Privacy Policy

Last Updated: July 2025

1. Introduction

Your privacy is critically important to us. This Privacy Policy explains how Cactus ("we," "our," or "us") collects, uses, protects, and shares your personal information when you use our mobile application ("App").

By using Cactus, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

2.1 Information You Provide Directly

Account Information:

  • Name and email address (via Google Sign-In or Apple Sign-In)
  • Profile information you choose to add
  • User preferences and settings

Content You Create:

  • Chat messages and conversations with the AI
  • Tasks, notes, and reminders you create
  • Calendar events and scheduling information
  • Voice recordings (temporarily processed for speech-to-text conversion)

2.2 Information Collected Automatically

Usage Data:

  • App usage patterns and feature interactions
  • Message frequency and timing
  • Error logs and crash reports
  • Device performance metrics

Device Information:

  • Device type, model, and operating system version
  • Unique device identifiers
  • Language and region settings
  • Network connection information

3. How We Use Your Information

3.1 Primary Uses

  • Provide Core Functionality: Enable AI conversations, task management, and calendar integration
  • Voice Processing: Convert speech to text for voice input features
  • Personalization: Improve AI responses based on your conversation context
  • Synchronization: Sync your data across your devices

3.2 Service Improvement

  • Analyze usage patterns to improve app performance
  • Debug technical issues and fix bugs
  • Develop new features and enhancements
  • Optimize AI response quality and relevance

4. How We Share Your Information

4.1 Third-Party Service Providers

Firebase (Google Cloud):

  • Secure data storage and synchronization
  • User authentication and account management
  • Real-time database functionality
  • Subject to Google's privacy practices

OpenAI:

  • AI response generation and natural language processing
  • Your messages are sent to OpenAI for processing
  • Subject to OpenAI's privacy policy and data usage terms
  • Messages are not used to train OpenAI's models

4.2 We Do NOT Share Your Information With

  • Advertisers or marketing companies
  • Data brokers or analytics companies (beyond essential service providers)
  • Social media platforms (beyond authentication)
  • Any party for commercial purposes unrelated to the service

5. Data Storage and Security

5.1 Data Storage

  • Your data is stored securely using Firebase Cloud Firestore
  • Data is encrypted in transit and at rest
  • Servers are located in secure, certified data centers
  • Regular backups ensure data availability

5.2 Security Measures

  • Industry-standard encryption protocols (TLS 1.3)
  • Secure authentication using OAuth 2.0
  • Regular security audits and updates
  • Access controls limiting employee data access
  • Automated threat detection and monitoring

5.3 Data Retention

  • Account data: Retained while your account is active
  • Chat messages: Retained for service functionality and user convenience
  • Usage data: Retained for up to 2 years for analytics
  • Voice recordings: Immediately deleted after speech-to-text conversion
  • Deleted accounts: Data permanently deleted within 30 days

6. Your Privacy Rights

6.1 Access and Control

  • View Your Data: Access all personal information we have about you
  • Update Information: Modify your profile and preferences
  • Download Data: Export your conversations and tasks
  • Delete Account: Permanently remove your account and associated data

6.2 Regional Rights

For EU/UK Users (GDPR):

  • Right to access your personal data
  • Right to rectification of inaccurate data
  • Right to erasure ("right to be forgotten")
  • Right to restrict processing
  • Right to data portability
  • Right to object to processing

For California Users (CCPA):

  • Right to know what personal information is collected
  • Right to delete personal information
  • Right to opt-out of sale (we don't sell personal information)
  • Right to non-discrimination for exercising these rights

7. Children's Privacy

Cactus is not intended for children under 13 years old. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it immediately.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@cactusapp.com.

8. Contact Information

Privacy Questions or Requests

Email: henrysong1205@gmail.com

Response Time: We will respond to privacy requests within 30 days

Data Protection Officer

For EU users, you may contact our Data Protection Officer at dpo@cactusapp.com.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, new features or services, or legal or regulatory requirements.

Notification Process:

  • Material changes: 30 days advance notice via email or in-app notification
  • Minor changes: Updated policy posted with new effective date
  • Continued use after notice period constitutes acceptance

By using Cactus, you acknowledge that you have read and understood this Privacy Policy and agree to our data practices as described herein.