Privacy Policy
In short: we collect only what the service needs and we never sell your data.
No personal data is sold or used for third-party advertising.
Card numbers are processed by the App Store and Google Play β they never reach us.
Delete a photo or your entire account β its data is deleted with it.
This Privacy Policy describes what data the CatOnMap service (the mobile app and the catonmap.app website) collects, how it is used and what rights you have. The data controller is Sanders Soft LTD (sanderssoftltd.com).
1What data we collect
- Account data: e-mail address, nickname, avatar. When you sign in with Google, we receive your e-mail and profile name from Google; your Google password is never shared with us.
- Password (for e-mail registration) β stored only as a cryptographic hash; we never see or store the original password.
- Photos and geodata: cat photos, the shooting location coordinates, the country and city derived from them, and the date and time of the shot.
- Lost Cat data: photos of the missing pet, the place and date it went missing β only if you create a search request.
- Purchase data: the fact and type of a purchase (subscription, storage pack, Lost Cat request) received from the App Store / Google Play. Payment details (card numbers etc.) are processed exclusively by the app stores and never reach us.
- Technical data: session tokens, device identifiers for push notifications, API request logs.
2How we use the data
- Building your collections and country galleries β based on shooting coordinates.
- Automatic photo moderation: every shot is analysed by a neural network (a cat is present, no people, no inappropriate content). Photos that fail the check may additionally be reviewed by a human moderator.
- Running the Lost Cat service: AI compares photos of a missing cat with approved public shots taken by other users within the search radius.
- Scoring weekly battles and rankings.
- Service e-mails: registration confirmation codes, password reset links, Lost Cat match notifications. Delivery is handled by the transactional e-mail service ZeptoMail (Zoho, EU servers).
- In-app notifications about photo status, battles and matches.
3Where the data is stored
Photos are stored in Cloudflare R2 cloud object storage and served through a CDN. Credentials and metadata live in a protected database on the service's servers in Europe. Database backups are created daily and kept for 14 days.
4Who can see your photos
- Photos with the "pending moderation" status are visible only to you.
- Approved photos appear in public country galleries and your public profile (if enabled).
- Rejected photos are never published anywhere.
5Retention
Data is kept for as long as you have an account. When you delete a photo, its files are removed from storage. Confirmation codes are valid for 15 minutes and password reset links for 1 hour, after which they expire.
6Your rights
- Receive a copy of your data.
- Correct your profile data (in the app or website settings).
- Delete individual photos or your entire account with all its data.
- Withdraw consent to processing β by stopping use of the service and deleting your account.
7Children
The service is not intended for children under 13. We do not knowingly collect children's data; if you become aware of such a case, let us know and the data will be deleted.
8Changes to this policy
We may update this policy. The current version is always available on this page; the date of the last update is shown at the top. We will announce material changes in the app.