Privacy Policy

Introduction

Welcome to Cato, operated by Vol Labs FZCO ("Vol Labs," "we," "our," or "us"). We are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services (collectively, the "Service").

By using Cato, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Service.

Information We Collect

Personal Information

When you create an account, we may collect:

• Email address
• Name or username
• Profile picture (optional)
• Authentication credentials

Habit and Tracking Data

To provide our core functionality, we collect and store:

• Habits you create and track
• Daily completion records and streak data
• Vitality scores and analytics
• Notes and custom habit settings
• Usage timestamps and frequency

Automatically Collected Information

• Device information (model, operating system, unique device identifiers)
• App usage data and analytics
• Crash reports and performance data
• IP address and general location (country/region level only)

How We Use Your Information

We use the collected information for:

• Providing the Service: Managing your account, storing your habits, calculating streaks and vitality scores
• Personalization: Customizing your experience and displaying your progress analytics
• Communication: Sending notifications, updates, and responding to your inquiries
• Improvement: Analyzing usage patterns to enhance features and user experience
• Security: Detecting and preventing fraud, abuse, and security incidents
• Legal Compliance: Fulfilling our legal obligations and enforcing our terms

Data Storage and Security

Your data is stored securely using industry-standard encryption protocols. We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

• Service Providers: With trusted third-party service providers who assist in operating our Service (e.g., cloud hosting, analytics, customer support)
• Legal Requirements: When required by law, court order, or governmental request
• Protection of Rights: To protect our rights, privacy, safety, or property, and that of our users or the public
• Business Transfers: In connection with a merger, acquisition, or sale of assets (users will be notified)
• With Your Consent: Any other sharing with your explicit consent

Your Data Rights

You have the following rights regarding your personal information:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and associated data
• Export: Download your habit data in a portable format
• Opt-out: Unsubscribe from marketing communications at any time
• Withdrawal: Withdraw consent for data processing where applicable

To exercise these rights, please contact us at hi@vollabs.io

Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our Service. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal, accounting, or security purposes.

Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will delete such information immediately.

International Data Transfers

Your information may be transferred to and maintained on servers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. By using our Service, you consent to such transfers.

Third-Party Services

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies.

We may use third-party analytics services (such as Google Analytics) to help understand how our Service is used. These services may collect information sent by your device.

California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell your information)
• Right to non-discrimination for exercising your privacy rights

GDPR Rights (European Users)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right to access, rectification, and erasure of your personal data
• Right to restrict or object to processing
• Right to data portability
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority

Push Notifications

We may send you push notifications to remind you about your habits or inform you about app updates. You can disable these notifications at any time through your device settings or within the app.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Significant changes will be communicated via email or in-app notification. Your continued use of the Service after changes constitutes acceptance of the updated policy.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: