Privacy Policy
This Privacy Policy explains how Reach and
Reach Supporter (the “Apps”, package names
com.reachapp.requester and com.reachapp.supporter)
handle information when you use our Android apps and related services.
Reach is a private support tool for chatting with someone you trust and using grounding / calm features. It is not therapy, medical care, or an emergency service. If you cannot stay safe, contact local emergency or crisis support.
1. Who is responsible
The Apps are operated by Thomas van Otterloo (“we”, “us”). Contact for privacy questions: [email protected].
2. Information we process
Depending on how you use Reach, we may process:
- Account & pairing data — identifiers and credentials needed to create or join a private Reach household / pair (for example access tokens and cryptographic keys stored on your device).
- Messages & media you send — chat text, images/photos, and similar content you choose to share with your linked person. This content is delivered through our backend so the other person can receive it.
- Push notification tokens — device tokens from Google Firebase Cloud Messaging (FCM) so we can notify you about messages or important in-app events.
- App & connection data — basic technical information needed to run the service (for example app version, connection status, and similar operational logs).
- Optional local preferences — settings and reminders stored on your device.
- Approximate location (IP) — your IP address may be processed by our servers or hosting providers as part of normal network requests (not GPS, not for advertising).
We do not sell your personal data.
We do not use third-party advertising SDKs in the Apps. We do not intentionally collect precise location for advertising or tracking.
3. How we use information
- To provide chat, notifications, calm/grounding tools, and games between linked users
- To keep sessions secure and prevent abuse
- To operate, maintain, and improve reliability of the service
- To comply with law when required
4. Legal bases (EEA/UK where applicable)
Where GDPR/UK GDPR applies, we process data based on:
- Contract — to provide the Reach service you requested
- Legitimate interests — security, abuse prevention, and basic operations
- Consent — where required (for example certain notification permissions on Android)
5. Sharing
We share information only as needed to run Reach:
- Your linked person — content you send is meant for them
- Service providers — infrastructure needed to host the Apps’ backend and deliver push notifications (for example Google Firebase Cloud Messaging). These providers process data on our instructions.
- Legal requirements — if we are required to disclose information by law or to protect someone’s safety
We do not share your data with advertisers.
6. Storage & security
- Credentials and keys on the device are stored using Android secure storage where available.
- Communication with our servers uses encrypted transport (HTTPS / modern TLS).
- No method of transmission or storage is 100% secure; please use a strong device lock and only pair with people you trust.
7. Retention
We keep account, message, and media data for as long as needed to provide the service to your household / pair, or until deletion is requested and completed, unless a longer period is required by law or for security / abuse prevention.
8. Your choices & rights
- You can stop using the Apps and revoke notification permission in Android settings.
- You can ask us to access, correct, or delete personal data we hold about you by emailing [email protected].
- If you are in the EEA/UK, you may also have rights to restrict or object to certain processing, and to lodge a complaint with your local supervisory authority.
9. Children’s privacy
Reach is not directed to children under 13 (or the minimum age required in your country). Do not use the Apps if you are under that age.
10. International transfers
Our servers or subprocessors may process data in countries other than yours (including the United States for services such as Google Firebase). Where required, we rely on appropriate safeguards for such transfers.
11. Changes
We may update this Privacy Policy. We will change the “Last updated” date above and, when changes are material, provide additional notice in the Apps or on this page when appropriate.
12. Contact
Privacy questions: [email protected]
Operator: Thomas van Otterloo