Privacy Policy

On your iPhone

• What you enter — your email, optional phone number, name and address details, ZIP code, and your removal records (which site, when you submitted, what you marked) — is stored on your iPhone, in the iOS Keychain and app storage.
• Data in the iOS Keychain can survive reinstalling the app until you delete it (see Deletion below).

If you sign in (Apple or Google)

• Your account: an account ID and the email address your sign-in provider shares. If you choose Google, Google may also share your name and profile picture, which our sign-in provider may keep with your account.
• Removal records: when you're signed in and record that you submitted a site's opt-out, a copy — which site, and the date you first recorded it — is kept on your account. Sites you mark removed, and anything you recorded before signing in, stay on your iPhone only. What you type into a site's own opt-out form is never sent to HideID.
• Email breach check: the email you choose to check is sent to the HideID service, which checks it with Have I Been Pwned. It is stored encrypted (AES-256-GCM), with a one-way hash used to avoid duplicates, together with the results: breach name, site, date and the types of data exposed.
• Premium waitlist: if you ask to be told about a future plan, that choice is kept on your account. Write to support@hideid.ai to be removed.
• Notifications: if you allow them while signed in, your device's push token is kept on your account. HideID's servers send no breach alerts while ongoing monitoring is off; reminders are generated on your iPhone.

What HideID does not do

• No automatic re-checks. HideID doesn't re-check your email automatically or send breach alerts — ongoing monitoring is part of a planned Premium and is switched off on our servers. A check runs only when you start it.
• No selling, no ads, no tracking. HideID has no advertising SDKs and sends no analytics to third parties. Event logging exists only in development builds and never includes personal information.
• No invented results. If a check can't run, the app says so — never a clean result from a check that didn't happen.

Who else receives data

• Have I Been Pwned: the email you choose to check.
• Supabase: hosts HideID's database and sign-in.
• Vercel: hosts the HideID API and keeps request logs; we have not yet confirmed their retention period.
• Apple: Sign in with Apple, push notifications, TestFlight (crash logs and feedback you choose to share, under Apple's terms), and turning a ZIP code into a city and state — Apple's location service receives the ZIP; HideID's servers don't.
• Google: only if you choose Continue with Google.
• People-search sites: you submit each opt-out on the site's own page, so it goes to that site, not to HideID.
• Support: what you write to support@hideid.ai. Feedback sent from the app also includes the app version, iOS version and device type.

Reminders on your device

If you allow notifications, HideID can remind you to check on a removal you submitted — typically two weeks after you sent it.

• Generated on your device: the reminder is scheduled by the app from the submission date stored on your iPhone. Nothing is sent to a server to produce it, and no server is told when it fires.
• What it says: only that you submitted, and how long ago. It makes no claim about the site or the outcome — HideID hasn't checked, and the reminder says so.
• Turning it off: switch notifications off, or mark the removal in the app, and the reminder is removed. Deleting your data removes every pending and delivered reminder.

How long data is kept

Data on your account is kept until you delete your account. Delete account deletes your account and the data linked to it from HideID's database — checked emails, check results, submission records, waitlist entry and push tokens — and the app tells you if that couldn't be confirmed. We keep one record that the deletion happened — the account ID and when it was requested and completed, with no email or other details — so we can show the deletion was carried out. It has no set end date. We have not yet confirmed how long our providers keep backups, request logs, or our sign-in provider's own audit logs of sign-in events (which can include your email), so we can't promise when copies there expire.

Deletion

In the app, Settings → Your data. Delete local data erases what HideID stores on this iPhone, including Keychain copies; you stay signed in, and your account data stays. If you're signed in, Delete account does both, and the app says plainly if the server deletion couldn't be confirmed — you can also write to support@hideid.ai.

Contact

Questions about this policy, or a security concern: support@hideid.ai. If a security incident affects your data, we'll notify you as the law requires.