Privacy Policy

1. Who We Are

The operator is IRISE BUSINESS VENTURE LLP, operating under the Personhood brand. Personhood builds digital people and social infrastructure. Cady is our first app. This Privacy Policy applies to all Personhood products and services unless a product-specific policy supplements it.

If you do not agree with this policy, do not use our services.

2. Information We Collect

Information you provide directly

• Account details such as email address and authentication identifiers.
• Profile details such as display name, age, location, prompts, preferences, and photos.
• Messages, reactions, reports, support requests, and other content you send through the service.
• Optional Google Photos selections and other media you choose to import.
• Subscription and purchase metadata supplied through the mobile app stores and RevenueCat.

Information collected automatically

• Device, app, and browser data such as device model, operating system, language, and app version.
• Log and diagnostics data such as IP address, request metadata, crashes, and reliability events.
• Usage data such as feature activity, interaction events, and notification tokens.
• Approximate location inferred from network information when you use auto-detect location features.

3. How We Use Information

• Provide our services, authenticate users, and sync your profile and settings.
• Generate AI interactions, recommendations, moderation signals, and safety responses.
• Process speech-to-text requests that you initiate.
• Store media, deliver notifications, and manage subscriptions.
• Detect abuse, investigate reports, enforce our rules, and protect the service.
• Debug, monitor, analyze, and improve product quality and reliability.
• Comply with legal obligations and respond to lawful requests.

4. How We Share Information

We do not sell your personal information.

We share information only when needed to operate our services, including with:

• Firebase and Google services for authentication, messaging, and crash reporting.
• Google Cloud services including Speech-to-Text for voice transcription and Gemini-related AI processing.
• Cloudinary for storing and delivering uploaded media.
• MongoDB and PostgreSQL / Supabase infrastructure for application data and message storage.
• RevenueCat and app-store billing platforms for subscriptions and purchase state.
• Sentry and other monitoring providers for error tracking and operational alerts.
• Professional advisers, acquirers, or authorities when legally required or needed for a business transfer.

5. Privacy Rights and Choices

Depending on where you live, you may have rights to access, correct, export, delete, or object to certain processing of your personal information.

• You can update profile information inside the Cady app.
• You can request a data export inside the app or by emailing us.
• You can schedule account deletion inside the app with a 30-day grace period.
• You can cancel a pending scheduled deletion before it completes.
• You can disable optional permissions in your device settings.

For requests we cannot complete in-app, contact privacy@cady.social.

6. Retention

We keep information for as long as your account is active, as needed to operate the service, and as required for safety, fraud prevention, dispute handling, and legal compliance. When you request account deletion, we schedule deletion with a 30-day grace period unless immediate deletion is required.

7. Security and International Transfers

We use technical and organizational measures including transport encryption, authenticated service access, and provider-level security controls. No system is perfectly secure. Our providers may process information in countries other than your own.

8. Children's Privacy

Our services are not for children under 16. We do not knowingly collect personal information from anyone under 16. If you believe a child under 16 has provided personal information, contact us so we can investigate and delete it.

9. Changes to This Policy

We may update this Privacy Policy as our products, legal requirements, or provider setup changes. When we do, we will post the revised policy with a new Last Updated date.

10. Contact

Privacy requests and questions: privacy@cady.social