Privacy policy

We cannot read your answers. They are encrypted on your phone before they are sent to us, with a key that only you and your partner have. Here we describe exactly what we store, why, where it is kept and how you delete it.

Who is responsible

Hintt is the data controller for the data in the service. You can reach us at hej@hintt.se.

How your answers are protected

When your partner invites you, a key is created on their phone. It comes along in the invite link, in a part of the address that is never sent to us, and is then stored only in your browsers. Since the link contains the key, it should only be shared with your partner, and it is a good idea to delete the message with the link once you are both in.

Each answer is turned into a code with that key before it leaves your phone. If you answer no, the code becomes a random value. We can only see whether two codes are the same, not which question or which answer they stand for. Your phones translate what you have in common back into text.

This means that neither we, our providers nor anyone who might get into our database can read what you have answered or what you have in common. The only exception is the guide, which you choose to use yourself, see below.

What we store

• Account: your email address and, if you sign in with Google or Apple, the id that service sends us. Passwords are only stored encrypted. If you start without an account, you get a temporary account without an email address, which only exists on your phone until you save it. A temporary account that has never had a partner is deleted with all its content after 30 days. If you have a partner, it is not deleted automatically.
• Your answers: only as encrypted codes, as described above.
• Your HINTTs: only as encrypted text, with the same key. We see when a HINTT is set to arrive and whether it has been opened, never what it says. A photo in a HINTT can be seen once and is then deleted.
• Your chat: only as encrypted text, with the same key as the answers. We cannot read it, except what is sent along when you yourself use the wording help, see The guide below. Messages are deleted after 24 hours unless you choose to save them.
• Your experiences: what you choose to explore, the cards about how, your Hintt, the script, the reply, your shared answers and the feedback the day after are encrypted with the same key. Which button you tapped in the feedback is never shown to your partner. The feedback also stores a pace for the two of you together, a number that sets how quickly the questions get bolder. It only changes once you have both answered. Once you have both answered, the server also works out a shared verdict: whether you both wanted more, both thought it was good, or something else, never what each of you thought. With that and what you have done, the app learns what suits you, on your phone. The AI is only told what has worked for both of you and which cards you have already had. If the AI suggests an item and you tap Add, the store's page opens and the purchase is handled by the store. If you tap We already have one, that is stored encrypted, so it isn't suggested for purchase again. Otherwise we don't store what was suggested or what you chose. Your answers to the cards are stored as codes, like the answers above. We see that someone has chosen or swiped, who shapes it, when the Hintt was sent and may be opened, and when it was opened and answered, never what it is about.
• Whispered wishes: the text is encrypted with the same key, and the answer is stored as a code that can only be recognized with your key. We see when a wish was sent and that it has been answered, never what it says or what the answer was.
• Your plan: encrypted in the same way. We only know which of you takes the initiative and when the other opened the card.
• Photos in the chat: encrypted on your phone with the same key, so we cannot see them. A photo can be viewed once and is then removed, and all photos are removed from our servers after one day at the latest. Your partner can still take a screenshot, which we cannot prevent.
• Play together: the cards in a game and your answers are encrypted like everything else. We see when you play, how far you get, when a card is played and which of the choices after the draw is made (go straight ahead, step by step or the chat), but not which cards are involved or what anyone has answered.
• Quizzes in Explore: your answers are encrypted like everything else. We see which topic a quiz is about, when it was started and whether each of you has answered, but not the questions or what anyone has answered.
• Reactions in the chat: which symbol you have reacted to a message with, for example a heart. The message itself is encrypted as usual.
• Profile picture: if you choose one. It is scaled down and encrypted on your phone with the same key as the answers, so we cannot see it. Only you and your partner can.
• Important dates: if you fill them in, your birthday and your anniversary or wedding day, only day and month, never the year. They are used for reminders, and your partner sees your birthday.
• Your first name: if you enter it. It is shown to your partner and in notifications to your partner.
• When you last checked in: when you last opened the app. Your partner sees that you have checked in today, unless you turn it off in Profile.
• Locked copy of the key: if you choose to save the key with Face ID or fingerprint, we store a copy that is locked with your passkey. It can only be opened with the passkey, which is on your phone and in your iCloud or Google account. We cannot open it.
• Notifications: if you turn on notifications, we store the address your phone provides for notifications. We also store when a notification last got through and the error code if it did not, so that we can find faults. Notifications never say what anyone has answered or chosen. When it has become your turn, a reminder may arrive a day later if you have not taken your step. It only says that it is your turn. When it is your partner's turn you can nudge them once per step, at the earliest an hour after the turn passed to them. We then store that you nudged and when, and the nudge replaces the reminder.
• Language: whether you use Hintt in Swedish or English. It is stored with your account and your notifications, so that emails and notifications arrive in the right language.
• Your connection: who you are connected with, the invite code and when each of you was done.
• How you found Hintt: if you answer the question, for example Instagram or a friend. It is removed with your account.
• Which page you started from: if you came to Hintt through a button on our website, we store what kind of page it was and which guide or tool, once, on your account. It is only used to see which pages help couples get started, and it is deleted with your account.
• Feedback: what you write under Share your thoughts, without your name or account. It is not encrypted, so we can read it.
• Visitor statistics: which pages are visited, roughly from which country and with what kind of device, without cookies and without us being able to see who you are. Invite codes are removed from the address before anything is sent.
• Technical logs: what is needed for the service to run and be secure, for example the time of a sign in.

Which path you choose, answers you give before you have created an account and what you call your partner are only stored in your own browser.

Sensitive data

Your answers are about your sex life, and that counts as sensitive personal data. That is why they are encrypted, and you decide yourself whether you want to answer. You can withdraw your consent at any time by deleting your account.

The guide

When you use the guide, what you write or choose, and what you yourself have chosen to show it, is sent to Anthropic, which makes the AI model Claude, to produce the answer. If you use the wording help in the chat, your four most recent messages are also sent along, including your partner's, so that the suggestions fit as replies. When you shape an experience, what you chose to explore and other things you have both said yes to, the cards about how that you both said yes to and the choices of the one shaping it are sent, so the AI can write the cards, the questions and the Hintt. If you tap Help me say it when whispering a wish, your wish is sent there. A no is never sent. Anthropic is based in the USA. We do not store the conversation, and Anthropic does not use it to train its models. We only count how many times per day you use the guide, to keep costs down.

What your partner sees

Your partner never sees your answers. When you are both done, only what you have both chosen is shown, and a no is never shown. Each person can only answer once per question, so no one can try their way to what the other answered.

It is still in the nature of things that someone who has said yes to something themselves, and then does not see it among what you have in common, may understand that you did not choose it. This applies to every app that shows what two people have in common, and no encryption can change that.

If you lose the key

The key only exists on your own devices. If you change phones, you open it with Face ID if you have saved a copy, or approve the new device with one tap from a device that already has the key, your own or your partner's. If you lose it everywhere, your answers can no longer be read, not even by us. Then you will have to start over.

Why we store the data

Only so that the service works: so that you can sign in and so that your phones can find what you have in common. We never sell data, we do not use it for advertising and we do not share it with anyone other than the providers listed below.

Where the data is kept

• Supabase: database and sign in, in Stockholm.
• Vercel: hosting of the website, with servers in Stockholm, and the visitor statistics.
• Resend: sends emails about sign in and confirmation, within the EU.
• Cloudflare Turnstile: an invisible check that a person, not a bot, is starting Hintt or signing in. It reads technical details about the browser and device, not your answers. See the Cloudflare Turnstile Privacy Addendum.
• Google and Apple: only if you yourself choose to sign in with them.
• Anthropic: produces the guide's answers and writes the cards and the Hintt when you shape an experience, only when you use them.

The providers process the data on our behalf and may not use it for any purpose of their own. They cannot read your answers, since they are encrypted.

How long

For as long as you have an account. When you delete it, everything disappears from the service immediately. Backups of the database remain for a short time before they are overwritten.

Delete everything

In Profile you will find Leave Hintt. It deletes your account, your answers and everything you have chosen together, all at once, both with us and what the app has stored on the phone you delete from. Photos in storage are removed at the same time or within an hour at the latest. Your partner gets no explanation and only sees that you are no longer connected.

Cookies and browser storage

We only use the cookies needed for you to stay signed in, and one that remembers which language you want. Your browser also stores your key and your choice of path. No cookies for tracking or advertising.

Your rights

You have the right to know what data we have about you, to have it corrected, moved or deleted, and to object to how we process it. Email hej@hintt.se. We cannot hand over your answers in readable form, since we do not have the key. If you are not satisfied, you can contact the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten), imy.se.