The short version: your pack, not our photo album

Privacy Policy

Last updated: July 15, 2026

1. Who we are

Hatch is provided by FOF Labs LLC ("Hatch," "we," "us," or "our"). This policy applies to the Hatch iPhone app, Messages extension, website, generation service, account features, and support communications.

2. Information we process

Depending on how you use Hatch, we may process:

• Source photos. The photo you select and confirm for a sticker-generation request. Before upload, the app resizes the image, removes metadata, and shows you the image that will be sent.
• Sticker content and pack details. Generated sticker images, a pack name you provide, generation status, and the identifiers needed to deliver the completed pack to the correct installation.
• Optional account information. If you sign in, we may process your email address, display name, username, Apple-provided account identifier, account status, policy-acceptance versions, and account creation time.
• Authentication and security information. Session and installation tokens, token hashes, Sign in with Apple verification data, email-verification challenges, App Attest keys and assertions, rate-limit records, request timestamps, and network information needed to prevent abuse and unauthorized paid generation.
• Operational information. App version, build number, request and job identifiers, provider request identifiers, job timing, file sizes, retry counts, terminal status, failure codes, delivery acknowledgements, and other diagnostics needed to run and secure the service. We do not place photo bytes or credentials in application logs.
• Support messages. If you contact us, we receive your message, email address, and any screenshots or diagnostics you choose to send.

3. What stays on your device

• Your installed sticker library. Completed packs, favorites, hidden stickers, pack order, and recent-use information are stored locally in the App Group shared by Hatch and its Messages extension.
• Your photo library. Hatch does not upload your library or silently upload a random result. Candidate scanning and rejection happen on device. Only the source image you preview and confirm is sent.
• Local preferences. Onboarding state, display settings, and the recent-photo cooldown used to avoid repetitive random choices stay on device.

Signing in does not currently upload, merge, back up, or restore the local sticker library. Deleting the app can remove locally installed packs that have not been saved elsewhere.

4. How we use information

We use information described in this policy to:

• Create and deliver the sticker pack you requested.
• Restore an interrupted generation or download.
• Create and secure optional accounts and sign-in sessions.
• Enforce generation limits, control provider spend, and prevent abuse.
• Diagnose failures and improve the reliability of Hatch.
• Respond to support, rights, safety, and account requests.
• Comply with law and enforce our Terms of Service.

5. Photo generation and service providers

After you confirm a source photo, Hatch sends it through our generation service to OpenAI's image API to create your sticker artwork. OpenAI processes that content as our service provider. OpenAI states that API data is not used to train its models by default. Under OpenAI's standard API controls, customer content may be retained in abuse-monitoring logs for up to 30 days. OpenAI documents those controls in its API data-usage policy.

We may also use providers for infrastructure hosting, security, email delivery, website hosting, and customer support. These providers may process information only as needed to provide their services to us and under their applicable agreements.

Apple processes photo-library access, App Attest, Sign in with Apple, Messages, App Store downloads, and in-app purchases under Apple's own terms and privacy practices.

6. Retention and deletion

• Source and raw generation bytes. Hatch deletes these when a job succeeds, fails, is blocked, or expires. We do not keep your source photo as a permanent server gallery.
• Delivery files. Hatch deletes server delivery bytes after the app verifies the complete pack and acknowledges delivery. Unacknowledged files expire after a bounded fallback period, currently 24 hours.
• Job and security records. We may retain limited job, request, quota, spend, safety, and abuse-prevention metadata for as long as reasonably needed to operate and protect the service or comply with law.
• Account information. We retain account information while the account is active and as needed for security, disputes, legal obligations, and account deletion.

To request account or personal-information deletion, email hi@foflabs.com from the email on the account when possible. Account deletion does not automatically erase packs already stored locally on your devices. Delete those packs in Hatch or remove the app if you also want to clear local data.

7. No sale or advertising tracking

We do not sell or rent personal information. We do not use source photos or sticker packs for third-party advertising. Hatch does not include ad networks or cross-app tracking SDKs.

This website does not add analytics cookies or advertising cookies. Hosting and security providers may process standard technical logs needed to serve and protect the site.

8. Children's privacy

Hatch is not directed to children under 13, and children under 13 may not create an account. If we learn that an under-13 child provided personal information through an account, we will delete or disable it. Contact hi@foflabs.com if you believe this occurred.

9. Your choices and rights

You choose which photo to submit, may stop before confirmation, may delete packs from the local library, and may sign out of an optional account. Depending on where you live, you may have rights to access, correct, delete, or export personal information we hold. Send requests to hi@foflabs.com.

10. Security

We use safeguards designed for the information Hatch handles, including encrypted transport, Keychain storage on iPhone, hashed server tokens, bounded upload and image limits, App Attest request verification, scoped delivery authorization, rate limiting, and deletion maintenance. No transmission or storage method is perfectly secure.

11. Changes to this policy

If this policy changes, we will update the date above. We will provide additional notice when required, including before a material change that alters how source photos or account information are used.

12. Contact

Questions about privacy at Hatch may be sent to hi@foflabs.com. Your use of Hatch is also governed by our Terms of Service.