Reference · h1tch ai llc
Privacy policy
Updated
Este documento está disponible actualmente en inglés.
Who is responsible
Reference is operated by h1tch ai llc. This policy covers the Reference app and getreference.app. Contact us through the Support page for privacy questions or to exercise your data rights.
What we collect
When you create an account, our sign-in provider processes your account details, email address and authentication information. Reference stores your profile, photographs, watch identifications, corrections, notes, collection records, wear entries and achievements. If you use paid features, we also store the purchase, service and value information you enter, and subscription status supplied by the store. We do not receive your payment card details from Apple or Google.
Your collection is private
Captures, ownership, wear history, purchase details and values are private. A public profile can display your chosen name, handle, bio, selected achievements and approved posts. Public wrist-check participation can appear on your public calendar. Your email, private wear entries and collection totals are not part of that calendar or profile.
Photographs and processing
The app asks for camera or photo-library access when you choose those features. Before sending a photograph for identification, it names the configured provider and requests permission. Google or Anthropic processes identification; Google also processes watch-content checks and public-content moderation. With your permission, OpenAI prepares a private watch portrait as part of spotting. Existing photographs are sent for portraits only when you request it. We prepare uploaded images without EXIF metadata. Avoid including faces, addresses, serial numbers or other private details in the visible image. Identification and generated portraits can be inaccurate.
Sharing is a separate choice
Saving a watch does not publish it. When you submit a wrist check or another public post, its selected photograph and text are processed for moderation before publication. Profile names and biographies are also checked before an update becomes public; the previous approved text remains visible while an update is checked. With your permission, Google processes the proposed name and biography for this check. Approved posts and comments are visible to other collectors, subject to access and block rules. Deleting or withdrawing a post stops new access to it. Previously issued image links can work briefly, and other people may have saved a public image.
Why we use information
We use information to provide your account and the features you request, keep records in sync, process purchases, identify watches, respond to support, moderate content and prevent abuse. We may occasionally email you about your own collection, such as a suggested next step after you join or news that a watch you saved has since been identified. These emails contain no tracking images or tracked links. Product events help us understand reliability and improve the experience. Install measurement shows which of our ads and links bring people to Reference. Depending on applicable law, processing relies on providing the service, our legitimate interests in security, improvement and measuring our marketing, legal obligations, or your consent where required. You can decline optional photo processing; the corresponding feature will not run.
Service providers
Clerk supports sign-in; Supabase stores app data and photographs; RevenueCat manages membership status; PostHog processes app usage events; Resend delivers our occasional product emails; AppsFlyer measures which ads and links lead to installs; Sentry receives technical crash diagnostics; Expo delivers compatible app updates; and Vercel hosts this website. Google, Anthropic and OpenAI process information for the features described above when enabled. These providers may process data outside your country. Their own contractual retention and security terms apply to information processed for us. We may disclose information when legally required or necessary to protect people and the service.
App updates
We use Expo’s EAS Update service to deliver compatible app fixes and improvements. When the app checks for or downloads an update, Expo receives a randomly generated identifier stored for this app installation, platform and technical app/update information, and connection information such as your IP address. To support recovery after a failure, the update client may also send saved error descriptions and failed-update information. These requests support update delivery and reliability. They are separate from Sentry reporting and can include error-message text.
Crash diagnostics
We use Sentry to diagnose app crashes and software errors. Reports can include the app version, operating-system and device information, and technical stack traces. We do not attach photographs, screen recordings, screenshots, private notes, account emails or payment amounts. App error reports sent through our Sentry integration are filtered to exclude account identifiers and arbitrary error-message content. Native crash reports can contain additional operating-system diagnostics and are subject to server-side data scrubbing. Diagnostics are used for app reliability, not advertising.
Measurement and website storage
Product analytics in PostHog uses explicit product events, with automatic location enrichment disabled. Analytics records your country from your device’s region setting, not from your location or IP address. We exclude photographs, captions, private notes, purchase amounts and email addresses from those event payloads. Install measurement is separate and described in the next section. Our sign-in and hosting providers retain connection information, including IP addresses, device details and technical request logs, for authentication, security and service operation. They may derive an approximate city or country from an IP address. This website stores your appearance preference in your browser. It measures page visits and taps on our app-store links with PostHog, without cookies or other browser storage. PostHog uses your IP address and browser details only to count each day’s visitors, does not keep the IP address and does not look up your location. Its interactive watch demonstration runs locally and does not upload a photograph, create an account or identify you.
Install measurement
We use AppsFlyer to learn which of our ads and links lead people to install and open Reference. Reference does not start AppsFlyer on devices whose region or time zone is set to a country in the European Economic Area, the United Kingdom or Switzerland. When the app opens, AppsFlyer receives your IP address, device and operating-system details, the app version, an installation identifier, and install-referrer and campaign information. On iPhone it also receives the identifier Apple assigns to apps from the same developer; on Android, your device’s advertising ID. Once you sign in, it receives your Reference account ID along with a sign-in event that links the installation to your account, so this data can be found and erased. AppsFlyer estimates an approximate location, such as country, region or city, from the IP address. On iPhone, Reference does not ask to track you or read the advertising identifier, and ad networks receive only aggregated campaign results. On Android, AppsFlyer checks installs with the ad networks we advertise on, such as Meta and TikTok, sharing the install details and advertising ID with them; you can reset or delete the advertising ID in Android settings. AppsFlyer keeps user-level measurement data for limited periods set by its policy and ad-network terms. If you delete your account in the app, the app sends us its AppsFlyer installation identifier, when there is one, so we can ask AppsFlyer to erase data linked to that identifier and to your account ID. On a phone outside those countries, the app-store links on our website and social profiles pass through AppsFlyer, which receives the tap, your IP address, device details and the campaign name before the store opens.
Retention and deletion
Saved records remain until you delete them or your account; ending membership does not remove them. Uncommitted uploads are scheduled for deletion after seven days unless an identification remains unresolved. Discarding an uploaded draft schedules its removal. Account deletion removes active app records and queues stored-file and sign-in cleanup. It also asks AppsFlyer to erase install-measurement data linked to your account. Limited records may remain where needed for legal obligations, fraud prevention or provider backups under their retention policies. Deleting an account does not cancel a store subscription.
Your choices and rights
You can correct watch details, edit your profile, remove posts and records, export your collection, block collectors and request account deletion in Settings. To stop product emails, reply “unsubscribe” to any of them or contact Support. Depending on where you live, you may also have rights to access, correct, erase, restrict, object to or receive a copy of personal data, withdraw consent, or complain to your data-protection authority. Contact Support for requests you cannot complete in the app. We may need to verify account ownership before releasing or deleting information.
Children and updates
Reference is not intended for children under 13, or anyone below the age required to consent to the service in their country. Contact Support if you believe a child has provided personal information inappropriately. We may update this policy as the service changes. The date on this page identifies the current version; material changes will be communicated where required.
Habla con nosotros
Incluye tu nombre de usuario de Reference, tu dispositivo y una breve explicación. Nunca envíes contraseñas ni datos de tu tarjeta.
Escribir a Referencesupport@getreference.app