Privacy Policy

1. Introduction

Welcome to Matcha (“we,” “our,” or “us”). We are committed to protecting your privacy and personal health information. This Privacy Policy explains what information our mobile application Matcha (the “App”) handles, where it is stored, and who can access it.

Please read this Privacy Policy carefully. By using the App, you agree to the handling of information as described in this policy.

2. Information the App Handles

2.1 Data You Enter (Stored on Your Device)

To work, the App stores:

• Caffeine logs (drink, size, caffeine amount, date and time)
• Bedtime, caffeine sensitivity and bedtime caffeine target
• Your body weight, only if you turn on weight-based calculation
• Your usual drinks, favorites and custom drinks
• Reminder and notification preferences

Sleep scores, tips and forecasts are calculated on your device from this data.

Important: This data is stored in the App's private storage on your device (using Apple's SwiftData), which iOS encrypts at rest with Data Protection. It is NOT sent to us — we don't operate servers that receive your caffeine logs, sleep data or any health information.

2.2 iCloud Sync

If iCloud sync is active for Matcha on your devices, your Matcha data is synced through your own private iCloud database using Apple's CloudKit. This data is:

• Stored by Apple under your Apple Account and protected by iCloud security
• Only accessible to you through your Apple Account
• NOT accessible to Wizlab or any third parties

2.3 Apple Health (Optional, Only With Your Permission)

If you connect Apple Health, Matcha will:

• Write your caffeine intake to Apple Health (free)
• Read your sleep data (sleep analysis) from Apple Health to compare your nights with your caffeine (Matcha Pro)

Matcha does not read any other Health data. Health data is processed on your device and is never sent to us or to RevenueCat, and is never used for advertising or marketing. Apple Health data is governed by Apple's privacy policy and protected by your device's security (Face ID, Touch ID, passcode). You can change or revoke Matcha's Health access at any time in iOS Settings.

2.4 Apple Watch, Widgets, Live Activity and Siri

• Data is synced between your iPhone and Apple Watch using Apple's WatchConnectivity and stays on your devices
• Widgets and the Live Activity read a summary (such as your cutoff time) from storage shared on your device
• When you use Siri or Shortcuts with Matcha, the request is handled by Apple and by the App on your device; Matcha does not send it to us

2.5 Notifications

Reminders (such as your cutoff reminder) are local notifications scheduled on your device. The App does not use push notification servers.

2.6 Purchases and Subscription Status (RevenueCat)

Payments are processed entirely by Apple (App Store). We do NOT have access to your payment details, credit card information, or Apple Account credentials.

To manage Matcha Pro, the App uses RevenueCat. RevenueCat receives:

• A random, anonymous app user ID created by the App (not your name, email address or Apple Account)
• Your App Store purchase receipts and transaction details for Matcha Pro (for example, the plan, purchase, trial, renewal and expiration dates, price and currency)
• Technical information sent with its requests: device model, iOS version, app version, preferred languages, App Store country and Apple's identifier for vendor (a per-developer device identifier). Like any web service, RevenueCat's servers also receive your IP address.

The App does not send RevenueCat any custom attributes, contact details, caffeine logs or health data. We can view these anonymous subscription records in RevenueCat's dashboard to manage subscriptions and answer support requests.

2.7 Brand Logos

When you browse drink brands, the App downloads brand logos from logo.dev and, as a fallback, from Google's favicon service. These requests contain only the brand's website address (for example, starbucks.com) and, like any web request, your IP address. Downloaded logos are cached on your device.

2.8 Support Emails

If you email us, we receive your email address and message and use them only to reply to you.

2.9 What We Don't Collect

• No account: the App never asks for your name, email or phone number
• No location, contacts, photos, camera or microphone access
• No advertising identifier (IDFA) and no tracking across apps or websites
• No analytics, advertising or crash-reporting SDKs

If you choose to share analytics with app developers in iOS Settings, Apple may provide us with anonymized crash reports and usage statistics under Apple's privacy policy.

3. How We Use Information

Information is used only to:

• Provide the App's features on your device
• Calculate your caffeine levels, cutoff time and sleep predictions
• Generate sleep scores and personalized insights (on your device)
• Unlock, restore and manage your Matcha Pro access
• Detect and fix technical issues
• Respond to your support requests

We do NOT sell your data, and we do NOT use your health data for advertising, marketing, or any purpose other than providing the App's core functionality to you.

4. Data Storage and Security

Your caffeine logs and settings are:

• Stored on your device and encrypted at rest by iOS
• Protected by your device passcode, Face ID or Touch ID
• Synced to your private iCloud database only if iCloud sync is active, and included in your device backups according to your backup settings
• Deleted from your device when you delete the App (copies in iCloud or in backups remain until you delete them)

5. Third-Party Services

5.1 RevenueCat

We use RevenueCat to manage subscriptions and in-app purchases, as described in section 2.6. For more information, see RevenueCat's Privacy Policy.

5.2 Apple Services

The App uses the App Store (StoreKit) for purchases, HealthKit for Apple Health, CloudKit for iCloud sync, WatchConnectivity for Apple Watch, WidgetKit and ActivityKit for widgets and the Live Activity, and App Intents for Siri and Shortcuts. These services are governed by Apple's privacy policy.

5.3 Logo Services

Brand logos are downloaded from logo.dev and Google's favicon service, as described in section 2.7. See Google's Privacy Policy for how Google handles such requests.

5.4 No Analytics or Advertising

Matcha does NOT use any analytics or advertising SDKs (no Google Analytics, Firebase Analytics, Mixpanel, Amplitude, ad networks, etc.). We prioritize your privacy over usage metrics.

6. Your Rights and Choices

You can:

• Access: View all your data in the App
• Delete: Delete individual drinks in the App, or remove all your data by deleting the App and, if you use iCloud sync, deleting Matcha's data from your iCloud storage in iOS Settings
• Control Apple Health: Connect or disconnect Apple Health, and revoke Matcha's Health permissions in iOS Settings at any time
• Control notifications: Turn reminders off in the App or in iOS Settings
• Subscription records: Contact us to ask for the anonymous subscription records kept by RevenueCat to be deleted; we may need details of your purchase to find them

Depending on where you live, you may have additional rights over your personal data. To exercise them, contact us using the details below.

7. Children's Privacy

The App does not require an account, and your logs are stored on your device (and in your own iCloud, if iCloud sync is on). We do not knowingly collect personal information from children. If you believe a child has sent us personal information, contact us and we will delete it.

8. Health Disclaimer

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last updated” date.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us:

• Email: supanat0245@gmail.com
• Website: https://wizlab.app