Privacy Policy
Effective August 25, 2026
Cato is built to hold as little of your life as possible.
What lives only on your phone
Your orders, your proofs, your record (the wall), your stats, your kept quotes, and your preferences are stored on your device. Proof text is never uploaded. Deleting the app deletes this record.
What we process
- Your answers, to write your orders. When Cato writes your daily orders, your onboarding answers and stats are sent to our order service, used to generate the orders, and not retained beyond servicing that request.
- Your phone number. Verifying your number creates your account and is used for account recovery and sign-in. It is stored by our authentication provider (Supabase) and verified through Twilio. We never sell it, and no one calls you.
- A weekly signal. A random identifier (not your name or number), the week you installed, and whether the app was used that week. This tells us whether Cato is alive. Nothing else rides along.
- Purchases. Handled by Apple and RevenueCat. We never see your payment details.
What we do not do
No ads, no ad SDKs, no tracking across apps, no selling or sharing of data, no analytics beyond the weekly signal above.
Deleting your account
Settings → Delete account. This removes your number from our systems and erases the record on your phone. It cannot be undone.