Privacy Policy

Effective as of May 22, 2026

Introduction

Welcome to OUCH MATCH (“Platform”). This Platform is operated by OUCH MATCH, LLC (“OUCH MATCH,” “we,” “our,” or “us”), a Florida Limited Liability Company. This policy describes how we collect, use, and safeguard the information you provide when using our informational website and our mobile application. We reserve the right to update this Statement periodically, and any such updates will be posted here.

Please read this policy carefully. By accessing or using this Platform, you agree to this Privacy Policy. If you do not agree with our policies and practices, your choice is not to use our Platform.

MEDICAL DISCLAIMER

OUCH MATCH IS NOT A MEDICAL PROVIDER. The Platform does not provide medical advice, professional diagnosis, opinion, treatment, or services to you or any other individual. The information provided on this Platform —including recovery stories, blog comments, and AI-generated insights—is for informational and motivational purposes only. It is not a substitute for professional medical advice or a consultation with a healthcare professional.

If you believe you have a medical emergency, call your doctor or 911 immediately. Never disregard professional medical advice because of something you have read on OUCH MATCH.

Definitions

To help you understand this policy, we use the following terms:

Personal Information (or Personal Data): Information that identifies or relates to a particular consumer (e.g., email, age, gender, location).
Sensitive Data: Information regarding your health, medical conditions, or emotional state.
Processing: Any operation performed on personal data, such as collection, storage, or analysis.
Service Providers: Third-party companies (like cloud hosts or payment processors) that help us run the App.
AI Content: The text prompts you enter into the AI assistant and the responses generated by the AI.

What Information About You Do We Collect?

User-Provided Data

Account Information: We may collect your name, email address, age, gender, general location.
Sensitive Recovery Data: Because we are a recovery-focused app, you may provide information regarding your physical health, such as the type of injury (your "ouch part"), surgery details, and daily check-ins regarding pain levels, mobility, mood, and swelling. We treat this as "Sensitive Personal Information" and we process this data based on your explicit consent in accordance with applicable data protection laws. Recovery Journals & Goals: We gather data you enter into goal-tracking fields or wellness logs.
Symptom Tracking and Reports. Our App may allow you to track symptoms and generate reports based on the information you provide. These reports are created using the data you enter into the App and are designed to help you monitor your progress over time. Reports generated by the App do not include direct identifiers such as your name or contact information. However, the information used to generate these reports may still be associated with your account or device. We treat this information in accordance with this Privacy Policy. We recommend that you avoid including unnecessary personal or sensitive information when using these features.
AI Coach (Optional Feature). We offer an optional AI Coach designed to provide personalized recovery tips and support. This feature is disabled by default and requires your explicit consent before it can be activated. When you first access the AI Coach, you will be shown a clear disclosure and must actively opt in before the feature is enabled. If you choose to use the AI Coach, we collect the text prompts and questions you submit ("AI Assistant Inputs"). These inputs are sent to a third-party AI provider — which may include OpenAI, Anthropic, or Google, depending on platform configuration — solely to generate a response. Your inputs are used solely to generate responses. We configure our AI providers to limit use of your data for model training where possible. You may opt out of any permitted data use through your settings. You have the right to opt out of this at any time by adjusting your settings under Settings > Privacy > AI Preferences, or by contacting us at info@ouchmatch.com. AI-generated responses are based on patterns in data and are provided for informational purposes only. They do not constitute medical advice and should not replace consultation with a qualified healthcare professional. Your controls: Disable the AI Coach at any time via Settings > Privacy > AI Preferences; Delete your conversation history at any time in the same location; Opt out of AI model training via settings or by emailing info@ouchmatch.com
AI Data Processing and Third‑Party Sharing. When you choose to use the AI Coach in OUCH MATCH, certain information you provide may be processed by third‑party AI services. This may include your messages, daily check‑ins (such as symptoms, mood, and pain levels), recovery goals and steps, journal entries, and to‑do items (“AI Assistant Inputs”). Your AI Assistant Inputs are securely routed through Base44’s internal AI service and may be processed by external AI providers, including OpenAI (GPT models) and Google (Gemini models). These providers use the data solely to generate responses within the app. We configure our AI providers to limit use of your data for model training where possible. Why We Share This Data Your data is shared only to provide personalized AI assistance, generate insights, support your recovery progress, and improve the quality of the AI responses. Your Choice and Control Use of the AI Coach is optional. You must provide explicit consent before any data is sent to AI providers. You may withdraw your consent at any time in Settings > Privacy > AI Preferences, and the AI Coach will be disabled. When disabled, no data will be transmitted to AI providers. Data Protection Base44, OpenAI, and Google adhere to data protection standards that are equal to or stronger than those described in this Privacy Policy. These providers are contractually required to safeguard your information and use it only for the purposes we specify.

User Interactions (Blog & Feedback): We collect information that you post as comments on our blog or when you submit feedback to us. Please be aware that blog comments are public; do not share information you wish to keep private in these areas.
Information Collected Automatically
As you navigate and interact with our Platform, we may automatically collect certain information about your device and usage of the services. This may include: Usage Information: Details about how you use the Platform, such as pages or features you access, the frequency and duration of your activity, and interactions with content. Device Information: Information about your device and internet connection, including your IP address, device type, unique device identifiers, operating system, browser type, and application version. Location Information: General location data derived from your IP address, such as country-level location. We collect this information to help us understand usage patterns, improve performance, troubleshoot issues, and enhance the overall user experience.

Third-Party Information

In some cases, we may receive certain Personally Identifiable Information from you about a third party. For example, as part of our registration process, you may provide the email address of a third party. If you submit any Personally Identifiable Information about another individual to us, you are responsible for making sure that you have the authority to do so and to allow us to use their Personally Identifiable Information in accordance with this Privacy Policy.

Information We Do NOT Collect

Phone Numbers: We do not currently collect or store user phone numbers.
Precise Geolocation: We do not track your exact GPS coordinates.

How We Use Your Information

We use the information we collect about you or that you provide us, including Personal Information (or Personal Data), for the following purposes:

To present, operate, and maintain our Platform and its content
To provide you with personalized recovery insights, recommendations, and motivational content
To fulfill any purpose for which you provide the information
To communicate with you, including sending service-related updates, notifications, and changes to our Platform or services
To enable your participation in interactive features, such as our AI assistant and comments
To monitor, analyze, and improve the performance, functionality, and user experience of the Platform
To detect, prevent, and address technical issues, security incidents, or fraudulent activity
To comply with legal obligations and enforce our terms, policies, and rights

Third-Party Sharing

We share your personal data with third parties only to the extent necessary to provide and improve the Platform and Services. We ensure that any third-party service providers we engage adhere to strict data protection standards and use your information only for the purposes specified by OUCH MATCH.

Service Providers and Platform Operations

We use third-party partners to perform essential functions for the Platform. These providers receive your data only to the extent needed to perform their specific tasks:

Cloud Hosting and Storage: Your user-generated content, profile details are stored on secure servers managed by third-party cloud hosting providers.

Analytics and Performance: We use tools like Google Analytics and Firebase to monitor usage trends and app stability. This information is pseudonymized and does not include identifiable health details.
Payment Processing: Billing details for subscriptions are handled by third-party services like Stripe, Apple In-App Purchase, or Google Play Billing. These processors handle sensitive data securely; we receive only a transaction confirmation or receipt.
Communications: We may use third-party services for email delivery (e.g., SendGrid) or automated account messages.
Visibility: Content you post publicly in comment section may be visible to other users.
Moderation: We may use third-party moderation tools to monitor for abuse, such as spam or hacking, to protect user safety and service integrity.

How We Handle and Share Your Information

We use and share your information only as necessary to operate, improve, and protect our services. Specifically:

Service Providers: We may share your information with trusted third-party vendors who perform services on our behalf, such as hosting, analytics, and customer support. These providers are required to safeguard your data and use it only for the purposes we specify.
Legal Compliance: We may disclose your information when required by law or in response to valid legal requests, including subpoenas, court orders, or other legal processes.
Protection of Rights and Safety: We may share information when necessary to protect the rights, property, or safety of our users, the public, or OUCH MATCH.
Business Transfers: If Ouch Match is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction.

We do not sell your personal information and have not done so in the past 12 months.

Data Storage Location

Your information is stored and processed on secure servers located in the United States and other jurisdictions where our service providers operate. We implement reasonable administrative, technical, and organizational safeguards to protect your information in accordance with applicable laws and industry standards.

Your Privacy Rights

Depending on your state or country of residence, you may have certain rights regarding your personal information. These rights are described below by region.

U.S. State Residents

If you reside in California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, or other states with comprehensive privacy laws, you may have the following rights:

Right to Know: You have the right to know about our personal information processing practices — including the categories we collect, their sources, how we use them, and who we share them with — at or before the point of collection. You may also request the specific practices that apply to your personal information over the preceding 12 months.
Right to Access: You have the right to request a copy of the specific personal information we have collected about you, in a portable format that you can transmit to another entity. This right may be exercised no more than twice per calendar year. We will respond within 30 days of a verified written request.
Right to Correct: You have the right to request that we correct any inaccurate or incomplete personal information we hold about you.
Right to Delete: You have the right to request that we delete your personal information. Please note that certain exceptions may apply under law — for example, where retention is necessary to comply with a legal obligation, complete a transaction, or serve certain internal business purposes.
Right to Opt-Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information with third parties for monetary or non-monetary benefit, including for targeted or cross-contextual behavioral advertising. To opt out, email us at info@ouchmatch.com or use the Global Privacy Control (GPC) signal on your browser, which we recognize and honor.
Right to Limit Sensitive Information: You have the right to limit our use of your sensitive personal information — such as health data, government identifiers, login credentials, race, sexual orientation, religion, geolocation, genetic information, or union membership — to only what is necessary to provide our services. To exercise this right, email us at info@ouchmatch.com.
Right Not to Be Discriminated Against: You have the right not to be discriminated against for exercising any of the above rights. We will not deny you services, charge you a different price, or provide a lesser quality of service because you exercised your privacy rights.
Right to Appeal: If we decline to act on your request, residents of Colorado, Montana, Oregon, Tennessee, Texas, Virginia, and most other states listed above (excluding California and Utah) have the right to appeal our decision by contacting us at info@ouchmatch.com with a reference to our original response.
California — Third-Party Direct Marketing (Cal. Civil Code § 1798.83): California residents may request information about personal information we have shared with third parties for their own direct marketing purposes during the preceding calendar year. To make this request, contact us at info@ouchmatch.com.

EEA and United Kingdom Residents (GDPR)

If you reside in the European Economic Area or United Kingdom, you have the following rights under applicable data protection law:

Right to Know: You have the right to be informed about how we collect and use your personal information, as described throughout this policy.
Right to Access: You may request a copy of the personal information we hold about you.
Right to Correct: You may request that we correct inaccurate or incomplete information.
Right to Delete: You may request that we delete your personal information, subject to certain legal exceptions.
Right to Restrict Processing: You may ask us to suspend or restrict processing of your personal information where: (a) you challenge its accuracy; (b) we no longer need it but you require it to establish, exercise, or defend a legal claim; or (c) you have objected to our use of it and we are verifying whether our legitimate grounds override your objection.
Right to Object to Automated Decision-Making: You have the right not to be subject to decisions based solely on automated processing — including profiling — that produce legal or similarly significant effects on you.
Right to Withdraw Consent: Where we rely on your consent as the legal basis for processing, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal. Withdrawing consent may limit your access to certain features.
Right to Lodge a Complaint: If you believe we have not complied with applicable data protection law, you may lodge a complaint with your local supervisory authority.

How to Exercise Your Rights

To exercise any of the rights described above, contact us at info@ouchmatch.com with the subject line "Personal Information Privacy Request" and include your name, email address, and a description of your request in the body of the email. You may also authorize an agent to submit a request on your behalf. To protect your privacy, we may need to verify your identity before processing any request, even when submitted through an authorized agent. If we have shared your personal information with third parties and you subsequently request correction, deletion, or restriction of that information, we will notify those third parties where reasonably practicable. However, we are not able to audit third parties to confirm that changes have been made on their end. We will respond to all verified requests in accordance with applicable law.

Legal Basis, Data Retention, and Security

We process your personal information in accordance with applicable data protection laws, including the following legal bases:

Contractual Necessity: We process your information where necessary to provide our services, including:

Create and manage your account
Provide access to the Platform, including AI features
Deliver customer support and essential service communications

Legitimate Interests: We process certain information to support our legitimate business interests, including:

Maintain platform security and prevent fraud
Moderate content and ensure community safety
Analyze usage trends and improve functionality
Operate, maintain, and optimize our services

We ensure that such processing is balanced against your rights and freedoms.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this policy, including providing our services and complying with legal obligations. If your account remains inactive for five (5) years, we will delete your personal information. If you delete your account, we will remove your personal information from our active systems within 30 days, unless retention is required or permitted by law.

INTERNATIONAL DATA TRANSFERS

OUCH MATCH is based in the United States. If you are accessing the Platform from the EU or UK, please note that your data will be transferred to and processed in the U.S. We use Standard Contractual Clauses (SCCs) to ensure your data receives the same level of protection required under the GDPR.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to improve your experience on the Platform, analyze usage patterns, and support platform performance.

What Are Cookies? Cookies are small files stored on your device that help us recognize you, remember your preferences, and understand how you interact with the Platform.

How We Use Cookies and Tracking Technologies We use these technologies for the following purposes:

To improve website functionality and performance
To analyze user behavior and enhance the overall experience
To remember your preferences and settings
To provide relevant advertisements, where applicable

Google Analytics and Firebase We use Google Analytics and Google Analytics for Firebase, analytics services provided by Google, Inc. These tools help us analyze how users interact with the Platform, compile reports on user activity, and improve our services. Google may collect information such as your time of visit and whether you are a returning visitor. Data collected through these tools is transmitted to and stored by Google, and is subject to Google's Privacy Policy. To learn how to opt out of Google's analytics tracking, visit Google's Partner Services page.

Managing Cookies: You can disable or manage cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of some features on the Platform.

Law Enforcement

We may disclose data to law enforcement agencies or other governmental bodies when required by law or in response to valid legal requests. This includes compliance with legal obligations, such as subpoenas, court orders, or other lawful processes. We may also disclose information when necessary to protect the rights, property, or safety of our users, the public, or OUCH MATCH. We are committed to protecting user privacy and will only disclose information to law enforcement when legally obligated to do so.

Global Privacy Control (GPC) and Opt-Out Signals

Global Privacy Control (GPC) and Opt-Out Signals OUCH MATCH respects your right to privacy and specifically recognizes and honors Global Privacy Control (GPC) signals. If your browser or device transmits a GPC signal, our Platform will automatically treat it as a valid request to opt-out of the "sharing" of your personal information for targeted or cross-contextual behavioral advertising. This applies to all tracking technologies managed through our Wix and Base44 infrastructure.

Third Party Links

The Site may contain links that will let you leave the Site and access another website. Linked websites are not under our control. This Privacy Policy applies solely to Personally Identifiable Information that is acquired by us on this Site. We accept no responsibility or liability for these other websites.

Public Comments on Blog Posts

Our Site allows users to submit comments on blog posts published by us. Please be aware that any information you include in a comment may be publicly visible. Public Visibility: Comments you submit may be visible to other users and may be indexed by search engines. As a result, your comments could be accessed, shared, or used by others outside of our control. Use Caution When Sharing Information: You should avoid including personal, sensitive, or health-related information in your comments, as this information may be publicly accessible. Responsibility for Your Content: You are responsible for the content you choose to submit in comments. Please consider carefully what you share, as it may be viewed by others. Moderation: We may monitor, review, or remove comments at our discretion to maintain a respectful environment, but we cannot guarantee the privacy or security of any information you choose to make public. By submitting a comment, you acknowledge and accept that your contribution may be publicly visible and accessible to others.

Feedback You Provide to Us

If you choose to submit feedback, contact us, or report issues through the App or Site, we may collect the information you provide, including any personal information you choose to include.

We use this information to:

Respond to your inquiries
Improve our services
Address technical or user experience issues

Please avoid including sensitive personal or health-related information unless it is necessary for your request.

Sharing Features

The App may allow you to share links or content using your device’s native sharing features (such as messaging, email, or social media apps).

We do not control how third-party services handle any information you share through these features, and their use of your information is governed by their own privacy policies.

Third-Party Platforms (e.g., App Stores)

If you choose to leave a review, rating, or comment about our App on third-party platforms (such as app stores), that content will be public. These platforms are operated by third parties, including Apple Inc. and Google LLC, and your interactions with them are subject to their respective privacy policies. We do not control how these third parties collect, use, or display your information.

Children

We are committed to protecting the privacy of children. The Site and Service are not designed or intended to attract children under 13 years old. We do not knowingly collect personal information from any individual under 13 years old. If we become aware that we have inadvertently collected personal information from a child under 13, we will take steps to delete such information as soon as possible.

COPPA Compliance (US): If you are a parent or guardian and believe that your child under 13 has provided us with personal information, please contact us at info@ouchmatch.com so we can take appropriate action.
GDPR Compliance (EU): For users in the European Economic Area, we do not knowingly collect personal information from children under the age of 16 without verifiable parental consent. If you believe we have collected information from a child under 16, please contact us to address the issue.

Security

We maintain reasonable technical and organizational measures designed to protect your personal information from unauthorized access, use, alteration, loss, misuse, and disclosure. These safeguards include:

Encryption in transit and at rest: We use industry-standard SSL/TLS encryption to protect data transmitted between your device and our servers, as well as encryption for stored data.
Password hashing: User passwords are stored using secure hashing practices and are never stored in plain text.
Access controls: Access to personal data is restricted to authorized personnel only, using role-based access controls to ensure only those with a legitimate need can access sensitive information.
Security audits: We conduct regular security audits and vulnerability assessments to identify and address potential risks.
Monitoring and logging: We actively monitor platform activity for suspicious behavior and maintain logs to help detect and respond to potential security incidents.
User authentication: We require secure passwords and encourage the use of two-factor authentication to enhance account security.

While we strive to use commercially acceptable means to protect your information, no method of data transmission or storage over the Internet is 100% secure. We encourage you to take steps to protect your own information, such as using strong, unique passwords and keeping your login credentials confidential.

Notification of Changes

We reserve the right to update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, and other factors. When we make changes to this Privacy Policy, we will:

Post the Updated Policy: The revised Privacy Policy will be posted on our Site with a new effective date.
Notify Users: We will notify you of significant changes to this Privacy Policy through email or a prominent notice on our Site, especially those related to the subscription services.
User Acknowledgment: Your continued use of the Site after any changes to this Privacy Policy signifies your acknowledgment and acceptance of the updated terms.

How to Contact Us

To contact us for questions or concerns about our privacy policies or practices please email us at info@ouchmatch.com