Privacy Policy

Effective Date: May 6, 2026

This Privacy Policy describes how Chad Stauffer ("we," "us," or "HatchMatch") collects, uses, and protects information when you use the HatchMatch mobile application ("the App"). By using the App, you agree to the practices described in this Policy.

1. Information We Collect

Information You Provide

When you create an account, we collect your email address. If you sign in using Sign in with Apple, we collect your Apple-provided email (which may be a private relay address) and, on your first sign-in only, your name as provided by Apple.

Photos You Upload

The App allows you to take or upload photos of insects, flies, and fly boxes for identification. These photos are stored in our secure cloud storage (Supabase) and are associated with your account so you can revisit your identifications in your fly box. We do not currently extract or store metadata (such as GPS location or timestamps) from your photos.

Identification Data

When you use the App to identify a fly or insect, we store the resulting identification (species name, recommended patterns, confidence scores, and your saved notes) in your account so you can access it later.

Purchase Information

When you purchase tokens or a subscription, Apple processes the transaction. We do not collect or store your payment card details. We receive a transaction identifier and product information from Apple via RevenueCat (our subscription management provider) to credit your account appropriately.

Automatically Collected Information

We collect basic technical information necessary for the App to function, including your device's anonymous user identifier (assigned by us), authentication tokens, and timestamps of your activity. We do not use third-party analytics SDKs inside the App.

2. How We Use Your Information

We use the information we collect to:

• Provide the App's core functionality (identifying flies, saving your fly box, managing your account)
• Process your photos through our identification engine, which uses OpenAI's Vision API
• Manage your subscription and token balance
• Communicate with you about your account, security issues, or important service changes
• Improve the App and diagnose technical issues
• Comply with legal obligations

We do not sell your personal information to third parties. We do not use your information for advertising.

3. Anonymous Use

When you first launch HatchMatch, we create an anonymous identifier on your device so you can use the App without creating an account. This identifier is stored in our database alongside any fly box entries, identifications, or token purchases you make. If you later choose to sign in with email or Apple ID, your anonymous identifier is linked to your account in place — no data is lost or duplicated. You may choose to remain anonymous indefinitely. Uninstalling the App while anonymous discards your local session; the resulting database row contains no personally identifiable information.

4. Third-Party Services

HatchMatch uses the following third-party services to operate. Each has its own privacy policy governing how they handle data:

Supabase — Authentication and database storage for your account, photos, and identification history. Supabase Privacy Policy

OpenAI — Powers the fly identification engine. When you submit a photo for identification, the photo is sent to OpenAI's Vision API for processing. Per OpenAI's API data usage policies, this data is not used to train OpenAI's models and is retained by OpenAI for a maximum of 30 days for abuse monitoring before deletion. OpenAI API Data Usage Policies

RevenueCat — Manages in-app purchases and subscriptions. RevenueCat collects purchase events, customer identifiers, and subscription status. RevenueCat Privacy Policy

Apple — Processes all in-app purchases through the App Store and provides Sign in with Apple functionality. Apple Privacy Policy

We do not control how these third parties handle data. Your use of HatchMatch constitutes acknowledgment of their data practices.

5. Data Retention

We retain your account information, photos, and identification history for as long as your account is active. If you delete your account from within the App, we will delete your associated data from our systems within 30 days, except where retention is required by law (for example, transaction records for tax purposes).

OpenAI retains photos sent through their API for up to 30 days for abuse monitoring purposes, after which they are deleted from OpenAI's systems.

6. Account Deletion

You can delete your HatchMatch account at any time from within the App's settings. Deleting your account will remove your authentication record, profile, photos, identification history, and entitlements from our systems. Some data may persist briefly in backups, but will be purged from those within 30 days.

7. Data Security

We use industry-standard security practices to protect your data, including encrypted connections (HTTPS/TLS), secure authentication via Supabase, and private cloud storage for your photos. No system is perfectly secure, however, and we cannot guarantee the absolute security of any data transmitted to or stored by HatchMatch.

8. Children's Privacy

HatchMatch is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have inadvertently collected information from a child under 13, we will delete it promptly. If you believe a child under 13 has provided information to us, please contact us at hello@hatchmatch.ai.

The App contains no adult content and is generally suitable for all ages, though account creation is intended for users 13 and older.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request that we correct inaccurate data
• Deletion: Request that we delete your data (you can also delete your account directly within the App)
• Portability: Request a copy of your data in a portable format
• Opt-out: Decline certain data processing where applicable

To exercise these rights, contact us at hello@hatchmatch.ai. We will respond within 30 days.

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you specific rights regarding your personal information. We do not sell personal information as defined by the CCPA.

If you are in the European Economic Area or United Kingdom, the General Data Protection Regulation (GDPR) applies. Our legal basis for processing your data is the performance of our contract with you (providing the App's services) and our legitimate interests (improving the App and preventing abuse).

10. International Users

HatchMatch is operated from the United States. If you access the App from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those in your country.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Effective Date" at the top of this document and, for material changes, notify you within the App or via email. Your continued use of HatchMatch after changes are posted constitutes your acceptance of the updated Policy.

12. Contact

If you have questions about this Privacy Policy or our data practices, contact us at:

Email: hello@hatchmatch.ai
Operator: Chad Stauffer
Location: California, United States