HunchSign in

Privacy policy

Last updated 19 October 2026

Baca dalam Bahasa Malaysia

Hunch predicts how much you'll enjoy a book. To do that it has to know what you like to read — that's most of what it stores. It doesn't show ads, doesn't sell data, and doesn't use third-party trackers.

Who runs Hunch

Hunch is a small independent project run by Gabriel, who is the data controller for the information below. Questions or requests: gabrielchan10132.191@gmail.com.

What we collect

  • Your account — your email address, and if you sign in with Google, the name and profile picture Google shares.
  • Your reading — the books in your library, their status, your ratings, and the taste profile you build (genres, favourite books, dealbreakers, and three questions about your reading habits).
  • Cover photos— when you scan a book, the photo is sent to be read and then discarded. We don't keep it.
  • How you use the app— which pages you open and which buttons you press, with timestamps. This is stored in our own database, not sent to an analytics company, and is used only to work out what's confusing or broken.
  • Feedback you send — your message, any screenshot you choose to attach, and basic technical details (page, screen size, browser).
  • Free tries without an account— a scrambled (hashed) version of your IP address, mixed with the date so it can't be linked across days, to limit how many free tries one visitor gets. Deleted after two days. Your raw IP address is never stored.

Why we use it

To provide the service you signed up for: predicting books, keeping your library, and making recommendations. Usage data and feedback are used to fix bugs, improve Hunch, and stop abuse. By creating an account you consent to this. Giving us your data is voluntary, but without an email address and some reading taste Hunch can't work.

Who else handles it

These services process data on Hunch's behalf:

  • Supabase — database and sign-in. Stores everything listed above.
  • Vercel — hosts the website.
  • OpenAI— writes the predictions and reads cover photos. It receives the book in question and your taste profile, not your email. OpenAI doesn't train on data sent this way and may keep it for up to 30 days to monitor for abuse.
  • Google— only if you choose “Sign in with Google”.
  • Telegram — feedback you send is forwarded to the developer as a private Telegram message.

To look books up, Hunch also asks Open Library, Google Books, Apple Books, Hardcover and Reddit about the book — its title, author or ISBN. Nothing about you is sent to them.

Some of these companies are based in the US, so your data may be transferred and processed outside Malaysia. We only use providers that protect data to a standard at least as good as Malaysian law requires.

Cookies and local storage

Hunch sets only the cookies needed to keep you signed in. Your browser also remembers your theme, text size, and when you last visited (to group your activity into sessions). There are no advertising or cross-site tracking cookies, so there's no cookie banner.

How long we keep it

Everything is kept while you have an account. When you delete your account, your library, profile, usage history and feedback are deleted from our database straight away. Copies of feedback already delivered over Telegram are deleted if you ask.

Your rights

Under Malaysia's Personal Data Protection Act 2010, you can ask for a copy of your data, ask us to correct it, ask for it to be sent to another service, withdraw your consent, or have it deleted. The quickest way to delete everything is Settings → Delete account. For anything else, email gabrielchan10132.191@gmail.comand you'll get a reply within 21 days.

If you're unhappy with how your data has been handled, you can complain to Malaysia's Personal Data Protection Commissioner at pdp.gov.my. If you live in the UK or EU, you also have rights under the GDPR and can complain to your local data protection authority.

Children

Hunch is for readers aged 13 and over. If you're under 18, please get a parent or guardian's permission before signing up. If you think a younger child has made an account, email gabrielchan10132.191@gmail.com and it will be deleted.

If something goes wrong

If a security breach puts your data at risk, we'll tell you and the Personal Data Protection Commissioner as soon as possible.

Changes

If this policy changes in a way that matters, the date at the top changes and signed-in readers will be told in the app.

This policy is available in English and Bahasa Malaysia. If the two ever differ, the English version applies.