Privacy Policy

Who this policy covers

This policy covers the Patches app and getpatches.app. For now, the service identifies its operator as Patches B.V. — Netherlands. The operating company has not yet been incorporated, so this wording is a working product identity and not a representation of completed incorporation. Registration and address details will be added only when confirmed.

Privacy contact: privacy@getpatches.app.

What Patches stores

Connected accounts

Gmail and Outlook are email connections. Google Drive and OneDrive are file connections. Approving one service does not automatically approve every service from Google or Microsoft. Patches requests access for the job you selected; the provider permission screen shows the access being requested.

You can disconnect in Patches and revoke access in your Google or Microsoft connected-app settings. Disconnecting stops future access. It does not automatically delete information already imported into Patches.

How information is processed

Patches processes your content to provide the patch you chose: for example, finding recurring charges in relevant email, extracting document details, organising a health timeline or scheduling reminders. Some extraction uses AI providers. Content needed for that task may be sent to those providers. Patches does not use your content to train its own models.

Documents and sensitive information

Document Vault may contain identity, insurance and other important documents. Health Record may contain health information about you or family members. Only add information you are entitled to keep, check sharing carefully and avoid relying on Patches as the only copy. Health Record organises information; it does not give medical advice, diagnosis or treatment.

Original files and disconnection

When you import from your device or a connected drive, Patches may retain a copy and extracted details. The original remains in its original source unless Patches explicitly tells you it was moved. Disconnecting a source does not remove the imported copy or extracted information from Patches.

Sharing and service providers

Patches does not sell personal information or share it with advertisers. Information is shared only with service providers needed to host, operate, send messages, deliver notifications and process the patch you asked for; with people you deliberately share with; or where legally required.

The marketing website uses OpenAI Sites and Cloudflare infrastructure. The app’s hosting, AI, email and notification providers need final contractual confirmation before a complete processor list and international-transfer description can be published.

Retention, export and deletion

Patch data remains while your account or patch remains active. Where the app offers export, export anything you want to keep before deletion. Deleting a patch or closing your account requests removal from live systems; routine backups and technical logs expire on operational schedules. Exact backup, log and processor retention periods still require confirmation and are not invented here.

Your choices and rights

You may ask for access, correction, deletion, restriction, objection or a portable copy where applicable. You can withdraw a connection or notification permission at any time. Contact privacy@getpatches.app. You may also complain to the Dutch Autoriteit Persoonsgegevens or your local supervisory authority.

Cookies

The app uses cookies needed to sign you in and operate shared access. The marketing website does not include advertising pixels or third-party analytics in its own code. Hosting infrastructure may process technical request data to deliver and protect the site.

Children

Accounts are not intended for people under 16. An adult may add information about a child to a family patch; that information is covered by this policy. Only do so where you have appropriate authority.

Security

Patches uses HTTPS and protects connected-account credentials at rest. No online service is perfectly secure. Patches makes no specialised healthcare, privacy or regulatory certification claim.