Privacy Policy
1. Overview
This Privacy Policy explains how 8CatsBook collects, uses, discloses, and safeguards personal data when you use the Service, and describes your rights under applicable laws including the EU/UK GDPR, the California Consumer Privacy Act (as amended by the CPRA), Brazil LGPD, Canada PIPEDA, and others.
Access/Deletion: Profile → Settings → Privacy → “Download my data” / “Delete account,” or email [email protected].
Marketing opt-out: Unsubscribe link in emails; toggle in app Settings.
Ads opt-out (U.S. states/CPRA “Do Not Sell or Share”): App Settings → Privacy → “Do Not Sell or Share.”
Cookies/consent: Website footer → “Cookie Preferences.”
Appeal a decision: Reply to our response email with “Appeal” in the subject.
2. Controller; scope
8CatsBook LLC is the data controller for processing described herein. For some activities (e.g., payments), third parties act as independent controllers. For creator/partner programs, we may act as processor per separate agreements.
3. Personal data we collect
We collect the following categories of information (exact data elements vary by use, device, and settings):
Identifiers: name, display name, username/handle, email, phone (optional), unique device IDs, advertising IDs.
Account & profile: avatar, bio, language, country/region, age bracket.
Commercial data: purchases, subscriptions, refund history, gift cards, virtual items (Coins) balances.
Payment data: processed by payment processors (e.g., Apple, Google, Stripe); we receive limited tokens and status, not full card numbers.
Online activity & usage: pages/screens viewed, clicks, reading time, chapters completed, scroll/cadence metrics, search terms, content interactions (likes, follows, comments), referral URLs.
Device & technical: app version, OS, device type, network, IP address, crash logs, diagnostics, cookies and similar technologies.
Approximate location: derived from IP/country settings or user selection (we do not collect precise GPS unless you explicitly enable a feature that needs it).
Communications: messages you send to support; reports; survey responses; beta feedback.
User Content: comments, reviews, posts, uploads, and any metadata you provide.
Inferences & personalization signals: preferences, segments, predicted interests, churn/engagement scores.
Social/contacts (optional): if you choose to sync contacts or link social accounts, we may receive hashed identifiers and friend lists to help you connect.
Sensitive data (limited, optional): for certain programs (e.g., creator payouts or tax compliance) we may collect government IDs or tax numbers via secure processors; for age-gating we may process age range. We do not collect biometric data.
4. Sources of data
Directly from you (account creation, settings, purchases, communications).
Automatically from your device/app/browser.
From third parties: app stores, payment processors, ad/analytics partners, social networks (if linked), anti-fraud providers, and our affiliates.
5. Purposes and legal bases (GDPR/UK GDPR)
We process personal data for:
Provide and operate the Service (create/maintain accounts, deliver content, enable purchases, provide support). Legal bases: contract performance; legitimate interests.
Personalization & recommendations (content ranking, feed tuning). Legal bases: legitimate interests; consent where required for cookies/ads.
Safety & moderation (detect abuse, spam, IP infringement, fraud). Legal bases: legitimate interests; legal obligation.
Marketing & communications (service announcements, offers, newsletters). Legal bases: consent where required; legitimate interests otherwise.
Analytics & improvement (measure performance, debug, research). Legal bases: legitimate interests.
Compliance (tax, accounting, regulatory reporting, sanctions screening for payouts). Legal bases: legal obligation; legitimate interests.
With your consent for any purpose not listed above or where consent is required by law (you may withdraw consent at any time).
6. “Notice at Collection” for California and similar U.S. state laws
We collect the categories listed in Section 3 for the purposes in Section 5. We do not sell personal information in the traditional sense. We may “share” (as defined by the CPRA) identifiers and internet/activity data with advertising and analytics partners for cross-context behavioral advertising. You can opt-out via the in-app “Do Not Sell or Share My Personal Information” link or your device-level ad settings. We retain information as described in Section 10.
7. Cookies and similar technologies
We use cookies, SDKs, and similar technologies for essential operations, analytics, personalization, and (where applicable) advertising. Where required, we obtain consent via a consent banner and honor your preferences. You can change preferences in settings.
8. Advertising and analytics
We may work with analytics providers (e.g., Firebase/Google Analytics), A/B testing tools, crash reporting, and (where applicable) ad partners. These partners may receive identifiers, device data, app interactions, and approximate location to provide their services to us. Where law requires, we seek consent or provide opt-out mechanisms.
9. Disclosures of personal data
We disclose personal data to:
Service providers/processors who assist with hosting, analytics, messaging, payments, fraud prevention, moderation, and support, under contracts that limit their use to our instructions.
Partners & publishers (for example, when you subscribe to a specific creator channel, we may share aggregated performance or necessary account information to fulfill benefits).
Legal, safety, and compliance (to comply with law, enforce terms, protect rights, respond to lawful requests).
Business transfers (in connection with a merger, acquisition, reorganization, or sale of assets; we will notify you where required).
With your direction or consent (e.g., linking an external account, entering a co-promotion).
We do not permit our processors to use data for their own unrelated purposes.
10. Retention
We retain personal data only as long as necessary for the purposes in this Policy, to comply with legal obligations, resolve disputes, and enforce agreements. Typical retention periods:
Account data: for the life of the account and up to 24 months after closure (unless we must retain longer for legal reasons).
Purchase/transaction data: up to 7 years (tax/audit).
Logs/diagnostics: 12–24 months.
Marketing consents & opt-outs: as required to honor your preferences. When retention no longer applies, we delete or de-identify data.
11. International data transfers
We operate globally. When transferring data outside your country (e.g., to the U.S.), we use appropriate safeguards such as the EU Standard Contractual Clauses (SCCs) and the UK IDTA/Addendum, and implement supplementary measures. You may request a copy of relevant transfer mechanisms.
12. Your rights
Depending on your location, you may have the right to:
Access, correct, or delete your personal data.
Port data in a structured, commonly used format.
Restrict or object to processing (including direct marketing and certain profiling).
Withdraw consent at any time, without affecting prior lawful processing.
Opt-out of “selling”/“sharing” or targeted advertising under U.S. state laws.
Appeal a denial of your request (certain U.S. states).
Lodge a complaint with a supervisory authority (e.g., your EU/UK data protection authority).
How to exercise: Use in-app Privacy settings or email [email protected]. We will verify your request and respond within the timelines required by law. Authorized agents may submit requests where permitted.
13. Automated decision-making and profiling
We use automated systems to personalize content and detect abuse. You may object to certain processing or request human review where required by law (e.g., GDPR). We do not make decisions producing legal or similarly significant effects without human involvement.
14. Children’s privacy
The Service is not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal data from such children. If we learn that a child under the applicable age has provided personal data, we will delete it. Parents/guardians who believe their child has provided data should contact [email protected].
15. Security
We implement appropriate technical and organizational measures to protect personal data, including encryption in transit and at rest, access controls, least-privilege practices, monitoring, and vendor due diligence. No system is 100\% secure; please use strong passwords and keep your credentials confidential.
16. Creator payouts and compliance
For creator/partner programs involving payments, identity verification and tax forms may be processed by specialized providers. We receive limited status data (e.g., verification passed/failed, payout identifiers) and retain records as required by law.
17. Social features and user content
Your profile information and User Content you choose to make public may be visible to others. You can adjust visibility in settings where available. Please consider carefully what you share.
18. Do Not Track
Our websites and apps do not respond to Do Not Track (DNT) signals. We honor legally required consent and opt-out signals (e.g., Global Privacy Control) in the regions where applicable.
19. U.S. state privacy disclosures (supplement)
Residents of California, Virginia, Colorado, Connecticut, Utah, and other states with similar laws have the rights described in Section 12 and the following disclosures:
Categories collected: Identifiers; commercial information; internet/network activity; geolocation (approx.); inferences; and, if you choose to provide, contact lists or government ID for payouts (sensitive).
Business purposes: As described in Section 5.
Sharing for targeted advertising: Yes, as described in Section 6 (you may opt out).
Sensitive data: Processed only for permitted, limited purposes; we do not use sensitive data to infer characteristics for advertising.
Non-discrimination: We will not discriminate against you for exercising your rights.
Financial incentives: From time to time we may offer loyalty or referral programs; material terms and opt-in will be presented at enrollment and you may withdraw at any time.
20. EEA/UK disclosures (supplement)
Controller contact: [email protected]; EU/UK Rep: [details above].
Supervisory authority: You may complain to your local authority (e.g., in Ireland, the DPC; in the UK, the ICO).
Legal bases and balancing tests: Upon request, we will provide information about our legitimate interests assessments.
Right of withdrawal for digital content: See Terms Section 22.
21. Brazil LGPD (supplement)
Brazilian users have rights similar to those listed in Section 12 and may contact our DPO at [email protected]. Where required, we appoint a local representative.
22. Changes to this Policy
We may update this Policy. If changes are material, we will provide prominent notice (e.g., in-app banner or email) and, where required, obtain consent.
23. Contact us
Privacy requests: [email protected]
DPO: [email protected]
EU/UK Representatives: [Insert contact details]
Postal: 8CatsBook LLC, [Insert Wyoming address], USA