Privacy Policy

1. Who We Are

Cady is the app. Personhood is the brand behind it. The operator is IRISE BUSINESS VENTURE LLP. This Privacy Policy applies to the Cady app, cady.social, and related support and account workflows.

If you do not agree with this policy, do not use the Service.

2. Information We Collect

Information you provide directly

• Account details such as email address and authentication identifiers.
• Profile details such as display name, age, location, prompts, preferences, and photos.
• Messages, reactions, reports, support requests, and other content you send through the Service.
• Optional Google Photos selections and other media you choose to import.
• Subscription and purchase metadata supplied through the mobile app stores and RevenueCat.

Information collected automatically

• Device, app, and browser data such as device model, operating system, language, and app version.
• Log and diagnostics data such as IP address, request metadata, crashes, and reliability events.
• Usage data such as feature activity, interaction events, and notification tokens.
• Approximate location inferred from network information when you use auto-detect location features.

3. How We Use Information

• Provide the Service, authenticate users, and sync your profile and settings.
• Generate AI interactions, recommendations, moderation signals, and safety responses.
• Process speech-to-text requests that you initiate.
• Store media, deliver notifications, and manage subscriptions.
• Detect abuse, investigate reports, enforce our rules, and protect the Service.
• Debug, monitor, analyze, and improve product quality and reliability.
• Comply with legal obligations and respond to lawful requests.

4. How We Share Information

We do not sell your personal information.

We share information only when needed to operate the Service, including with:

• Firebase and Google services for authentication, messaging, and crash reporting.
• Google Cloud services including Speech-to-Text for voice transcription and Gemini-related AI processing.
• Cloudinary for storing and delivering uploaded media.
• MongoDB and PostgreSQL / Supabase infrastructure for application data and message storage.
• RevenueCat and app-store billing platforms for subscriptions and purchase state.
• Sentry and other monitoring providers for error tracking and operational alerts.
• Professional advisers, acquirers, or authorities when legally required or needed for a business transfer.

5. Privacy Rights and Choices

Depending on where you live, you may have rights to access, correct, export, delete, or object to certain processing of your personal information.

• You can update profile information inside the app.
• You can request a data export inside the app or by emailing us.
• You can schedule account deletion inside the app. Scheduled deletion uses a 30-day grace period.
• You can cancel a pending scheduled deletion before it completes.
• You can disable optional permissions, such as microphone access, in your device settings.

For requests we cannot complete in-app, contact privacy@cady.social.

6. Retention

We keep information for as long as your account is active, as needed to operate the Service, and as required for safety, fraud prevention, dispute handling, and legal compliance.

When you request account deletion, we schedule deletion with a 30-day grace period unless immediate deletion is required or offered for a specific flow. Some limited records may remain where we have a legal or security reason to keep them.

7. Security and International Transfers

We use technical and organizational measures intended to protect your data, including transport encryption, authenticated service access, and provider-level security controls. No system is perfectly secure.

Our providers may process information in countries other than your own. When that happens, we rely on contractual, technical, and organizational safeguards appropriate for the transfer.

8. Children's Privacy

The Service is not for children under 16, and we do not knowingly collect personal information from anyone under 16. If you believe a child under 16 has provided personal information, contact us so we can investigate and delete it.

9. Changes to This Policy

We may update this Privacy Policy as the product, legal requirements, or provider setup changes. When we do, we will post the revised policy with a new Last Updated date.

10. Contact

Privacy requests and questions can be sent to privacy@cady.social.