptoms and daily experiences.
The data controller responsible for your personal data is:
Luís Nabeiro — Intoma
Contact: geral@intoma.app
What Data We Collect
When you use Intoma's services — including Intoma Root and Intoma Journal — we may collect:
- Your name and email address
- Optional phone number (only if provided by you)
- Your language preference
- Responses submitted through our questionnaires (via Tally)
- Payment information (processed securely by Stripe — we do not store card data)
- Marketing consent preference, if you choose to provide it
How We Use Your Data
Your information is used solely to:
- Generate your personalised Intoma report or Journal
- Deliver your report by email or WhatsApp
- Process your payment securely via Stripe
- Send you updates about your Intoma experience, if you have consented to marketing communications
"We will never sell, share, or use your data for anything other than delivering your Intoma experience. Ever."
Legal Basis for Processing
We process your personal data on the following legal grounds under the GDPR:
- Contract performance — to deliver the service you have purchased or requested
- Legitimate interest — to improve our platform and ensure service quality
- Consent — for marketing communications, only where you have explicitly opted in
Data Retention
We retain your data only for as long as necessary to deliver your service and comply with legal obligations. If you request deletion of your data, we will act within 30 days.
Third Parties
We work with a limited number of trusted third-party services to operate Intoma:
- Tally — questionnaire platform (data submitted through our forms)
- Stripe — secure payment processing
- Google / Gmail — email delivery
- Netlify — website hosting
Each of these providers has their own privacy policy and operates under appropriate data protection agreements. We do not authorise any third party to use your data for their own purposes.
Your Rights
Under the GDPR, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data ("right to be forgotten")
- Withdraw consent for marketing at any time
- Lodge a complaint with your national data protection authority
To exercise any of these rights, contact us at geral@intoma.app.
Cookies
Our website uses minimal cookies — only those strictly necessary for the site to function. We do not use tracking, advertising, or analytics cookies at this time.
Security
We take the security of your data seriously. All data is transmitted over encrypted connections (HTTPS). Payment data is handled exclusively by Stripe and never stored on our systems.
Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be published on this page with a revised date. We encourage you to review it periodically.
Intoma is not a medical device and does not provide diagnoses or medical advice. Always consult a qualified health professional regarding physical symptoms. Intoma is a self-knowledge tool only.