Calico, the Cat Collector mascotCat Collector
Download on the App Store

Privacy Policy

Last updated: June 25, 2026

We may update this Privacy Policy at any time. When we make changes, we will revise the "Last updated" date above. The current version posted here always governs, and your continued use of the Services means you accept it.

This Privacy Policy explains how nftstory ltd. ("we", "us"), based in Quebec, Canada and producer of the Cat Collector app ("Cat Collector", the "App"), collects, uses, and shares information when you use the App and related website at catcollector.app (together, the "Services"). nftstory ltd. is the controller of, and the person responsible for, personal information for the Services. By using the Services, you agree to the practices described here.

1. The Short Version

2. Information We Collect

Profile information. When you first open the App, we automatically create a profile for you. It includes a randomly assigned account identifier, a username (which you can set or change), and your collection progress. We do not require or collect your email address, phone number, password, or real name.

Photos you take ("catches"). When you photograph a cat, the App detects the cat on your device and you can save it as a card. The cat photo is uploaded to our cloud storage using public-read access — meaning the image file may be accessible to anyone who has its URL, even outside the App — so it can be displayed on the card and on shareable links. Please do not photograph people, license plates, private property interiors, or anything you would not want to be public.

Cat names and other text you enter. The names you give your cats and any text you provide are stored with the card and shown publicly on the card.

Location information (optional). If you grant location permission, when you catch a cat we collect your device's approximate location at that moment — reduced-accuracy geographic coordinates (target accuracy of roughly 100 meters), the reported accuracy of the reading, and a reverse-geocoded place description (such as a place name, locality, administrative area, country, and nearby landmarks). This is attached to the cat so you and others can see where it was found. Location is optional: if you deny or turn off location permission, you can still catch cats, and no location is collected. Note that even approximate coordinates and place descriptions can reveal sensitive places such as a home, school, workplace, or regular route — only enable location for catches you are comfortable associating publicly with the card.

Collection activity. We record which cats you have created and which cats you have collected from other users, along with related timestamps, so we can show your collection and keep your progress in sync.

Analytics and usage data. We use PostHog, a third-party product-analytics service, to understand how people use the App so we can improve it. PostHog collects usage events (such as screens viewed and actions taken, like catching, naming, sharing, or collecting cats), together with app and device information (such as app version, device model, and operating-system version) and a profile or device identifier used to group those events. We use this information for analytics only, not for third-party advertising.

Device and technical data. Like most internet services, our servers automatically receive technical information necessary to deliver content, such as IP address and basic request information, which may appear in standard server logs.

3. Permissions the App Requests

You can change these permissions at any time in your device Settings.

4. How We Use Information

We use the information we collect to:

Legal bases (where required). Where data-protection laws such as the GDPR or UK GDPR apply, we process information to perform our contract with you (your profile and the core features), based on your consent (for optional location), for our legitimate interests (operating, securing, moderating, and improving the Services and enabling the public sharing features you choose to use), and to comply with legal obligations.

5. Information That Is Public

Cat Collector is built around sharing. When you create or share a card, the following can be viewed by anyone who has the card or its link, including outside the App (for example, on the web at addresses such as catcollector.app/<username>/<catname>, or when posted to social media): the cat photo, the cat's name, the creator's username, and — if you provided it — the place where the cat was found. Uploaded photos are stored with public-read access and may be reachable by anyone who has the image URL. Other users may collect your shared cats into their own collections.

Location safety. If you attach location to a card, the place where the cat was photographed becomes publicly visible to anyone who views the card or its web link, which may reveal your location or movements. Do not attach location to catches made at or near private homes, schools, workplaces, shelters, or other sensitive places unless you are comfortable making that place public. Do not include anything in photos, names, or your username that you want to keep private.

6. How We Share Information

We do not sell personal information as defined under the California Consumer Privacy Act (CCPA/CPRA) and similar U.S. state laws, and we do not share personal information for cross-context behavioral advertising. We share information only as follows:

We use PostHog as our product-analytics provider; PostHog processes usage and device information on our behalf, under its own terms and privacy practices, to help us measure and improve the App. The App does not use third-party advertising networks, does not use the Identifier for Advertisers (IDFA), does not prompt for App Tracking Transparency permission, and does not track you across other companies' apps or websites.

7. Data Retention

We generally retain your profile, cats, images, collection, and moderation records until you request deletion or the Services no longer need them. Because cats can be shared and collected by others, a cat you created may remain visible to users who have collected it or its link even after you stop using the App. Server logs are retained for a limited period for security, debugging, and abuse prevention, and backup copies may persist for a limited period before being overwritten. When we delete data, we may retain limited information where required or permitted by law.

8. Your Choices and Rights

9. Children's Privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you reside in Quebec and are under 14, you may use the Services only with the consent of your parent or guardian. Cat Collector lets users share photos and other content publicly. If you believe a child has provided us personal information without any consent required by law, please contact us so we can review and delete it.

10. Security

We use reasonable technical and organizational measures to protect personal information. However, no system is perfectly secure, and content you choose to make public (such as shared cards) is by design accessible to others. We cannot guarantee absolute security.

11. International Transfers

We are based in Canada and may process and store information in Canada, the United States, and other countries where we or our service providers operate. Where required, we use appropriate safeguards for cross-border transfers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will take reasonable steps to notify you, for example by updating the date at the top of this page or posting a notice within the Services. The updated Policy applies from its effective date, subject to any consent required by law.

13. Contact

If you have questions, concerns, or privacy requests, contact the person responsible for personal information:

nftstory ltd.
934 rue Bernard-Pilon
McMasterville, Quebec J3G 1L6
Canada
Email: support@catcollector.app