Privacy Policy

Who we are

Notchi is provided by Om Gawande (theSpider). We provide customizable companions and useful information for Dynamic Island and Live Activities. For privacy questions or data requests, contact Om Gawande (theSpider) at [email protected].

Information used by the app

• Your choices: selected companions, colors, favorite pets, recent selections, saved Island setups, app appearance, and preferences are stored on your device. A shared app container lets Notchi and its widget extension use the same settings and downloaded artwork.
• Account information: if you sign in with Apple or Google, your provider identity, email address (which may be an Apple private relay address), and Notchi account identifier are processed by Supabase to authenticate you and connect your account to purchase access and private downloads. We request basic sign-in information, not access to Gmail or Google Drive. Apple authorization tokens needed to revoke access on account deletion are encrypted on our server.
• Purchase information: Apple processes payments. RevenueCat and our backend process app user identifiers, product and transaction identifiers, entitlement status, and subscription lifecycle information to verify purchases and restore access. Notchi does not receive your payment card details.
• Weather: if you choose a weather Basic, you can search for a city or allow approximate location access. Apple Maps processes city searches and approximate coordinates for city lookup. Apple Weather receives the selected city coordinates to provide forecasts through WeatherKit. These network requests also expose your IP address to Apple. Weather snapshots and their update times are cached on your device.
• Optional Health and Calendar access: when you select a Basic that needs it, iOS asks for the relevant permission. Authorized readings are used on your device to show the selected Basic and its Live Activity snapshot. Notchi does not upload Health or Calendar contents to Supabase or RevenueCat.
• Pro device access: a random installation key is stored in this device’s Keychain. Our server stores an account-specific hash, device model, and short-lived access/transfer timestamps to allow Pro on one active device per account. This is not an advertising identifier. Device access requires periodic internet verification and can be moved in account settings.
• Device readings: clock, date, battery, storage, and system readings are used locally for the Basics you choose. They do not require access to your contacts, photos, microphone, music library, or Bluetooth.

Permissions are your choice

Browsing the gallery shows sample values. Selecting a Basic can request only the access it needs. You can decline access, choose a city manually for weather, or change permissions later in iPhone Settings. Health access can also be managed in the Health app. Removing access may prevent the related Basic from updating.

Information you display in Dynamic Island or on the Lock Screen can be visible to people who can see your screen. Choose which information to display accordingly.

Services that process information

• Apple: App Store checkout, subscriptions, purchase restoration, Sign in with Apple, and system permission controls.
• Google: authentication when you choose Continue with Google.
• RevenueCat: purchase validation and subscription access.
• Supabase: account authentication, protected storage, and download authorization.
• Apple Maps and Apple Weather: city lookup and forecasts when you use weather features.

These providers may process information outside your country. Our current Supabase project is hosted in Mumbai, India; other providers operate their own infrastructure.

Website data and support messages

This website does not include advertising trackers or third-party behavioral analytics. Our hosting provider necessarily receives requests such as your IP address, browser information, requested page, and request time to deliver and protect the site. If you email support, we receive the information and attachments you choose to send. Do not send passwords, sign-in codes, payment card details, or Health records.

Retention and deletion

Local settings and downloaded artwork remain on your device until you change or remove them, clear available app data, or remove the app. Account information, encrypted Apple authorization tokens, device access bindings, and entitlement records are used while your account exists. You can initiate deletion from the Notchi account screen in the app; see account deletion instructions.

Account deletion requests removal of your Supabase account and its linked access records and your linked RevenueCat customer profile. Apple sign-in authorization is revoked during account deletion. Apple retains purchase records under its own policies. Provider backups, security logs, and records required for legal or fraud-prevention purposes may remain under the provider’s retention policies. Deleting an account does not cancel an Apple subscription.

You can ask us about access, correction, or deletion of your information using the contact above. We may need to verify that the request relates to your account.

Advertising, security, and children

We do not sell personal information or use Health, location, or purchase information for targeted advertising. Network services use encrypted connections and protected access checks. No system can guarantee absolute security.

Notchi is not directed at children under 13, and we do not knowingly collect their account information. A parent or guardian who believes a child has provided personal information can contact us.

Changes to this policy

We will update this page and its date when our data practices change. Material changes will be communicated where required. The privacy information shown in the App Store should describe the same practices.