Privacy Policy
Effective Date: March 21, 2026
This Privacy Policy describes how Notchd ("we," "us," or "our") collects, uses, discloses, and protects your personal information when you use our mobile application and website (collectively, the "Service"). By accessing or using the Service, you agree to the collection and use of information in accordance with this policy.
1. Information We Collect
1.1 Information You Provide
When you create an account or use the Service, you may provide us with the following information: your name, email address, phone number, and authentication credentials through Google or Apple sign-in. You may also provide profile information or other details you choose to share.
1.2 Media You Capture
When you use the in-app camera to capture photos or videos, we collect and store the media files you create. We also generate and store a SHA-256 cryptographic hash of each file, along with associated metadata such as the date and time of capture.
1.3 Information Collected Automatically
When you use the Service, we may automatically collect certain information, including: your device type, operating system, and unique device identifiers; your IP address; approximate location data derived from your IP address or, with your permission, precise location data from your device; and usage data such as features accessed, interactions, and timestamps.
2. How We Use Your Information
We use the information we collect for the following purposes: to provide, maintain, and improve the Service; to create and manage your account; to generate cryptographic hashes and register proof of your media on the blockchain; to store your original media files securely; to display verification status and proof records within the app; to communicate with you about updates, security alerts, or support; to detect, prevent, and address technical issues or fraud; and to comply with legal obligations.
3. Blockchain and On-Chain Data
When you verify media through the Service, a SHA-256 hash of your file is registered on a public blockchain (currently Polygon). This hash is a one-way cryptographic fingerprint and does not contain or reveal the contents of your media. However, once registered on-chain, the hash and associated transaction data are public and cannot be deleted or modified. No personal information such as your name, email, or media files is stored on the blockchain.
4. How We Store Your Data
Your media files and account data are stored using Supabase, which provides cloud-based database, authentication, and storage services. We implement industry-standard security measures to protect your data, including encryption in transit and at rest. As our architecture evolves, we may migrate media storage to decentralized storage solutions such as Arweave for enhanced permanence and immutability. We will update this policy to reflect any material changes in storage infrastructure.
5. Sharing and Disclosure
We do not sell your personal information. We may share your information in the following limited circumstances: with service providers who assist us in operating the Service (such as cloud hosting, authentication, and analytics providers), subject to confidentiality obligations; when required by law, regulation, legal process, or governmental request; to protect the rights, property, or safety of Notchd, our users, or the public; and in connection with a merger, acquisition, or sale of assets, in which case you will be notified of any change in ownership or use of your information.
6. Third-Party Services
The Service may integrate with third-party services, including Google and Apple for authentication, Supabase for data storage and authentication, and blockchain networks for proof registration. These third parties have their own privacy policies, and we encourage you to review them. We are not responsible for the privacy practices of third-party services.
7. Your Rights and Choices
Depending on your jurisdiction, you may have the following rights regarding your personal information: access the personal data we hold about you; request correction of inaccurate data; request deletion of your account and associated data (note that on-chain hash records cannot be deleted due to the nature of blockchain technology); opt out of marketing communications; and export your data in a portable format. To exercise any of these rights, please contact us at the email below.
8. Data Retention
We retain your personal information for as long as your account is active or as needed to provide the Service. If you request deletion of your account, we will delete or anonymize your personal data within a reasonable timeframe, except where we are required to retain it by law or for legitimate business purposes. On-chain proof records are permanent and cannot be removed.
9. Children's Privacy
The Service is not directed to individuals under the age of 13 (or the applicable age of consent in your jurisdiction). We do not knowingly collect personal information from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete that information promptly.
10. Security
We take reasonable administrative, technical, and physical measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
11. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your jurisdiction. By using the Service, you consent to the transfer of your information to such countries.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy within the app or on our website and updating the effective date. Your continued use of the Service after changes are posted constitutes your acceptance of the revised policy.
13. Contact Us
If you have any questions or concerns about this Privacy Policy, please contact us at:
Notchd
Email: dev@notchd.io