Privacy Policy

Last updated: 7 July 2026

Go Dutchie ("we", "us") helps you find people in your contacts who use the same apps and subscriptions so you can share costs and referrals. This policy explains what we collect, why, and your choices. Questions? support@godutchie.app.

Information we collect

Account details — your email address, display name, and profile picture. If you choose to register or log in using Google Sign-In, we collect and store your Google account email address, display name, and profile picture URL. This data is used solely to authenticate your identity, create and manage your Go Dutchie account, and display your name and profile picture to other users you choose to match and share with. We do not access or request any other Google user data.
Phone number — used to match you with your contacts. It is hashed (a one-way cryptographic digest with a secret key) so it can be compared without being readable.
Contacts — with your permission, we read your device contacts on your device to find matches. Contact phone numbers are hashed locally and only the hashes are compared. We do not upload or store your contacts' names or readable numbers.
App usage you choose to share — the apps you mark as "My Apps", referral links you add, and app suggestions/edits you submit.
Photos / camera — only when you choose an app or profile image; used solely to set that image.
Push notification token — a device token (via Firebase Cloud Messaging) so we can notify you, e.g. when your app suggestion is approved.
Basic technical data — device platform and app version needed to deliver notifications and run the service.

How we use it

To authenticate you and keep your account secure.
To match you with contacts who use the same apps, using hashed values.
To power the community app catalog and approvals.
To send you notifications you've enabled.

How matching protects your contacts

Matching is designed so raw contact data never leaves your phone in readable form. Phone numbers (yours and your contacts') are converted to SHA-256 hashes with a secret key before any comparison, so we can find overlaps without seeing the underlying numbers.

Service providers

We share data only with providers that run the service on our behalf:

Supabase — authentication and database backend.
Google Firebase — push notifications and this website.
Google & Apple — to facilitate secure third-party authentication (OAuth) when you sign up or log in using your Google or Apple accounts.

We do not sell your personal information.

Google API User Data Policy Compliance

Go Dutchie's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We only access basic profile information (email, display name, profile picture) using secure OAuth 2.0 protocols, and do not use this data for advertisements, targeting, or transfer it to third-parties outside of our core authentication services.

Retention & deletion

We keep your data while your account is active. You can request account and data deletion at any time by emailing support@godutchie.app; we will delete your account data within 30 days, except where retention is legally required.

Your choices

Contacts, camera, photos, and notifications are permission-based — you can grant or revoke them in your device settings.
You can hide apps from your profile or remove referral links in the app.

Children

Go Dutchie is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect their data.

Changes

We may update this policy; material changes will be reflected by the "Last updated" date above.

Contact

Go Dutchie — support@godutchie.app