Privacy Policy

Effective 14 September 2026 · Last updated 22 October 2026

This policy explains what information Insight Lodge (“Insight Lodge”, “we”, “us”) collects, why, who processes it, and what control you have over it. It covers all three ways the service is used:

• the Insight Lodge app for iPhone, iPad and Mac;
• the Insight Lodge plugin for ChatGPT — and for any other OpenAI product where OpenAI makes it available — if you choose to connect your account;
• the Claude integration, if you choose to connect your account.

The two integrations are entirely optional. If you never connect one, nothing in the “AI integrations” section below applies to you.

Who is responsible for your data

Insight Lodge is operated by Syntria LLC. For any privacy question, correction or request — or for help using the app — write to olga@syntria.io.

Account information

You sign in in one of three ways: with Google, with Apple, or with an email address and a password. Whichever you choose, our authentication provider passes us a stable account identifier together with your name and email address, which we store so we can identify your account and address you by name.

A password, if you use one, belongs to Neon Auth, our authentication provider. It passes through our server only in transit, on its way to them over an encrypted connection: we do not store it, do not log it, and cannot read it afterwards. The same is true when you choose a new one. With Google or Apple we never receive a password at all.

Registering with a password sends a confirmation code to that address, and asking to reset a forgotten password sends a link to it. Neon Auth sends both on our behalf.

Purpose: to create your account, sign you in, and keep your data yours alone.

The content you create

We store what you write and how you organise it:

• Insight text — the note itself, either as you typed it in the app or as you explicitly asked an AI integration to save it. Wording you asked an assistant to draft is stored the same way as wording you typed yourself.
• Categories — the names and colours you file your insights under.
• Completion status — whether you have marked an insight processed.

Purpose: this is the product. It is stored so it is there when you come back, on every device you sign in from.

Consent record for the AI integrations

If you connect ChatGPT or Claude and agree to the sensitive-data notice, we record that you agreed and which version of the notice you agreed to, with the date. That is the whole record: no copy of the conversation, no request details, no IP address, no device or client identifier.

Purpose: so we can show you what you agreed to, and so you can withdraw it.

Technical information

• IP address. Our servers see your IP address, as any web server does. It is used only to count requests for rate limiting, is held in the server’s memory for the length of the counting window (one minute by default), and is then discarded. IP addresses are never written to our database.
• Server logs. We log errors — for example a rejected sign-in token — to diagnose faults. These entries record what went wrong and technical details such as the token’s expiry and issuer. They do not contain your insight text, request bodies, passwords, or tokens themselves. Logs are written to standard output and retained by our hosting provider under its own retention schedule.
• Diagnostics on Apple devices. The app registers for Apple’s MetricKit, which reports crashes, hangs and performance metrics. Apple prepares these on your device and the app writes them to the device’s own system log. No third-party crash-reporting SDK is used and this data is not transmitted to us over the network.

Cookies and analytics

We use no analytics, no advertising and no cross-site tracking — no Google Analytics, no advertising SDK, no tracking pixel, no attribution framework. The app’s privacy manifest declares no tracking and no tracking domains. We do not sell or share personal information for advertising, and we do not build profiles of you.

The only cookies involved are the first-party session and anti-forgery cookies our authentication provider sets while you are signing in. They exist to sign you in and keep that sign-in secure. There are no advertising or analytics cookies.

AI integrations

You can connect Insight Lodge to ChatGPT or to Claude so you can capture and review insights by asking in conversation. Connecting is your choice, it requires you to sign in and approve the specific permissions shown on the approval screen, and you can disconnect at any time.

• Only what your request needs is sent. When you ask the assistant to do something with your insights, we return only the information required to carry out that request — nothing more, and nothing belonging to anyone else. Which account is reached is determined by the signed access token issued when you connected, never by anything the assistant supplies, so no instruction in a conversation can point the connection at another person’s account.
• If you use ChatGPT, OpenAI processes that exchange. An insight you ask ChatGPT to save is first submitted to and processed by OpenAI: the request you make and the information Insight Lodge returns pass through OpenAI’s systems and are handled under OpenAI’s terms and privacy policy, not ours. Depending on your OpenAI account and data-control settings, OpenAI may retain or use that content in accordance with its own privacy policy; you can manage those settings in ChatGPT under Settings → Data Controls. The same applies to any other OpenAI product you use the plugin from.
• If you use Claude, Anthropic processes that exchange. The same applies under Anthropic’s terms and privacy policy.
• We do not collect your chat history. Insight Lodge does not request, retrieve, reconstruct or store your ChatGPT or Claude conversations, in whole or in part. We have no access to them and no mechanism to obtain them.
• Nothing is changed unless you ask for it. Content is written to your account only when you explicitly ask: to save or change an insight, to rename or recolour a category, or to change the name and email on your profile. Conversation around that request is not stored.
• Writing includes deleting. If you ask for it, the assistant can permanently delete an insight, and merging two categories moves the insights across and then destroys the category you merged away. Both are immediate and cannot be undone.
• Reading and writing are separate permissions, and both are limited to your own account. No tool reaches the public internet, contacts a third party, or touches any other user’s data. No tool can delete your account, and none can read or return your access tokens, sign-in credentials or other authentication material.
• Before the first save, you must actively agree to a notice explaining that insights may contain sensitive personal information, that only what you ask to be saved is stored, that the exchange is processed by the AI provider you chose, that Insight Lodge is not a medical or emergency service, and that you can review, edit and delete anything stored. The box is never pre-ticked, and until you tick it every saving action is refused. You can withdraw that agreement, or disconnect the integration entirely, from Settings.
• The integration is only the journal. It carries no advertising, no subscription or upgrade offers, no payments, no bookings, and no medical claims.

Access granted to an integration is time-limited and renewable. Disconnecting immediately revokes the integration’s ability to renew, and an access token already issued stops working when it expires, at most one hour later. Deleting your account has the same effect.

Who else processes your data

We do not sell your personal information. We share it only with the providers needed to run the service, and only for that purpose:

• Neon — the managed Postgres database where your account and insights are stored, and Neon Auth, the authentication service that verifies your sign-in, supplies your name and email, holds your password if you use one, and sends the confirmation and password-reset emails. Neon is part of Databricks, which publishes its own privacy notice.
• Vercel — the hosting platform that runs the API and serves the web version of this policy, under its own privacy notice.
• Apple and Google — the identity providers, each under its own privacy policy, if you sign in with one of them.
• OpenAI or Anthropic — only if you connect that integration, and only for the exchanges described above, each under its own privacy policy.

We may also disclose information where the law requires it.

How long we keep things

• Your account, insights and categories: for as long as your account exists. We do not expire or delete your notes on a schedule.
• Sign-in credentials: an access token for a connected integration lasts one hour; the refresh token behind it lasts 30 days; a refresh token for the app itself lasts 60 days; a one-time authorization code lasts 60 seconds. Refresh tokens and authorization codes are never stored in readable form — we keep only a SHA-256 hash, which cannot be turned back into the token.
• Rate-limiting counters: the length of the window, one minute by default.
• Your consent record for an integration: until you withdraw it, disconnect the integration, or delete your account.
• Server logs: retained by our hosting provider under its own schedule, which we do not control.

Your choices and rights

• See and edit everything. Every insight, category and profile detail we hold about you is visible and editable in the app.
• Delete individual items at any time. Deletion is immediate and permanent — there is no trash, no archive and no undo, so an insight you delete cannot be restored by you or by us.
• Get a copy of your data. The app has no one-click export yet. Email olga@syntria.io and we will send you a machine-readable copy of the data held in your account.
• Disconnect an integration or withdraw your sensitive-data agreement from Settings, without deleting anything you have saved.
• Delete your account from Settings → Delete account.

Depending on where you live you may have further rights over your personal data, such as objecting to or restricting its processing, or complaining to your data-protection authority. Write to olga@syntria.io and we will help.

What happens when you delete your account

Deleting your account immediately and permanently removes, from our database:

• every insight you have written;
• every category you created;
• your stored profile, including your name and email;
• every sign-in token, so no session outlives the account;
• every connected-integration grant, so ChatGPT and Claude can no longer renew their access;
• your consent record for those integrations.

This is a hard deletion, not a flag: there is no trash, no soft delete and no restore path, and it cannot be reversed. Your identity with the sign-in provider is managed by that provider and is not deleted by us — signing in again would create a fresh, empty account. Copies may persist briefly in our providers’ routine backups and logs until those expire on their own schedules.

Security

All traffic is carried over encrypted HTTPS connections. Every request is authenticated, and each query is scoped to the signed-in account, so one user’s data is not reachable from another’s session. Integration access is limited to narrow permissions you approve individually, and tokens are short-lived. Refresh tokens and authorization codes are stored only as a SHA-256 hash, so a leaked database row cannot be turned back into a working credential; the upstream sign-in session stored alongside them is encrypted with AES-256-GCM using a key held outside the database. Our own tools carry no ability to read authentication secrets.

No service can promise perfect security, and we do not. We do not claim any certification or formal audit. What we can tell you is what we actually do, which is the list above.

Minimum age

Insight Lodge is an 18+ application. It is not intended for children or teenagers: you must be at least 18 years old to use it, or older if the law where you live sets a higher minimum age. We do not knowingly collect information from anyone under 18; if you believe someone under 18 has created an account, write to olga@syntria.io and we will delete it.

Changes to this policy

We may update this policy. The effective and last-updated dates at the top always reflect the current version.

Contact

Privacy questions, data requests and everything else: olga@syntria.io.