Last updated: March 2026
Privacy Policy
PatchUp is a personal journal for couples. We take privacy seriously — not because we have to, but because the stuff you write here is genuinely sensitive. Here's exactly what we do and don't do with your data.
The short version
- →We store your fight entries in a secure database.
- →Only you can read your entries — they're filtered by your account ID on every request.
- →We don't sell your data. Ever.
- →We don't train AI models on your entries.
- →We don't share your data with third parties for advertising.
- →You can delete your account and all your data at any time.
What we collect
When you create an account, we collect your name and email address. This is used to identify your account and nothing else.
When you log a fight, we store everything you enter: the title, trigger, category, intensity, resolution, takeaways, notes, and tags. This data is associated with your account ID.
We do not collect location data, device identifiers, or behavioral analytics beyond basic server logs (IP address, request path, timestamp) which are retained for up to 30 days for security purposes.
How we store it
Your data is stored in a PostgreSQL database hosted on Supabase (AWS, ap-northeast-1 region). Data is encrypted at rest and in transit (TLS).
Access to the database is restricted to server-side API routes only. The database service role key is never exposed to the browser. Your fight entries are filtered by your user ID on every query — no other user can access your data through our API.
As the operator of PatchUp, we (the developer) have administrative access to the database. We will not read your entries except when required to investigate a security incident or comply with a legal obligation.
What we don't do
We do not sell, rent, or trade your personal data to any third party.
We do not use your fight entries to train machine learning models.
We do not run advertising. There are no ad networks, tracking pixels, or retargeting scripts on PatchUp.
We do not share your data with analytics companies. We use no third-party analytics (no Google Analytics, no Mixpanel, etc.).
Third-party services
PatchUp uses the following third-party infrastructure:
- Supabase — database hosting (your data lives here)
- Vercel — application hosting (your requests go through here)
Both services have their own privacy policies and security certifications. We do not pass your fight content to any other third-party service.
Your rights
You can delete your account at any time from your account settings. This will permanently and irreversibly delete all your fight entries, account data, and sessions.
You can export your data by contacting us. We'll send you a JSON export of all your entries within 7 days.
If you have questions or requests about your data, email us at privacy@patchup.app.
Changes to this policy
If we make material changes to this policy, we'll notify you by email and update the “last updated” date at the top. Continued use after changes constitutes acceptance.