legal · policy

Privacy,
in plain voice.

We ask for as little as possible, we tell you exactly what we do with it, and we never sell it. This is the long version. The short version is in the yellow box below.

effectiveApril 21, 2026
last updatedApril 20, 2026
written byCadito Labs Ltd.

The short version.

  • You sign in with Google. We ask Google only for your name and email.
  • We store what you'd expect — your rooms, your friends, your game history — and nothing you didn't give us.
  • We don't sellyour data. Ever. Not to advertisers, not to "partners", not to anyone.
  • We don't post on your behalf or touch your Google account for anything other than sign-in.
  • Chat messages stream livebetween players — we don't store them on our servers.
  • You can delete your account, and everything we hold on you, at any time from Profile → Data.

01 · What we collect

From Google sign-in

When you sign in, Google gives us your name, email address, and a unique Google ID. Nothing else — not your contacts, not your photos, not your calendar.

From you, in the app

  • Your display name, avatar color, and optional one-line bio.
  • Your favorite games, your rooms, and your friends list.
  • Chat messages are streamed live between the people in a room and are not stored on our servers. We apply an automatic profanity filter as they pass through.
  • Voice audio is streamed live only — never recorded or stored.
  • Safety records — if you block or report another player, we keep a record of that block / report so we can act on it.

Automatically

  • Device type, app version, and crash reports (for keeping the app upright).
  • Approximate region (from IP), used only for routing you to a nearby server.

02 · How we use it

Strictly to run the product you signed up for:

  • Authenticating you and keeping your session alive.
  • Showing you who's online, who's in your rooms, and who wants to play.
  • Saving your game state and your recap polaroids.
  • Sending you notifications only for the categories you enable.
  • Diagnosing bugs and measuring whether features are being used.

We do not use your data for ad targeting, personality profiling, or training external AI models.

03 · Google sign-in, specifically

Cadito uses Google OAuth as our only sign-in method. This is a deliberate choice: one door is simpler and safer than five. We ask Google for the minimal scopes — openid, email, and profile. We do not request access to your Google Drive, Gmail, Contacts, Calendar, or Photos.

You can revoke Cadito's access to your Google account at any time from myaccount.google.com/permissions. Revoking removes our ability to sign you in; your in-app data stays until you ask us to delete it.

04 · Who sees it

Other players in a room see your display name, avatar color, and messages you send in that room. That's it. They do not see your email, your Google ID, or anything about your other rooms.

We share data with a small number of vendors strictly to operate the service — our cloud host (DigitalOcean), our crash reporter (Sentry), and our product analytics (PostHog). Each is under a data-processing agreement and none may use your data for their own purposes.

We do not sell, trade, or rent personal information to anyone, ever.

05 · How long we keep it

  • Account data: until you delete your account.
  • Chat messages: not stored. They are live-streamed to the other players in the room and discarded.
  • Voice audio: not stored. It is live-streamed between players and discarded.
  • Recap polaroids: forever (unless you delete them).
  • Safety records (blocks, reports): until you delete your account, or until we conclude the investigation, whichever is later.
  • Crash reports: 30 days.

06 · Your rights

Wherever you live, we respect these rights for everyone:

  • Access — email privacy@cadito.appand we'll send you a copy of the account data we hold on you. Most of what we store is already visible in-app; we don't offer a one-click export because there's very little to export.
  • Correct — edit name, bio, avatar in Profile → Edit.
  • Delete— Profile → Data → "Delete my account" immediately removes your profile, game history, and safety records from Cadito, and queues your Firebase Auth record for deletion. This cannot be undone. Full steps (including the email path for users without the app) are on the delete-account page.
  • Object — email privacy@cadito.appand we'll help.

07 · Children

Cadito is not directed to children under 13. Anyone under 16 in the EU/UK needs a parent's permission, which Google's own age-gating handles at sign-in. If we learn we've collected data from a child without that consent, we delete it.

08 · International transfers

We're based in the United Kingdom. Our servers are in Europe and North America. If you're outside those regions, your data may be transferred across borders — always under standard contractual clauses or equivalent safeguards.

09 · Changes

If we change this policy meaningfully, we'll email you and post a notice in the app 30 days before the change takes effect. The "last updated" date at the top always tells you when.

10 · Contact

Cadito Labs Ltd · 71-75 Shelton St · London WC2H 9JQ
privacy@cadito.app · hello@cadito.app