CatChat

Privacy Policy

Effective Date: 2025 · Last Updated: 2025 · CatChat by Finduzz Cat Café

CatChat (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use our platform. By using CatChat, you consent to the collection and processing of your personal data as described in this policy.

1. Data Controller

Finduzz Cat Café / CatChat operates as the Data Controller, determining how and why your personal data is processed. For questions about this policy, contact us at catchatsocial@proton.me.

2. Data We Collect

CatChat operates on a minimal-data-collection principle. The only personally identifiable information retained by the Data Controller is the email address associated with your account, used exclusively for authentication and essential service communications.

Data you provide upon registration and profile creation:

  • Authentication credentials (email address) — this is the sole piece of personal data maintained by the Data Controller
  • User-generated profile content (display name, preferences, photos) is stored within the platform's infrastructure and is accessible only to other users through the application's matching interface — the Data Controller does not access, review, or maintain independent copies of this content
  • Cat profile information submitted voluntarily by users is governed by the same access controls and is not reviewed by the Data Controller

Proximity and location data:

  • Approximate geographic coordinates are derived from user-provided address information and processed exclusively through automated algorithmic computation to facilitate proximity-based matching between users
  • This geolocation data is not exposed through any user-facing interface, is not accessible to the Data Controller or any third party, and cannot be retrieved, exported, or queried independently of the matching algorithm

Communications and messaging:

  • In-app messages (including text and image content) are transmitted and stored solely for the purpose of delivery between matched users
  • The Data Controller does not read, monitor, access, moderate, or retain independent copies of any private communications exchanged between users
  • Support requests or feedback submitted directly to the Data Controller via external channels (email) are retained separately

Automated data collection:

  • CatChat does not deploy cookies, tracking pixels, fingerprinting technologies, or any form of third-party behavioural analytics
  • Standard server-side request metadata (IP address, user agent, request timestamps) may be processed transiently by infrastructure providers in the ordinary course of service delivery but is not collected, stored, or analysed by the Data Controller

3. How We Use Your Data

The limited data described above is processed exclusively for the following purposes:

  • Account authentication and session management via your email address
  • Automated proximity-based matching between cat owners and cat sitters — performed entirely through algorithmic computation without human review
  • Delivery of in-app communications between mutually matched users
  • Display of in-app content recommendations, curated suggestions, and promotional material as an integral part of the free service experience
  • Service-related notifications where consent has been provided

We will never sell your personal data. The Data Controller does not access, review, or maintain copies of user profiles, private conversations, or location-derived data. Your profile is visible only to users you have mutually matched with. All user data is private by default and inaccessible to CatChat staff.

3a. In-App Content & Advertisements

CatChat is provided free of charge. As a condition of using the free service, users consent to the display of in-app content recommendations, curated suggestions, and advertisements (“Promotional Content”) within the application interface.

  • Promotional Content is an integral and non-severable component of the free service offering — it cannot be individually opted out of while using the free tier
  • All Promotional Content is exclusively related to cats, cat care, and cat-adjacent products and services. CatChat maintains editorial control over all sponsors and partners — only advertisers vetted and approved by the Data Controller are permitted to appear within the platform
  • Promotional Content is delivered contextually as part of the application experience and does not rely on behavioural tracking, profiling, or personal data processing beyond what is described in Section 2. No user data is shared with advertisers or sponsors
  • Users who prefer an experience without Promotional Content may do so through a premium subscription, where available

By creating an account and using CatChat, you acknowledge and consent to the display of Promotional Content as described above. This consent is granted as part of the contractual basis for accessing the free service.

4. Legal Basis for Processing (GDPR)

  • Contractual Necessity: To provide our services
  • Legitimate Interests: Fraud prevention, security, and service improvement
  • Contractual Necessity: Display of in-app Promotional Content as an integral part of the free service (see Section 3a)
  • Consent: Optional email communications (you can opt-out anytime)
  • Legal Obligations: Compliance with applicable legal requirements

5. Your Rights Under GDPR

As an EU/EEA user, you have the following rights:

Right to Access (Art. 15)

Request a copy of all personal data we hold about you (limited to your email address and any direct support correspondence), provided free of charge within one month.

Right to Rectification (Art. 16)

Request corrections to inaccurate or incomplete data. We'll update it without undue delay.

Right to Erasure (Art. 17)

Request deletion of your data ('Right to be Forgotten'). You can delete your account directly in Settings → Delete Account.

Right to Restrict Processing (Art. 18)

Ask us to pause processing of your data while you dispute its accuracy or need it for a legal claim.

Right to Data Portability (Art. 20)

Request your data in a structured, machine-readable format (e.g., JSON/CSV).

Right to Object (Art. 21)

Object to processing for direct marketing communications (e.g., email). In-app Promotional Content is part of the free service contract and is not subject to individual objection; users may opt for a premium subscription to remove it.

Right to Withdraw Consent (Art. 7)

Withdraw consent for marketing communications at any time, as easily as it was given.

Right to Lodge a Complaint (Art. 77)

File a complaint with your national Data Protection Authority. In Sweden: IMY (www.imy.se).

To exercise any of these rights, contact us at catchatsocial@proton.me.

6. Data Sharing & Third Parties

CatChat does not independently share, transfer, or disclose user data to third parties. The platform relies on the following infrastructure providers, each of which may process data in the course of service delivery pursuant to their own data processing agreements:

  • Infrastructure and database hosting providers for the secure storage and transmission of application data
  • Content delivery and deployment services for application availability
  • Legal authorities, only where disclosure is strictly required by applicable law or regulation

No user data — including email addresses, profile content, messages, or location-derived data — is sold, licensed, or otherwise made available to any commercial third party. Infrastructure providers process data solely as sub-processors under contractual obligations consistent with GDPR requirements.

7. Data Retention

Given the minimal nature of data held by the Data Controller:

  • Email addresses: Retained for the duration of the account and for up to 5 years following account deletion, as required for legal compliance and dispute resolution
  • User-generated content (profiles, cat profiles, photos): Stored within the platform's infrastructure for as long as the account is active. Upon account deletion, this data is removed. The Data Controller does not maintain independent copies
  • In-app messages: Exist within the platform's infrastructure solely for delivery purposes. Messages deleted by users are removed from visibility. The Data Controller does not access, archive, or retain independent copies of any communications
  • Support correspondence: Direct communications submitted to the Data Controller via external channels are retained for up to 5 years to address potential future inquiries

8. Security Measures

The platform employs industry-standard security measures commensurate with the nature of the data processed:

  • All data in transit is encrypted via TLS. Data at rest is encrypted by the infrastructure provider
  • Authentication is managed through secure, token-based session handling
  • Row-level access controls ensure that user-generated content is accessible only to authorised parties through the application's matching logic
  • Location-derived data is processed through isolated computational pathways and is not queryable through any external interface
  • The platform does not deploy administrative interfaces or tooling that would permit the Data Controller to view user profiles, messages, or other user-generated content

No system can guarantee absolute security. Users are encouraged to maintain strong, unique passwords and to exercise caution when sharing personal information with other users.

9. Swedish Animal Welfare Compliance

As a platform facilitating cat care services in Sweden, we ensure all activities comply with the Swedish Animal Welfare Act (2018:1192), including that animals shall be treated well and protected from unnecessary suffering. In Sweden, it is illegal to leave a cat unattended for more than 24 hours — CatChat exists to help you solve exactly this.

10. Changes to This Policy

We may update this policy. The latest version will always be available at /privacy. If significant changes occur, we will notify you by email or in-app notification.

11. Contact Us

Questions or complaints about your privacy?

CatChat · Finduzz Cat Café

📧 catchatsocial@proton.me

📸 @CatChatSocial on Instagram

Swedish DPA: IMY — www.imy.se

← Back to CatChat