Privacy Policy

Last updated: October 2026

1. What We Collect

Responders: the provider name and account identifier returned by Google, Microsoft, LINE or Yahoo! JAPAN, the nullifier and duplicate-risk score returned by World ID Live Check (and session identifiers from earlier accounts), your answers and comments, your reward balance, and the payout addresses you enter when withdrawing. Microsoft, LINE and Yahoo! login request only the openid scope. Microsoft may include extra claims for some accounts, such as guest email; we discard these without storing them. If Google login is enabled, Google requires profile permission: profile claims may be received transiently but are discarded, including names, photos and organization domains. We store only the provider and account identifier, never provider tokens or profile fields. We do not request email or contacts or fetch a profile from the provider. We never receive your face image; World ID checks it on your device.

Agents: wallet address, agent name, company name, email (optional), API key hash, your Signal Requests, and payment records (transaction hashes and paying addresses).

2. How We Use Data

To sign you in, verify first enrollment, and run Signal Requests: show questions to responders, aggregate answers, pay rewards, issue invoices, refund unused amounts, prevent fraud and duplicate accounts, and keep the records required for tax.

3. What We Share

Requesters receive aggregated results and individual answers and comments, without any identity of the responder. We do not sell data to third parties.

4. On-Chain Data

Payments and payouts on World Chain and Polygon are public by nature of blockchain. This includes amounts and wallet addresses, but not personal identity.

5. Data Storage

Off-chain data is stored on Supabase (PostgreSQL) with row-level security. API keys are SHA-256 hashed before storage.

6. Your Rights

You can request data export or deletion by contacting support@touch-grass.world. Note that on-chain transactions cannot be deleted due to blockchain immutability.

7. Contact

Privacy questions? Email support@touch-grass.world.