Privacy Policy

Who we are

We are responsible for personal information processed to operate Hunch and its website and support services. Where applicable data protection law uses the term, we are the controller of that information.

Accountless app

Hunch does not create a developer-managed user account or require sign-in. Apple Accounts, App Store purchases, payment details, refunds, and subscription management are handled by Apple under Apple terms.

Information that remains only on your device is not collected by us. If you enable Hunch Plus iCloud Sync, tracking history syncs through your private iCloud account. Device backups, App Store purchase records, iCloud account controls, and platform services are controlled by Apple or your device settings.

Information handled by Hunch

• Posture, nudge, calibration, session, settings, sync, and local app history data used to provide the app experience.
• Supported AirPods and Beats motion and camera face-tracking signals used for posture estimation. Camera frames are processed on your device and are not stored or sent to the website or feedback API.
• Support feedback you choose to send, including feedback kind, optional rating, message text and optional contact email. Each accepted report receives its own reference for follow-up. Current app versions do not attach a persistent support identifier, app or operating system details, device model or locale to feedback.
• Hunch checks Apple purchase and subscription status on your device using StoreKit to provide and restore Hunch Plus. The app does not send transaction identifiers, signed purchase records or a purchase identity to Hunch servers or a third-party subscription provider. Apple manages purchase and payment records.
• App Attest integrity proofs protect feedback from abuse. We retain a public key, its key identifier and a verification counter separately from feedback reports, without recording when the key was created or last used. Short-lived rate-limit counters are removed on the next scheduled cleanup after their hourly or daily window ends. The build number is used transiently during registration to check signed app integrity information. Integrity credentials are not included in support notifications or diagnostic reports.
• Website and technical information such as ordinary server logs, security events, device/browser details, and diagnostics needed to operate, secure, and improve the website and API.

Basic usage counts

Hunch collects basic usage counts only if you choose Share and continue on the welcome screen or turn Basic Usage Counts on in Settings > Data & Privacy, under Analytics & Diagnostics. We use them to improve onboarding, reliability and features. Counts cover app actions and outcomes, grouped by day, app and operating system versions, shared device model and platform. They exclude posture measurements, camera and sensor data, support content and onboarding answers, and contain no persistent user or device identifier.

We use combined counts without linking them to support, purchase or diagnostic records, or using them for advertising or individual profiling. Cloudflare hosts the counts and processes connection information, including IP addresses, for delivery and security. IP addresses are not stored with the counts.

We rely on your consent. You can withdraw it at any time by turning Basic Usage Counts off in Settings > Data & Privacy, under Analytics & Diagnostics, without affecting app features.

Diagnostics

Hunch sends limited technical error reports to an error-reporting service only if you choose Share and continue on the welcome screen or turn Diagnostics on in Settings > Data & Privacy, under Analytics & Diagnostics. Reports help us investigate faults and include error categories, recent technical operations and timings, app and operating system versions, and shared device model.

Reports exclude posture measurements, camera and sensor data, content you enter, purchase records and persistent user or device identifiers. IP addresses and derived location are removed from stored reports. We do not link diagnostics to support, purchase or basic usage records, or use them for advertising or individual profiling.

We rely on your consent. You can withdraw it at any time by turning Diagnostics off in Settings > Data & Privacy, under Analytics & Diagnostics, without affecting app features.

Camera and TrueDepth data

When you choose Camera tracking and allow access, Hunch uses Apple ARKit, including TrueDepth on supported iPhones, to measure your head position and rotation relative to an upright baseline. These face-derived measurements support calibration, the live posture display, posture assessment, nudges, session history and posture statistics.

Camera images are processed on your iPhone and are not recorded or uploaded. Hunch does not store depth maps, face meshes or facial expressions. Live measurements and camera calibration references stay in memory and are cleared when camera tracking stops.

Derived posture records, including head-movement statistics, grades, session times and nudge counts, are saved locally, including for session recovery. If you enable Hunch Plus iCloud Sync, saved history is also transferred to Apple CloudKit in your private iCloud account. Live camera inputs and calibration references are not synced. Device backups may separately include local data and preserved recovery copies, depending on your backup settings.

Hunch does not send live face inputs or derived posture records to our servers, feedback, subscription or analytics providers, or use them for identification, authentication, advertising, marketing, cross-app tracking or AI training. We do not sell face data.

Saved history does not expire automatically. Delete it through Settings > Data & Privacy > Delete Tracking History using the available local or synced scope; synced deletion requires iCloud to complete. This keeps the current session and its recovery data, settings, goals and achievements. Finish an active session first to include it in deletion. Preserved database recovery copies and backups are separate and are not erased by this control.

Stop tracking or revoke camera access in iOS Settings to prevent further collection. These actions, disabling sync or deleting Hunch do not remove existing iCloud history. Deleting Hunch removes local app data; manage backups separately through Apple or your backup software.

How information is used

• Provide posture tracking, nudges, today's sessions and posture statistics, Hunch Plus session history, optional iCloud Sync, settings, support and subscription features.
• Use aggregate counts of purchase-flow actions and outcomes to understand the app. These counts do not contain individual purchase records or identifiers and follow the basic usage counts controls described above.
• Respond to support, privacy, accessibility, security, and purchase enquiries, investigate reported issues and review product improvements.
• Protect the app, website, and API against abuse, fraud, spam, and unauthorised access.
• Debug crashes, compatibility problems, delivery failures, and service reliability issues.
• Comply with legal, accounting, tax, consumer, App Store, and security obligations.

Basis for essential processing

Where applicable data protection law requires a lawful basis, the following bases apply to delivering requested services, responding to enquiries and meeting our security and legal responsibilities.

• Providing the services you request: processing necessary to deliver Hunch features, verify paid access, restore purchases and handle support needed to deliver those services.
• Our legitimate interests: responding to other enquiries you choose to send, protecting Hunch and its users from fraud and abuse, and maintaining the security and reliability of our services. We consider the necessity of that processing and its effect on your rights. You may object to processing based on legitimate interests by contacting us.
• Legal obligations: retaining or providing information when required by applicable law, including obligations relating to purchases, tax, consumer rights and privacy requests.

Service providers

Hunch uses platform services for App Store purchases, private iCloud Sync and app integrity; cloud hosting, database, message delivery and security services for the website, feedback API and basic usage counts; diagnostic reporting services for app reliability; a support workspace for feedback notifications; and email forwarding and inbox services for support correspondence.

We limit the information shared with these providers to what is needed for those services.

Any third party with which we share your personal information is required to provide the same or equivalent protection as set out in this Privacy Policy and required by Apple's App Review Guidelines. This includes our service providers and any other recipients acting on our behalf.

Providers that process personal information on our behalf may use it only to provide their services to us, follow our lawful instructions or meet applicable legal obligations. Independent platform services that you use directly, including Apple's account and purchase services, also operate under their own terms and privacy policies.

Overseas processing

Personal information may be processed in Australia, the United States and other countries where our providers or their infrastructure operate. Hosting, security, email and support processing locations depend on the service and configuration used.

Basic usage counts are stored in the European Union; connection handling, security and support may occur elsewhere.

Diagnostic reports and their backups are stored in the European Union. Some service administration and support processing may occur outside the European Union, including in the United States.

Support email passes through a forwarding service before reaching our support inbox. These providers process messages, attachments and delivery information and may process that information outside Australia, including in the United States.

Contact us for information about processing locations and the international-transfer arrangements applicable to personal information we control.

Website cookies and analytics

The Hunch website is designed to work without advertising cookies or behavioural tracking. Essential hosting, security and log processing may still occur.

Retention and deletion

Local app data remains on your device until removed through app controls, device controls, deletion of the app, or platform backup settings. If iCloud Sync is enabled, available app controls may also delete synced tracking history.

We retain in-app feedback to investigate issues and review product improvements over time. Reports in our feedback database are scheduled for deletion 365 days after submission, with removal on the next daily cleanup. Copies in our support workspace are scheduled for deletion one year after each message is posted, through the provider’s daily deletion process.

Email copies of in-app reports follow the original report’s 365-day schedule and are removed during our weekly review. Other support email is scheduled for deletion 365 days after an enquiry is resolved, with removal during the next weekly review. Optional contact details are used for support follow-up.

Our feedback database has a seven-day recovery window. Our support workspace provider may retain deleted content in security backups for up to 14 days. Our email provider allows recovery for 30 days after an item is removed from Deleted Items. We restrict their use to recovery and reapply completed privacy deletions and expired retention periods before restored information is used. A specific legal obligation may require longer retention. Related delivery and security records are kept only as long as needed to operate and protect the feedback service.

Basic usage counts expire after 90 days and are removed by daily cleanup; recovery copies may retain them for up to seven further days.

Individual diagnostic reports are retained for up to 90 days. Backup copies expire within 90 days of their creation. Grouped issue summaries may remain until removed. Turning Diagnostics off does not delete reports already received; contact us about deletion using the privacy choices page.

Website logs and security records are kept only as long as reasonably needed to operate and protect the services or meet applicable legal obligations.

Purchase status is checked on your device through Apple. Information you separately provide in a billing enquiry follows our support retention policy.

Deleting Hunch does not cancel an Apple subscription or delete Apple purchase records. Apple controls its own purchase and payment records.

You can ask us to access, correct, delete, or restrict personal information we hold about you by using the privacy choices page or emailing us.

Security

Hunch uses reasonable technical and organisational safeguards for the type of information handled, including platform security, service integrity checks, abuse protections, and access controls. No service can be guaranteed completely secure.

Children

Hunch is not directed to children under 13. If you believe a child has provided personal information to Hunch, contact us so we can review and respond.

Contact

For privacy questions or requests, email support@cgc.studio. We may need information that verifies your request before acting on it.