Privacy

Kaddoh is a perpetual birthday calendar that helps you remember and celebrate the birthdays of the people who matter to you. It is operated by [Operator name and address], who is the data controller for the personal information described in this policy.

This policy explains what we collect, why, and the choices you have. We process personal information under the UK GDPR and the Data Protection Act 2018, and the EU GDPR where it applies to you. Questions or requests: privacy@kaddoh.com.

• Account details — your name, email address, username, and a password (or a Google account, if you sign in with Google).
• Profile details — optionally, a profile photo, a short bio, your own birthday, and whether your profile is visible to others.
• Phone number — only if you turn on SMS reminders.
• Messages — anything you send us when you contact support.

The heart of Kaddoh is a calendar of other people’s birthdays. When you add someone, you may store their name, birth date, and optionally notes, gift ideas, and contact details. When you invite someone to exchange birthdays, we also store their response.

These entries are yours: they are visible only to you (and to the person themselves where they have confirmed a connection with you), and we process them solely to run your calendar, your reminders, and the invitations you choose to send. Please only add details about people you know personally, and respect their wishes if they decline an invitation.

• Technical logs — IP address, device and browser information, and timestamps, used for security and to keep the service running.
• Error reports — if something breaks, an error report (which may include technical context about your session) helps us fix it.
• Product analytics — privacy-conscious usage analytics hosted in the EU, with no session recording and no advertising trackers. We use it to understand which features are used, not to profile you.

• To provide Kaddoh — running your calendar, sending the email and SMS reminders you configure, and operating invitations you initiate (performance of our contract with you).
• To keep the service safe and improve it — debugging, security monitoring, and understanding feature usage (our legitimate interests).
• With your consent — SMS reminders to your phone number; you can withdraw consent at any time in your settings.
• To meet legal obligations — where the law requires us to keep or disclose information.

We do not sell your personal information, and we do not use it for third-party advertising.

We use a small number of service providers to run Kaddoh, each bound by a data-processing agreement:

• Clerk — sign-in and account security.
• Supabase — database and file storage (including profile photos).
• Vercel — hosting and content delivery.
• Resend — sending email reminders and notifications.
• Twilio — sending SMS reminders.
• Upstash — short-lived caching.
• Sentry — error monitoring.
• PostHog (EU) — product analytics.

Some of our providers process data in the United States or other countries outside the UK and EU. Where that happens, transfers are protected by recognised safeguards such as the UK International Data Transfer Agreement, EU Standard Contractual Clauses, or an adequacy decision (for example the EU–US Data Privacy Framework).

• Your account and calendar data: for as long as your account exists. If you delete your account, we delete it.
• Invitation records: for as long as needed to operate the invitation and the connection it creates.
• Technical logs and error reports: kept briefly, then deleted or anonymised.

You can ask us to access, correct, delete, or export your personal information, to restrict or object to certain processing, and to withdraw consent (for example, turning off SMS reminders) at any time.

To exercise any of these rights, email privacy@kaddoh.com. You also have the right to complain to the UK Information Commissioner’s Office (ico.org.uk) or, if you are in the EU, to your local supervisory authority.

Kaddoh uses only essential cookies — the ones needed to keep you signed in and the service secure. We do not use advertising or cross-site tracking cookies.

Kaddoh is not directed at children under 13, and we do not knowingly collect their information. If you believe a child has created an account, please contact us and we will remove it.

When we change this policy we will update the “Last updated” date above, and for significant changes we will tell you in the app or by email.