Privacy Policy

This Privacy Policy explains how Hoard ("Hoard", "we", "us", or "our") collects, uses, and shares information about you when you use the Hoard iOS application and related services (together, the "Service").

Hoard is operated by Jack Hurley (sole operator, based in Australia). If you have any questions about this policy or your data, contact us at privacy@hoardmark.com.

1. What this policy covers

This policy describes:

The information we collect from you and about your use of the Service
How we use that information
Third-party services that process data on our behalf
Your rights and the choices available to you
How to contact us

By using Hoard, you agree to the collection and use of information in accordance with this policy.

2. Information we collect

2.1 Information you provide directly

Account information: email address and password (or federated sign-in credentials if you use Sign in with Apple or Google).
Saved content: URLs you save from TikTok, Instagram, YouTube, Facebook, and other supported platforms; collections, notes, and tags you add; any text you type into the app (for example, prompts to Hoard Brain).
Payment information: subscription status. Payments are processed by Apple via In-App Purchase — we do not receive or store your card details.

2.2 Information collected automatically

Device and usage data: device model, iOS version, app version, language, and timezone.
Interaction data: which features you use, buttons tapped, screens viewed. Collected to understand what's working and what to improve.
Crash and performance data: stack traces and device state when the app crashes or encounters an error. Collected to fix bugs.

2.3 Information derived from your saves

When you save a link, Hoard retrieves publicly available metadata and content for that URL (title, description, captions, audio). This content is processed by AI to produce summaries, insights, and actionable outputs such as recipes or workouts. These AI-generated outputs are stored with your save and are accessible only to you.

We do not scrape private or authenticated content. We only retrieve what is publicly accessible to anyone with the link.

3. How we use your information

We use your information to:

Provide the Service — authenticate you, store your saves, generate AI outputs, run the daily review, and surface your content across devices.
Process payments and manage subscriptions.
Improve the Service — understand feature usage, diagnose bugs, and prioritise what to build next.
Communicate with you — respond to support requests, and (infrequently) send important service announcements.
Detect, prevent, and address fraud, abuse, or security issues.
Comply with legal obligations.

We do not sell your personal information. We do not use your saves, AI outputs, or prompts to train third-party AI models.

4. Third-party services that process your data

Hoard relies on the following third-party providers to operate:

Provider	What they do	Data they receive
Supabase	Authentication, database, edge functions	Email, password hash, saved URLs, AI-generated content, usage records
Anthropic (Claude API)	Generates summaries, insights, and chat responses	Content of the specific save being analysed, or your Hoard Brain prompt + relevant save snippets
OpenAI (Whisper API)	Transcribes audio of supported video links	Audio extracted from the public URL you save
Apify	Fetches publicly available metadata and captions	The URL you saved
RevenueCat	Validates App Store receipts and manages premium subscription state	Apple subscription identifiers, anonymous user ID
Apple	Processes your payment	Payment information (governed by Apple's Privacy Policy)
Sentry	Captures stack traces when the app crashes	Device model, iOS version, app version, crash data
PostHog	Records which screens you view and features you use	Anonymous device identifier, event names, app version

5. How long we keep your data

Account + save data: kept while your account is active.
Crash and analytics data: Sentry retains crash reports for 90 days; PostHog retains event data for 12 months.
AI-generated outputs: kept while your account is active.
Deleted account: when you delete your account (Settings → Delete Account), we delete your data from primary databases within 30 days. Backups may retain data for up to 90 days.

6. Your rights

You have the right to:

Access the personal information we hold about you.
Correct inaccurate information.
Delete your account and associated data.
Export a copy of your saves and outputs.
Object to or restrict certain processing.
Withdraw consent where processing is based on consent.

If you are in the EU/EEA or UK, you also have the right to lodge a complaint with your local data protection authority. If you are in California, you have the rights described under the CCPA/CPRA.

To exercise any of these rights, email privacy@hoardmark.com.

7. Children

Hoard is not intended for children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at privacy@hoardmark.com and we will delete it.

8. International transfers

Hoard operates primarily from Australia, but our third-party processors may store and process data outside your country, including in the United States and the EU. Where required by law, we rely on appropriate safeguards such as Standard Contractual Clauses.

9. Security

We take reasonable steps to protect your information, including encryption in transit (HTTPS/TLS), encryption at rest where supported, and access controls on our backend. No system is perfectly secure. If we discover a data breach, we will notify you in accordance with applicable law.

10. Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you by email or in the app before the changes take effect.

11. Contact

Jack Hurley (operator of Hoard)
Email: privacy@hoardmark.com
Website: hoardmark.com