Privacy Policy

Effective date: March 15, 2026 · Last updated: March 15, 2026

Katacy ("we," "our," or "us") operates katacy.com and the Katacy web application. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your personal data. By using Katacy, you agree to the practices described in this policy.

If you are under 13 years of age, you may not use Katacy. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will delete it promptly.

1. Information we collect

We collect information you provide directly and information generated through your use of the platform.

Account information: When you create an account, we collect your name and email address. If you sign in with Google, we receive the name and email associated with your Google account.

Subscription and payment information: When you subscribe to Pro or Pro+, your payment is processed by Stripe. We do not store your credit card number, CVV, or full payment details. We receive and store your subscription status, plan type, and billing history from Stripe.

Usage data: We collect information about how you use Katacy, including which features you access, questions you practice, answers you submit for evaluation, questions you save, and your session activity. This data helps us improve the product and power personalized features like your practice streak.

Competition date: If you choose to enter your upcoming pageant date, we store this to power the countdown feature on your dashboard.

Custom questions: If you add your own questions to the platform, those questions are stored in your account.

Communications: If you contact us by email, we retain those communications to respond to your request.

Cookies and local storage: We use cookies and browser storage to keep you logged in, remember your preferences, and analyze how the platform is used. See Section 6 for details.

2. How we use your information

We use the information we collect to:

• Create and manage your Katacy account
• Provide, operate, and improve the Katacy platform and its features
• Process your subscription payments through Stripe
• Send you transactional emails — account confirmation, password reset, billing receipts
• Send you product emails — welcome sequence, feature tips, and occasional updates. You may unsubscribe at any time using the link in any email.
• Power personalized features — your practice streak, countdown to competition, saved questions, and session preferences
• Analyze usage patterns to improve the product
• Respond to your support requests
• Comply with legal obligations

We do not sell your personal information. We do not use your data to serve third-party advertising.

3. Third-party services

Katacy uses the following third-party services that may receive your data:

• Firebase (Google): We use Firebase Authentication and Firestore to manage user accounts and store application data. Firebase is operated by Google and subject to Google's privacy policy.
• Stripe: We use Stripe to process subscription payments. When you enter payment information, it is transmitted directly to Stripe and governed by Stripe's privacy policy. We do not store payment card data on our servers.
• Resend: We use Resend to send transactional and product emails. Your email address is shared with Resend for this purpose.
• Anthropic: We use the Anthropic Claude API to power AI answer feedback features. When you submit an answer for evaluation, the text of your answer and the question are sent to Anthropic's API for processing. We do not send identifying information alongside your answer text.
• Render: Katacy is hosted on Render. Your data is processed on Render's servers.
• Google Analytics: We use Google Analytics to understand how the platform is used. This service collects anonymized usage data and may use cookies.

4. Data retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal information within 30 days, except where we are required to retain it for legal or financial compliance purposes (such as billing records, which we retain for seven years as required by tax law).

Usage data and analytics may be retained in anonymized, aggregated form indefinitely.

5. Your rights

You have the following rights regarding your personal data:

• Access: You may request a copy of the personal data we hold about you.
• Correction: You may update your account information at any time from your account settings.
• Deletion: You may request deletion of your account and associated personal data by emailing us at the address below. We will process deletion requests within 30 days.
• Unsubscribe: You may opt out of product emails at any time using the unsubscribe link in any email we send. Transactional emails (billing receipts, password resets) cannot be opted out of while your account is active.
• Portability: You may request an export of your saved questions and account data.

If you are located in the European Economic Area or the United Kingdom, you may have additional rights under the GDPR or UK GDPR, including the right to lodge a complaint with your local data protection authority.

California residents may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete it, and the right to opt out of sale. We do not sell personal information.

6. Cookies

Katacy uses the following types of cookies and similar technologies:

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in. These cannot be disabled.
• Preference cookies: Store your settings and preferences, such as your practice configuration. These persist between sessions.
• Analytics cookies: Set by Google Analytics to help us understand how the platform is used. These can be blocked using your browser settings or a browser extension.

You can manage cookies through your browser settings. Blocking essential cookies will prevent you from using the platform.

7. Children's privacy

Katacy is intended for users who are 13 years of age or older. We do not knowingly collect personal information from children under 13. During account creation, users are required to confirm they are at least 13 years old.

If you are a parent or guardian and believe your child under 13 has created a Katacy account, please contact us immediately at the address below. We will delete the account and associated data promptly.

8. Security

We implement reasonable technical and organizational measures to protect your personal information, including encrypted connections (HTTPS), secure authentication through Firebase, and access controls on our systems. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

9. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page and, for material changes, notify you by email. Your continued use of Katacy after changes are posted constitutes your acceptance of the updated policy.

10. Contact us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us:

Katacy
Email: support@katacy.com
Website: katacy.com