# Privacy Policy — Catffirmations
**Last updated: September 16, 2026**
This Privacy Policy explains what information Catffirmations ("the app", "we", "us", or "our") collects, how it is used, and the choices you have. By using Catffirmations, you agree to the practices described here.
---
## 1. Information We Collect
### 1.1 Account Information
When you create an account, we collect:
- **Email address** — required for email/password sign-in, or obtained from your Apple or Google account if you sign in that way.
- **Display name** — obtained from your Apple ID or Google account at sign-in (optional; Apple lets you choose a random relay address).
- **User ID** — a unique identifier (UUID) generated for your account.
You may use the app in **Guest Mode** without creating an account. In Guest Mode, no account data is collected or stored on our servers.
### 1.2 App Usage & Preferences
We store the following per-account data on our servers to personalize your experience:
| Data | Purpose |
|---|---|
| Selected cat companion and bed | Display your chosen pet in the app and widgets |
| Audio narrator preference (male / female / pet) | Play the voice you prefer |
| Coin balance | Track your in-app currency |
| Login streak count and last login date | Award daily login coins |
| Favorited affirmations | Remember which affirmations you've saved |
| Unlocked pets and beds | Remember your purchases |
### 1.3 Feedback
If you submit feedback through the app, we collect:
- The feedback text you write (up to 1,000 characters)
- The category you select (General, Bug Report, Feature Request, etc.)
- Your user ID (if signed in) or no identifier (if in Guest Mode)
Submitting feedback is entirely optional.
### 1.4 Crash & Error Reports
If the app encounters an error, we automatically send an anonymous crash report containing:
- Error type, description, and call stack
- App version and build number
- iOS version and device model (e.g., "iPhone15,3")
- The screen or function where the error occurred
Crash reports are **never linked to your identity** — your user ID is intentionally excluded. No email address, name, or personal data is ever included.
### 1.5 Notification Preferences
If you enable daily reminders, your preferred notification time (hour and minute) is stored **only on your device** in local storage. This information is never sent to our servers.
---
## 2. Information We Do NOT Collect
- We do **not** use advertising identifiers (IDFA) or cross-app tracking.
- We do **not** have third-party analytics, ad networks, or behavioral tracking SDKs.
- We do **not** track your activity across apps or websites.
- We do **not** sell, rent, or trade your personal information.
- We do **not** collect your location.
- We do **not** record audio from your device; audio in the app is pre-recorded content streamed from our servers.
---
## 3. How We Use Your Information
| Information | How it's used |
|---|---|
| Email address | Authentication; account recovery |
| User preferences (pet, bed, voice) | Personalize your in-app and widget experience |
| Coins and login streak | Operate the in-app coin economy and daily reward system |
| Favorites and unlocks | Restore your saved content across devices |
| Feedback messages | Improve the app; we read these directly |
| Crash reports | Diagnose and fix bugs |
We do not use your information for advertising or to build behavioral profiles.
---
## 4. On-Device Storage
The app stores the following data locally on your device:
| Data | Storage location | Backup |
|---|---|---|
| App preferences (theme, icon, background) | Device UserDefaults | iCloud backup |
| Offline cache of your coins, favorites, and selections | Application Support (encrypted) | iCloud backup |
| Affirmation and pet catalog snapshot | Application Support | iCloud backup |
| Audio files (narration and pet sounds) | Library/Caches/audio/ (up to 150 MB) | **Excluded from iCloud backup** |
| Widget data (affirmation text, pet image) | Shared App Group storage | iCloud backup |
| Pending changes made while offline | Application Support | iCloud backup |
Audio files are downloaded on demand from our servers and cached locally for up to 7 days to allow offline playback. They are automatically removed as the cache fills.
---
## 5. Third-Party Services
Catffirmations uses the following third-party services:
### Supabase
All server-side data (account information, preferences, favorites, unlocks, feedback, and crash reports) is stored and processed by **Supabase, Inc.** Supabase operates the database, authentication, and file storage infrastructure for the app.
- Supabase Privacy Policy: [https://supabase.com/privacy](https://supabase.com/privacy)
### Google Sign-In
If you choose to sign in with Google, your Google ID token and email address are passed to Supabase to authenticate your account. We do not store your Google credentials directly.
- Google Privacy Policy: [https://policies.google.com/privacy](https://policies.google.com/privacy)
### Apple Sign-In
If you choose to sign in with Apple, Apple provides us with an identity token and, at your option, your email address (or an Apple-generated relay address). We do not store your Apple credentials directly.
- Apple Privacy Policy: [https://www.apple.com/legal/privacy](https://www.apple.com/legal/privacy)
No other third-party services receive your personal data.
---
## 6. Data Retention
| Data | Retained until |
|---|---|
| Account and preferences | You delete your account |
| Favorites and unlocks | You delete your account |
| Feedback messages | Retained indefinitely for product improvement |
| Crash reports | Retained indefinitely; never linked to identity |
| On-device audio cache | 7-day TTL with automatic LRU eviction |
| On-device catalog cache | 24-hour TTL, refreshed automatically |
---
## 7. Account Deletion
You can delete your account at any time from the app's Settings screen. Deleting your account permanently removes:
- Your user profile, preferences, coin balance, and login streak
- All favorited affirmations
- All unlocked pets and beds
- Your account from our authentication system
Feedback you submitted and anonymized crash reports are retained after account deletion because they are not linked to your identity and help us improve the app for all users.
---
## 8. Children's Privacy
Catffirmations is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately and we will delete it.
---
## 9. Data Security
All data in transit is encrypted using TLS. At rest, your data is protected by Supabase's infrastructure security controls. Row-level security policies in the database ensure that each user can access only their own records.
---
## 10. Your Rights
Depending on your location, you may have the right to:
- **Access** the personal data we hold about you
- **Correct** inaccurate information
- **Delete** your data (use the in-app account deletion feature)
- **Export** your data (contact us to request a copy)
- **Withdraw consent** for any optional data collection
To exercise any of these rights, use the in-app account deletion feature or contact us at the address below.
---
## 11. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this document. We will notify you of significant changes via an in-app notice. Continued use of the app after changes take effect constitutes acceptance of the revised policy.
---
## 12. Contact
If you have questions about this Privacy Policy or how your data is handled, please contact us:
**Catffirmations**
**[catffirmations.tester@gmail.com]**
---
*This policy was last reviewed against the app's full data collection inventory in September 2026.*