Privacy Policy.
Last updated: 21 March 2026 · Intype Oy · Helsinki, Finland
1. Overview
Intype is operated by Sampo Metsänperä, based in Finland. We are the data controller for the personal data you provide when using Intype.
This policy explains what data we collect, why we process it, who we share it with, and how you can exercise your rights under GDPR and Finnish law.
2. Data We Collect
Account data
- –Email address (used for login and account management)
- –Username and display name
- –Bio, avatar URL, country, and languages (optional)
Profile data
- –Answers to personality questions across 12 categories (values, personality, lifestyle, interests, hobbies, social, work, health, learning, culture, relationships, creativity)
- –AI-generated personality summaries
- –Profile visibility and section visibility settings
- –Creator type, niche tags, and collaboration style tags
Compatibility data
- –Compatibility scores and category breakdowns between you and other users
- –Comparison history (who you compared with and when)
- –AI-generated match context and insights
Payment data
- –Subscription plan, status, and billing period
- –Stripe customer ID and subscription ID
- –Paid profile unlock records (buyer/seller relationships)
- –Stripe Connect account details (for sellers)
- –We do not store card numbers — all payment processing is handled by Stripe
Usage data
- –AI summary generation counts (to enforce plan limits)
- –Compatibility check counts (to enforce free plan quotas)
- –Profile view counts (for seller analytics)
- –Question edit counts and reset timestamps
- –IP addresses (used for rate limiting only, not stored long-term)
| Data type | Examples | Required |
|---|---|---|
| Account | Email, username, display name | Yes |
| Profile | Bio, country, avatar, languages | Optional |
| Answers | Personality question responses | Yes (min 8) |
| AI content | Summaries, match insights | Opt-in |
| Payment | Stripe IDs, plan, unlock records | If paid |
| Usage | Counts, timestamps, IP (temp) | Automatic |
3. How We Use Your Data
| Purpose | Legal basis (GDPR) |
|---|---|
| Providing the Service (auth, profiles, compatibility) | Contract performance |
| Processing payments, subscriptions, and paid profile unlocks | Contract performance |
| Generating AI personality summaries | Consent (opt-in feature) |
| Generating AI compatibility insights and match context | Consent (opt-in feature) |
| Content moderation (username, bio screening) | Legitimate interest |
| Rate limiting and abuse prevention | Legitimate interest |
| Paid profile access (sharing data with buyers) | Consent (explicit opt-in by seller) |
| Seller analytics (views, unlocks, conversion) | Legitimate interest |
| Complying with legal obligations | Legal obligation |
4. AI-Generated Content
Users can generate AI personality summaries based on their question answers. Free users receive 2 summaries total. Pro and Brand users get unlimited regeneration. AI summaries are generated using OpenAI and are for informational and entertainment purposes only.
Compatibility results may include AI-generated insights such as match context, strongest match areas, and biggest differences. These are generated automatically.
Important: By using AI features you acknowledge that your answers are sent to OpenAI for processing. We make no guarantee about the accuracy of AI-generated content. See the data sharing section below for details.
6. Your Rights (GDPR)
As a person in the EU/EEA, you have the right to:
- –Access — request a copy of your personal data.
- –Rectification — correct inaccurate data (via Settings).
- –Erasure — delete your account and all data (via Settings → Delete Account).
- –Portability — request your data in a portable format.
- –Restriction — request we restrict processing of your data.
- –Objection — object to processing based on legitimate interest.
- –Withdraw consent — disable paid profile sales, AI summary generation, or answer visibility at any time in Settings.
To exercise any of these rights, email sampo.metsanpera@gmail.com. We will respond within 30 days.
You also have the right to lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi) if you believe your data has been processed unlawfully.
7. Data Retention
- –Account and profile data: kept until you delete your account.
- –Compatibility history and scores: kept until you delete your account.
- –Payment and unlock records: kept for 7 years as required by Finnish accounting law.
- –Stripe webhook event IDs: kept for 90 days for idempotency and abuse prevention.
- –AI usage logs: kept for 90 days for abuse prevention.
When you delete your account, all profile data, answers, AI summaries, and compatibility history are permanently deleted. Active Stripe subscriptions (both plan and paid profile) are cancelled automatically. Payment records are retained only as required by law.
8. Security
We take reasonable measures to protect your personal data:
- –All data is transmitted over HTTPS/TLS.
- –Database access is protected by Supabase Row Level Security (RLS) policies.
- –API routes use authentication and rate limiting.
- –Payment data is processed and stored entirely by Stripe — we never handle card numbers.
- –Admin operations require server-side service role keys that are never exposed to the client.
No system is 100% secure. If you discover a vulnerability, please report it to sampo.metsanpera@gmail.com.
10. Contact
For any privacy-related questions or data requests, contact: sampo.metsanpera@gmail.com
Children's Privacy
Intype is not directed at children under 16. We do not knowingly collect data from children under 16. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
Answer Visibility
Users can optionally allow others to view all their question answers by enabling “Show all answers” in Settings. This is off by default. When enabled, any visitor (or buyer, for paid profiles) can see the full list of questions and selected answers. When disabled, only aggregated trait signals are shown.
Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated by email or via a notice in the app. The “last updated” date at the top of this page always reflects the current version.