Privacy Policy
This Privacy Policy explains how Hoardmark ("Hoardmark", "we", "us", or "our") collects, uses, and shares information about you when you use the Hoardmark iOS application and related services (together, the "Service").
Hoardmark is operated by Jack Hurley (sole operator, based in Australia). If you have any questions about this policy or your data, contact us at privacy@hoardmark.com.
1. What this policy covers
This policy describes:
- The information we collect from you and about your use of the Service
- How we use that information
- Third-party services that process data on our behalf
- Your rights and the choices available to you
- How to contact us
By using Hoardmark, you agree to the collection and use of information in accordance with this policy.
2. Information we collect
2.1 Information you provide directly
- Account information: email address and password (or federated sign-in credentials if you use Sign in with Apple or Google).
- Saved content: URLs you save from TikTok, Instagram, YouTube, X, and other supported platforms; collections, notes, and tags you add; any text you type into the app (for example, prompts to Hoard Brain).
- Payment information: subscription status. Payments are processed by Apple via In-App Purchase: we do not receive or store your card details.
2.2 Information collected automatically
- Device and usage data: device model, iOS version, app version, language, and timezone.
- Interaction data: which features you use, buttons tapped, screens viewed. Collected to understand what's working and what to improve.
- Crash and performance data: stack traces and device state when the app crashes or encounters an error. Collected to fix bugs.
2.3 Information derived from your saves
When you save a link, Hoardmark retrieves publicly available metadata and content for that URL (title, description, captions, audio). This content is processed by AI to produce summaries, insights, and actionable outputs such as recipes or workouts. These AI-generated outputs are stored with your save and are accessible only to you.
We do not scrape private or authenticated content. We only retrieve what is publicly accessible to anyone with the link.
3. How we use your information
We use your information to:
- Provide the Service: authenticate you, store your saves, generate AI outputs, run the daily review, and surface your content across devices.
- Process payments and manage subscriptions.
- Improve the Service: understand feature usage, diagnose bugs, and prioritise what to build next.
- Communicate with you: respond to support requests, and (infrequently) send important service announcements.
- Detect, prevent, and address fraud, abuse, or security issues.
- Comply with legal obligations.
We do not sell your personal information. We do not use your saves, AI outputs, or prompts to train third-party AI models.
4. Third-party services that process your data
Hoardmark relies on the following third-party providers to operate:
| Provider | What they do | Data they receive |
|---|---|---|
| Supabase | Authentication, database, edge functions | Email, password hash, saved URLs, AI-generated content, usage records |
| Anthropic (Claude API) | Generates summaries, insights, and chat responses | Content of the specific save being analysed, or your Hoard Brain prompt + relevant save snippets |
| OpenAI (Whisper API) | Transcribes audio of supported video links | Audio extracted from the public URL you save |
| Apify | Fetches publicly available metadata and captions | The URL you saved |
| RevenueCat | Validates App Store receipts and manages premium subscription state | Apple subscription identifiers, anonymous user ID |
| Apple | Processes your payment | Payment information (governed by Apple's Privacy Policy) |
| Sentry | Captures stack traces when the app crashes | Device model, iOS version, app version, crash data |
| PostHog | Records which screens you view and features you use | Anonymous device identifier, event names, app version |
5. How long we keep your data
- Account + save data: kept while your account is active.
- Crash and analytics data: Sentry retains crash reports for 90 days; PostHog retains event data for 12 months.
- AI-generated outputs: kept while your account is active.
- Deleted account: when you delete your account (Settings → Delete Account), we delete your data from primary databases within 30 days. Backups may retain data for up to 90 days.
6. Your rights
You have the right to:
- Access the personal information we hold about you.
- Correct inaccurate information.
- Delete your account and associated data.
- Export a copy of your saves and outputs.
- Object to or restrict certain processing.
- Withdraw consent where processing is based on consent.
If you are in the EU/EEA or UK, you also have the right to lodge a complaint with your local data protection authority. If you are in California, you have the rights described under the CCPA/CPRA.
To exercise any of these rights, email privacy@hoardmark.com.
7. Children
Hoardmark is not intended for children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at privacy@hoardmark.com and we will delete it.
8. International transfers
Hoardmark operates primarily from Australia, but our third-party processors may store and process data outside your country, including in the United States and the EU. Where required by law, we rely on appropriate safeguards such as Standard Contractual Clauses.
9. Security
We take reasonable steps to protect your information, including encryption in transit (HTTPS/TLS), encryption at rest where supported, and access controls on our backend. No system is perfectly secure. If we discover a data breach, we will notify you in accordance with applicable law.
10. Changes to this policy
We may update this policy from time to time. If we make material changes, we will notify you by email or in the app before the changes take effect.
11. Contact
Jack Hurley (operator of Hoardmark)
Email: privacy@hoardmark.com
Website: hoardmark.com