Privacy policy
Last updated 12 August 2026. Plain-language summary first, full terms below.
The short version
- Your files are end-to-end encrypted. We store ciphertext and cannot read them.
- We collect the minimum needed to run your account: email, billing details, and basic device metadata for sync.
- We never sell your data or use it for advertising.
What we collect
Account data (email, display name), billing data (processed by our payment provider; we store only the last four digits and expiry), and operational metadata such as device identifiers, sync timestamps, and storage totals. File contents and file names are encrypted client-side and are opaque to us.
How we use it
To provide sync and sharing, secure the service, prevent abuse, bill you, and send service notices. We rely on legitimate interest and contract as our legal bases under the GDPR.
Retention
Account data is kept while your account is active and for 30 days after deletion, after which encrypted content and backups are purged. Invoices are retained as required by Icelandic tax law.
Your rights
You can access, export, correct, or delete your data at any time from the dashboard, or by emailing privacy@catttkak.homes. You may also lodge a complaint with the Icelandic Data Protection Authority (Persónuvernd).