Privacy Policy

The version your lawyer would frown at and you'll actually read.

Effective October 30, 2026.

Who we are

Stint is operated by Stint Labs LLC, a Virginia limited liability company. For privacy law, Stint Labs LLC is the controller of your data. Reach us at privacy@stinthq.com.

What we collect

The stuff you give us:

Your name and email.
Your answers in onboarding.
What you log in the app: habits, tasks, journal, weight, gratitude, brain dumps, schedules, stints.
Your conversations with your coach.
Any health or activity data you choose to send us (for example, through a connected-data link you set up).
Health and fitness data from Apple Health, Oura or WHOOP, only if you connect it. See "Health and fitness data" below.
Basic technical data needed to run the service, like your login session and security logs.

Google Calendar

Only if you connect it. From the Connect page you can connect your Google Calendar. When you do, Google asks you to allow Stint to view the events on your calendars (read-only), and tells us the email address of the Google account you connected, which we show you as "Connected as" so you know which account it is.

What we read and keep. Stint reads the events on your primary Google Calendar for the day before today through fourteen days ahead: each event's title, start and end, and, if present, its description, location and link. We keep only the title, date, start and end of each event, so it can appear in your own day list on Today, on your Plan calendar (marked "Google Calendar"), in your morning brief and in your coach's view of your day. We refresh this copy about every 15 minutes while you use Stint, and once a day. We never read your calendar list, settings or sharing rules, and we never create, change or delete anything on Google Calendar.

What we do with it, and what we don't. Your calendar events are used only to show you your day and to plan around it. The titles and times may be sent to Anthropic, our AI provider, only to write your own brief and your coach's replies; Anthropic does not train on that data. We do not sell calendar data, do not use it for advertising, do not share it with anyone else, and do not use it to develop, improve or train any AI or machine learning model. No person at Stint reads your calendar data except to fix a problem you ask us about, to investigate abuse or a security issue, or when the law requires it.

How it is protected. The sign-in tokens Google gives us are encrypted (AES-256-GCM) with a key kept outside the database, and only the code that talks to Google can decrypt them. The database that holds the copied events is encrypted at rest by our host, and all traffic is encrypted in transit.

How to stop. Tap Disconnect on the Connect page. Stint revokes its access at Google (so Stint disappears from the third-party access list in your Google account) and deletes the stored tokens the same moment. The events copied from Google are deleted with them. You can also remove Stint from your Google account at myaccount.google.com/permissions, which stops the next sync. Deleting your Stint account deletes the copied events with everything else.

Stint's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements: https://developers.google.com/terms/api-services-user-data-policy

Health and fitness data

Only if you connect it. From the Connect page you can connect Apple Health (in the iPhone app), Oura or WHOOP. Each one asks your permission before Stint reads anything, and Stint only reads: we never write to Apple Health or to your wearable.

What we read. From Apple Health: sleep, steps, workouts, resting heart rate, heart-rate variability, active minutes and weight. From Oura: readiness, sleep, heart-rate variability and resting heart rate. From WHOOP: recovery, sleep, strain, heart-rate variability, resting heart rate, workouts and weight. We keep one record per day of these numbers.

What we do with it, and what we do not. Your health and fitness numbers are used only to show them to you on Track and Today, and so your coach and your morning brief can plan your day around them. The numbers may be sent to Anthropic, our AI provider, only to write your own brief and your coach replies; Anthropic does not train on that data. We never use health data for advertising or marketing, never sell it, never share it with anyone else, and never use it to develop, improve or train any AI or machine learning model. No person at Stint looks at your health data except to fix a problem you ask us about, to investigate abuse or a security issue, or when the law requires it.

How it is protected. The sign-in tokens Oura and WHOOP give us are encrypted (AES-256-GCM) with a key kept outside the database. The database that holds your numbers is encrypted at rest by our host, and all traffic is encrypted in transit.

How to stop. Tap Disconnect on the Connect page. Stint stops reading, deletes the stored sign-in, and for Oura and WHOOP revokes its access at the provider. For Apple Health you can also turn off access in the iPhone Settings app, under Health. The numbers already synced stay on your Track until you ask us to delete them (write to privacy@stinthq.com) or delete your account, which deletes them with everything else.

How we use it

To run the app. To make your coach personalized to you. To bill you if you're on a paid plan. To send you emails about your account and, if you opt in, your daily brief.

That's the whole list.

Who we share it with

We don't sell your data, and we don't share it with anyone except the service providers we use to run Stint, who process it only on our behalf and under contract:

Anthropic: powers your AI coach. Your messages and, if you connect a calendar, your event titles and times, and if you connect Apple Health, Oura or WHOOP, your health and fitness numbers, are sent to Anthropic to generate responses. Anthropic does not train its models on your data.
Stripe: processes payments when you subscribe on the web. We never see or store your full card number.
Apple and RevenueCat: if you subscribe inside the iPhone app, Apple takes the payment and RevenueCat tells us whether your subscription is active. We never see your card details either way.
Hosting & infrastructure: the databases, servers, and email delivery that keep Stint running.

We may also disclose data if the law requires it (for example, a valid legal request), or to protect the safety of someone in imminent danger.

Your journal

Your journal is yours, and you decide what your coach does with it. One setting in Settings, under Privacy & Trust, controls the whole thing:

Vault: your coach never reads your journal and never keeps anything from it.
In the moment: your coach can read your few most recent entries as context for that day's conversation, and keeps nothing lasting from them.
Remember: your coach reads those recent entries and also keeps the facts worth remembering, so you aren't re-explaining your life every week.

New accounts start on Remember. You can change it at any time and it applies to your next conversation. Everything your coach has kept is listed in Settings under What Stint knows, one line at a time, each with a Forget button.

Two things are true at every setting. We never use your writing to train an AI model. And the safety check described under Crisis still reads new entries, so your coach can respond if you're in danger.

Heavy topics

Some things are heavy. We don't sort you into health or personal categories, and we don't ask you to. Your coach simply won't bring up anything heavy on its own. You bring it up when you're ready.

Crisis

If your coach detects a real crisis (active ideation, imminent harm), it stops being your coach. You'll see 988 and 741741. Your coach will tell you, honestly, that it's an AI and you deserve someone trained for what you're carrying.

We log the event, with no content and no personal info, so we can keep improving when this kicks in. That's the only thing we log about your content.

Your controls

Hide: any chat message from your coach with one tap. Reversible.
Forget: any entry. It's deleted. Gone.
Export: everything we have on you, one tap, full file.
Delete account: one tap. 30 days to change your mind. After that, gone.
Set your memory setting: vault, in the moment, or remember. In settings, changeable whenever.

Your rights

Wherever you live, you can access, correct, export, or delete your data, and the controls above let you do it yourself, right now, without asking us. You can also email privacy@stinthq.com and we'll help.

If you're in the EU or UK, you also have the right to object to or restrict certain processing and to lodge a complaint with your data protection authority. If you're in California, you have the right to know what we collect, to delete it, and to not be discriminated against for exercising those rights. We don't sell your data, so there's nothing to opt out of on that front.

How long we keep it

We keep your data while your account is active. When you delete your account, we hold it for 30 days (so you can change your mind), then permanently delete it. Crisis events are logged without any content or personal identifiers and kept only to improve safety.

How we protect it

Your data is encrypted in transit, and sensitive fields (like your coach conversations and personal notes) are encrypted at rest. Access is limited to what's needed to run the service. No system is perfectly secure, but we treat your data like it's ours.

Where your data is processed

Stint is operated from the United States, and your data is stored and processed here. If you use Stint from outside the US, you're asking us to transfer your data to the US, where privacy laws may differ from your own.

What we don't do

Sell your data.
Train AI models on what you write.
Run third-party ad trackers or advertising pixels on you.
Share your data with anyone except the providers above who help us run the app.

We do use minimal, first-party analytics to understand which features work and fix what doesn't. That data stays with us and is never sold or used to advertise to you.

Cookies

We use the cookies needed to keep you logged in and secure. We don't use advertising cookies.

Kids

Stint isn't for under-13s. If we learn someone under 13 is using it, we delete the account.

Changes

If we change this policy in a way that matters, we'll tell you in the app before it takes effect.

Contact

privacy@stinthq.com