Privacy Policy

You must be 18 or older and a verified student (we confirm a valid school .edu email). We store your date of birth to enforce the age requirement and never knowingly collect data from anyone under 18.

We only collect what you give us:

• Account: school email, date of birth, password (hashed by our auth provider).
• Profile: display name, photos, and your AI-interview answers (your “dossier”).
• Preferences: who you’re seeking, age range, intent, and availability windows.
• Optional: if you connect your own public social profile, we read only what you authorize, to enrich your own profile.
• Activity needed to run the app: matches, messages, We-Met confirmations, reports, and push-notification subscriptions.

We do not scrape, buy, or build profiles of people who have not signed up for Hitch. Any enrichment uses only data you provide about yourself (your own handle, your own photo). If a friend invites someone via an invite link, we store nothing about that person until they choose to join.

• To compute your Love Score and curate one strong match at a time.
• To generate plain-language “receipts” and an opening icebreaker for a match.
• To run safety features (blocking, reports, no-show handling).
• To send the notifications you’d expect (your drop, a new message, a date prompt).

We never sell your data, never share it with advertisers, and never use it to train third-party AI models.

Hitch uses AI to turn your interview answers into a structured profile, to optionally describe a photo you upload, and to write match receipts and icebreakers. This processing runs only to make and explain your matches. Your dossier is an input to our matching algorithm — it is never shown to other users.

• Your dossier and interview answers: visible only to the matching algorithm — never to other members.
• Your photos: stored in a private bucket and served through short-lived signed links only to you and a current matched partner.
• Matchmaker shortlists: a friend acting as your matchmaker sees a candidate only if that person opted in to matchmaker visibility, and never sees dossier detail.
• Identity in a match: revealed only through an actual match — never while browsing. Your “Top 5” surface is anonymized (scores and reasons, no names).
• Leaderboard: you can opt out, which also hides any public Cupid share card.
• Date selfies: visible only to the two of you and auto-deleted after 30 days; either person can delete instantly.

We use vetted infrastructure providers (for hosting, database, storage, and push delivery) strictly to operate Hitch, under contracts that prohibit using your data for their own purposes. We may disclose data if required by law.

You can delete your account anytime from Settings → Delete account. We permanently delete your dossier, photos, interview answers, messages, and invite tokens within 30 days. Records of completed matches (“Ships”) are anonymized rather than deleted, so a friend keeps credit for couples they made — without your identity attached. Date selfies auto-delete after 30 days regardless.

Edit or pause your profile, toggle matchmaker visibility, opt out of the leaderboard, block anyone (blocks are mutual and propagate everywhere), or delete your account — all from Settings.

Data is encrypted in transit. Access to your rows is enforced at the database level (row-level security), and photos are only ever reachable through expiring signed links.

We’ll update this page and the “last updated” date when our practices change. Questions or a deletion request? Email privacy@hitchapp.com.