Privacy policy

1. Information we collect

Depending on how you use Catmi, we may collect:

• account details, such as your name, email address, and sign-in information;
• profile, goals, and health or wellness information you choose to provide;
• chat messages, photos, documents and filenames, voice recordings, logs, and other content you submit;
• data you choose to connect from health platforms, devices, or other services;
• device, app, usage, diagnostics, and approximate location information; and
• subscription status and transaction details from payment providers.

2. How we use information

We use information to:

• provide and personalize Catmi's features and recommendations;
• maintain accounts, subscriptions, connected services, and support;
• keep the service secure and prevent misuse;
• understand reliability and improve the product; and
• meet legal obligations and enforce our terms.

3. Legal bases

Depending on the information and purpose, we process personal information to provide the service you request, to meet legal obligations, with your consent, or for legitimate interests such as securing and improving Catmi. Where we rely on legitimate interests, we balance them against your rights and reasonable expectations.

4. Health data and AI

Catmi uses automated systems and AI service providers to process content and generate responses. We limit access and sharing to what is reasonably needed to operate those features. Where explicit consent is required to process health data, we ask for it separately. You may withdraw that consent at any time, without affecting earlier processing, though some features may then stop working. Do not submit information you do not want processed in this way.

With your permission, Catmi reads Apple Health on iPhone or Health Connect on Android. Depending on the platform and permissions you grant, this can include steps, activity energy, workouts, sleep, heart-rate measurements, weight, body measurements and height. We use these records for your summaries, progress tracking and coach context. We do not sell connected health data or use it for advertising.

You can revoke health permissions in your device settings. This stops future reads that require those permissions; it does not delete information already uploaded to Catmi. An upload already in progress may still complete. You can request deletion or use the account-deletion controls described below.

If you report a coach reply, our team reviews that reply to improve the coach's safeguards.

Health information you enter, upload or view can also appear in session replay, diagnostics and AI interaction records described below. These records help us investigate failures and understand how Catmi is used.

5. When we share information

We may share information with service providers that help us run Catmi, such as hosting, AI, analytics, authentication, communications, support, and payment providers. We may also share information when required by law, to protect rights and safety, in a business transaction, or when you ask us to. We do not sell your personal information.

• We use both OpenAI and Anthropic for coach requests: OpenAI processes them directly, and Anthropic processes them through Amazon Web Services Bedrock. These requests can include images, attached documents and relevant profile, diary and health context. Food-search text and saved food names are processed by OpenAI directly or Cohere through AWS Bedrock for search embeddings.
• ElevenLabs transcribes dictation audio and receives contextual terms to improve recognition. We have disabled model training for our ElevenLabs account; this does not mean that all provider logging or retention is disabled.
• Tavily processes web-search queries when the coach uses search. Queries may contain relevant context from your conversation.
• Cloudflare supports site delivery, uploads and backups. RevenueCat processes subscription information. Expo, Apple and Google support the configured notification, authentication and app-store services.
• PostHog receives product analytics, account identifiers, diagnostics, operational logs, session replay and AI interaction records when enabled. Replay is not masked and can include content visible in the app. AI records can include requests and responses, including health information. Grafana receives configured operational logs, metrics and traces, which may include account identifiers and diagnostic context.

Private messages are shared with the person you send them to. Meal references follow your current diary-sharing permissions. Ending sharing stops new messages and access to your diary, but text already sent stays in both people's conversation history. Human messages are separate from the AI coach; the coach can read them when you ask it to.

6. Retention and security

We keep information only for as long as reasonably needed for the purposes described here, including legal, security, and operational needs. We use technical and organizational safeguards designed to protect it, but no system can guarantee absolute security. Service-provider retention depends on the service and our account settings. Disabling model training or request storage does not by itself eliminate provider security logs or establish zero retention. Account deletion follows the exceptions explained in our deletion instructions, including information already sent to other people and records retained for legal or security purposes.

7. Your choices and rights

You can update some information in Catmi and control connected data sources through the app or device settings. You can delete your account and its data yourself at any time from Account & privacy in the app; how account deletion works explains what is removed and what we keep. Depending on where you live, you may also have rights to access, correct, delete, restrict, or export personal information, or object to certain uses.

Contact [email protected] to make a privacy request. We may need to verify your identity before completing it. You may also complain to your local data protection authority.

8. International processing

Catmi and its providers may process information in countries other than the one where you live. Where required, we use appropriate safeguards for international transfers.

9. Children

Catmi is not directed to children who are too young to consent to data processing where they live. If you believe a child has provided personal information without appropriate consent, contact us so we can review it.

10. Updates and contact

We may update this policy as Catmi changes. We will post the new version here and update the effective date. Questions or requests can be sent to [email protected].

Catmi is operated by CATMI TECH S.R.L., a company registered in Romania (CUI 55456013), which is the controller of the personal information described in this policy.