Privacy Policy

1. What is Tuch

Tuch is a personal coaching application. It is not a medical, psychological, or therapy service. This Privacy Policy describes how Tuch Inc. ("Tuch," "we," "us," "our") handles information about you when you use the Tuch mobile application and the related web account-management surface at app.tuch.live (together, the "Service").

By using the Service, you agree that your information will be handled as described in this Privacy Policy.

2. The core principle — your data stays on your device

Your personal information — including your name, journal entries, goal content, mood logs, reflections, and conversation transcripts — is stored only on your iPhone or Android device. It is never transmitted to our servers, never stored in our databases, and never accessible by Tuch Inc. or any third party through us.

What we store on our servers:

• An anonymous identifier (your Agent ID, a random UUID v4)
• Anonymized behavioral patterns derived from your activity — no personal content, no identifying information, no transcripts
• Your subscription status and billing platform
• Your push-notification token (only if you have enabled push notifications)
• Timestamps of activity (e.g., "opened app," "responded to check-in"), without the content of that activity

What we never store on our servers:

• Your name
• Your email address
• Your birthday or date of birth
• Your journal entries or their content
• Your goals or goal content
• Your conversation transcripts with the coach
• Any free-text content you create inside the app

3. Information we collect

3.1 On your device (never transmitted)

The following lives only on your device:

• The name and date of birth you provide during onboarding
• Your journal entries, mood logs, and goal content
• Your conversation history with the coach
• Any free-text input you make, including reflections, notes, and responses to check-ins

This information is encrypted on-device where the operating system supports it, and is removed when you delete the app or clear its storage.

3.2 On our servers (anonymized only)

• Agent ID. A random UUID v4 generated when you first open the app. It has no connection to you personally.
• Behavioral patterns. Aggregated, anonymized signals derived from your interactions (e.g., engagement consistency, response timing patterns). These are category labels and numeric scores; they contain no free-text content.
• Subscription data. Your subscription platform (Apple App Store or Stripe), status, and expiry date. For Stripe subscribers, a Stripe customer identifier — no card number or billing address is stored by Tuch.
• Push-notification token. An opaque token supplied by Apple or Google that lets us deliver notifications to your device. It is not linked to your identity.
• Activity timestamps. Timestamps of app events (e.g., "daily check-in scheduled," "notification delivered"), used to schedule future coaching and diagnose delivery problems.

3.3 Information you provide during onboarding

During onboarding we ask for your name and date of birth so the coach can address you personally and adjust its guidance appropriately. These stay on your device. We do not transmit them to our servers.

4. How we use your information

The anonymized data on our servers is used to:

• Compute anonymized behavioral patterns so the coach can personalize its approach over time
• Schedule coaching check-ins and notifications at appropriate times based on your activity pattern
• Diagnose and fix bugs (e.g., tracing why a notification failed to deliver)
• Process your subscription and bill the correct amount

We do not use your data to train general-purpose AI models, and we do not sell or rent your data to any third party.

5. Third parties

We share limited, specific information with the service providers below. Each receives only what is strictly required to perform its function.

• Stripe — Payment processing. Receives your payment information when you subscribe. Tuch never sees your full card number.
• Apple — In-App Purchase subscription handling for iOS users. Apple receives your payment information directly; Tuch receives only an anonymized receipt and subscription status.
• Supabase — Database hosting for anonymized behavioral data and subscription status. Supabase does not receive any personal content.
• Anthropic and OpenAI — AI providers used to generate coaching responses. Any data sent to these providers is first sanitized on your device to remove identifying information. AI providers never receive your name, journal content, or transcripts.
• Twilio — SMS delivery, only if you have enabled SMS notifications. Receives your phone number for that purpose.
• Resend — Email delivery, only if you have enabled email notifications. Receives your email address for that purpose.
• Expo, Apple Push Notification Service, and Firebase Cloud Messaging — Push-notification delivery. Receive an opaque device push token.
• Sentry — Error and crash reporting. Receives anonymized crash traces; we configure it to scrub user-identifying fields.

We do not sell your data. We never have. We do not use your data for advertising.

6. AI and automated processing

Tuch uses AI to generate coaching responses. Before any information is sent to an AI provider, it is sanitized on your device to remove personal content. The provider receives anonymized behavioral context only — not your name, journal entries, or conversation history.

Consistent with Apple App Store policy, we obtain your explicit consent the first time any data would be shared with a third-party AI provider. You may withdraw that consent at any time in the app under You → AI Cloud Coaching.

7. Data retention and deletion

• On-device data. Retained on your device until you uninstall the app or delete your account in the app.
• Server-side data. Retained while your account is active. Anonymized pattern records are retained for rolling windows (typically 90–180 days) so trend analysis remains meaningful. Deleted within 30 days of account deletion.
• Payment records. Retained as required by applicable tax, accounting, and consumer-protection law.

8. Your rights

You have the right to:

• Access the anonymized data we hold about you (available at any time in the app and at app.tuch.live/account)
• Delete your data (available in the app under Settings → Delete My Account, and on the web at app.tuch.live/account)
• Opt out of email and SMS notifications at any time in the app under You → Preferences
• Withdraw AI processing consent at any time in the app under You → AI Cloud Coaching

If you are a resident of the European Economic Area, the United Kingdom, or California, additional rights apply under GDPR, UK GDPR, and the California Consumer Privacy Act (CCPA), including the right to request a copy of your data, the right to rectification, the right to restrict processing, and the right to lodge a complaint with a supervisory authority. To exercise these rights, email support@tuchapp.com.

9. Children

Tuch is not intended for users under the age of 13. We do not knowingly collect information from children under 13. If you believe a child has used the Service, please email support@tuchapp.com and we will delete any associated account.

10. Security

We use commercially reasonable technical and organizational measures to protect server-side data, including encrypted connections, encryption at rest where the hosting provider supports it, limited-access operator accounts, and regular dependency patching. No method of transmission or storage is perfectly secure; if a security incident affects your account, we will notify you as required by law.

11. International data transfers

Our servers are operated by providers in the United States. If you access the Service from outside the United States, your anonymized data will be transferred to, processed in, and stored in the United States. We rely on applicable legal mechanisms (such as Standard Contractual Clauses) for transfers from the EEA and the United Kingdom.

12. Changes to this policy

We will notify you of material changes to this Privacy Policy via the app and via email, if you have enabled email notifications. Continued use of the Service after a change constitutes acceptance of the revised policy.

13. Contact

Questions about this policy, requests to exercise your rights, or data-deletion requests: support@tuchapp.com.

14. Not a therapy service

Tuch is a personal coaching tool. It is not a medical, psychological, or psychiatric service. Nothing in Tuch constitutes medical advice, psychological treatment, a therapeutic relationship, or a clinical diagnosis. If you are experiencing a mental-health crisis, thoughts of self-harm, or any medical emergency, call 988 (Suicide and Crisis Lifeline) or 911 in the United States, or your local emergency number.