CatchUp — Privacy Policy

Last updated: July 17, 2026

CatchUp is operated by Broke & Buzzed LLC (“we,” “us”). This policy explains what we collect, why, and the control you have. We built CatchUp to be calm and private — we do not sell your data, we do not run ads, and we do not track you across the internet.

If you have questions, contact us at [email protected].

Who can use CatchUp

CatchUp is for people 18 and older. We ask for your date of birth to confirm eligibility and store only your birth year, never the full date.

What we collect

You give us:

• Account & profile: your email address (used only to sign you in with a one-time code), first name, last initial, username, and an optional bio and profile photo.
• Content you create: your posts (text, photos, polls), your creativity-prompt answers, private replies you send, and reactions.
• Your connections: who you connect with, the priority tier you privately assign them, and any circles you create.
• Settings: your Catch Up schedule, time zone, and notification preferences.

Collected automatically:

• Device push token (only if you enable notifications), so we can send your “Catch Up is ready” alerts.
• Basic, privacy-preserving analytics about app events (e.g., a session was completed) to keep the app working. These are not sold or used for advertising.

We deliberately do NOT collect:

• Location. We strip EXIF/GPS metadata from every photo you upload, on our servers, before it is ever stored or shown.
• Your raw contacts. If you ever use contact matching, contacts are hashed on your device for matching and never stored raw.
• We do not build advertising profiles or share your data with data brokers.

How we use it

• To provide the core service: run your scheduled Catch Ups, deliver updates from your people, and keep your account working.
• To send the notifications you turned on.
• To keep CatchUp safe (see Safety & moderation below).
• To meet legal obligations.

We do not sell your personal information, and we do not use it for third-party advertising.

How it’s stored and protected

• Your data is hosted on Supabase (Postgres database + object storage) with row-level security, so each person can only reach their own data and content shared with them.
• Photos and media are stored privately and served through short-lived signed URLs — never public links.
• Your session is stored securely on your device (in the iOS Secure Store).