Privacy Policy

Matcha ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and our website (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access the application.

1. Information We Collect

To provide a functional marketplace connecting service providers and clients, we collect several types of information.

A. Personal Data You Provide Voluntarily

• Account Credentials: Name, username, email address, date of birth and password are created when you register. We do not ask for or store a phone number.
• Profile Information: If you are a Service Provider ("Provider"), we collect business details, descriptions of services offered, rates, availability, and profile photos. If you are a Service Client ("Client"), we collect information necessary to book a service.
• Verification Data: Government-issued identification or business documentation if required to verify provider accounts.
• Payment Instructions You Publish: If you are a Provider and you require a deposit, we store the payment instructions you choose to add to your listing — such as a bank or e-wallet provider, account name, account number, and a payment QR image. You enter these yourself so Clients know where to send a deposit, and they are shown only to a Client with a booking on that service.
• Proof of Payment: If you are a Client and you upload an image of a deposit receipt, we store that image and the amount you entered, and share them with the Provider on that booking so they can confirm the deposit. A receipt image contains whatever is visible in the screenshot you upload, so please crop out anything you do not want the Provider to see.
• Addresses: The service and booking addresses you type in, including region, city or municipality, barangay, street and postal code.

B. Information Collected Automatically

• Device and Usage Data: IP address, device and operating system type, and the app version, build and update identifier of the copy you are running. Matcha does not include an advertising or analytics SDK, and does not build an advertising profile of you.
• Push Notification Token: If you allow notifications, we store the push token your device issues so we can send you booking and message alerts. You can turn notifications off at any time in your device settings.
• Location Data: Matcha does not access your GPS and does not collect precise geolocation. Location in the app is only the address you type in yourself when you set up a service, save an address, or book.

C. Payment Information

Matcha does not process payments. There is no checkout in the app, no payment gateway, and no card entry. We never collect, receive or store credit or debit card numbers, CVVs, online banking credentials, e-wallet log-ins or payment processor tokens, and we do not hold funds or act as an escrow agent.

Payment for a booking is arranged and settled directly between the Client and the Provider, outside the Service. The only payment-related information we hold is what a user types or uploads themselves: the payment instructions a Provider publishes on a listing, and the deposit receipt image and amount a Client uploads. Both are described in section A above.

Cash Payments: For bookings settled in cash between Clients and Providers, nothing is captured by the Service unless a user chooses to upload a receipt image.

2. How We Use Your Information

We use the collected data for specific, lawful purposes, including to:

• Facilitate account creation, user authentication, and profile hosting.
• Connect clients with nearby service providers based on location preferences.
• Manage bookings, record deposit confirmations between users, and send automated booking notifications.
• Provide customer support and resolve user-to-user disputes.
• Monitor app performance, diagnose bugs, and improve overall user experience.
• Comply with legal obligations and prevent fraudulent activity on the platform.

3. Data Sharing and Disclosure

We do not sell your personal data. We share your information only in the following scenarios:

• Between Users: To make the marketplace function, a provider’s business profile is visible to all users. When a booking is confirmed, the details needed to carry it out — such as name, the booking address, and any deposit instructions or receipt — are shared between the client and the provider.
• Service Providers: We share data with the vendors that run the Service for us: Supabase (database, authentication, file storage and realtime messaging), Expo (app distribution, over-the-air updates and push delivery), Google or Apple sign-in if you use them, Google Calendar if you connect it, and our email delivery provider. We do not use an analytics or advertising vendor, and we do not use a payment processor. These parties are contractually obligated to protect your data.
• Legal Requirements: We may disclose data if required by law, subpoena, or to protect the safety, rights, and property of our users or the public.

4. Your Rights and Data Control

We believe you should have complete control over your personal information. Depending on your location, you have the following rights:

• Access and Update: You can view and edit your profile data at any time directly through the app’s account settings.
• Revoke Permissions: You can withdraw consent for push notifications, photo library access, or the camera at any time via your mobile device settings.
• Data Portability: You may request a copy of the personal data we hold about you.

5. Account and Data Deletion (Google Play Compliance)

In compliance with Google Play requirements, we provide a straightforward way to delete your account and all associated data.

• In-App Deletion: You can trigger permanent account deletion inside the app by navigating to Settings > Account > Delete Account.
• Timing: Deletion is immediate. When you confirm in the app we erase or anonymize your personal data in our active databases straight away — there is no waiting period and no cancellation window — except where retention is legally mandated (such as tax or financial transaction history). Copies may persist briefly in encrypted backups.
• Lost access: If you cannot sign in, see our Data Deletion page. We cannot delete an account from the website; support will help you regain access so you can complete the deletion in the app.

6. Security of Your Data

We implement commercial-grade administrative, technical, and physical security measures to protect your personal information. However, please remember that no method of transmission over the internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.

7. Children’s Privacy

Our Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children. If we discover that a child under 18 has provided us with personal information, we will delete it immediately.

8. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top. For material changes, we will provide a prominent notification inside the app before the changes take effect.

9. Contact Us

If you have any questions, concerns, or data requests regarding this Privacy Policy, please reach out to us at:

Email: hello@matchaservice.com