create privacy policy

1 files changed, 57 insertions, 0 deletions

diff --git a/privacypolicy.md b/privacypolicy.md
new file mode 100644
index 0000000..aaa5d72
--- /dev/null
+++ b/privacypolicy.md
@@ -0,0 +1,57 @@
+# Privacy Policy
+
+Hutch
+Last updated: March 17, 2026
+
+## Overview
+
+Hutch is a client for SourceHut. This app allows users to browse repositories,
+tickets, and builds using their own SourceHut account.
+
+## Data Collection
+
+Hutch does not collect, store, or transmit personal data to the developer.
+
+All data displayed in the app is retrieved directly from SourceHut using
+user-provided authentication credentials.
+
+## Authentication
+
+Hutch uses a SourceHut Personal Access Token (PAT) provided by the user.
+
+The token is stored securely on-device and is used only to authenticate requests
+to SourceHut. The developer does not have access to this token.
+
+## Data Usage
+
+The app communicates with SourceHut servers to:
+- fetch repositories, files, and commits
+- retrieve and update tickets
+- submit and monitor builds
+
+No data is transmitted to any servers operated by the developer.
+
+## Third-Party Services
+
+Hutch communicates with SourceHut services (sr.ht) to retrieve user data.
+
+No analytics, advertising, or tracking SDKs are used.
+
+## User-Generated Content
+
+The app displays content from SourceHut, including repositories, tickets, and
+builds. This content is accessed based on the user’s authentication and
+permissions.
+
+## Device Permissions
+
+Hutch does not request access to sensitive device data such as location,
+contacts, camera, or microphone.
+
+## Changes to This Policy
+
+This policy may be updated in future versions. Updates will be reflected on this page.
+
+## Contact
+
+For questions, contact: [email protected]