Last updated: April 16, 2026
Litterboxer (the “app”) is operated by Bradford Operations LLC (“we”, “us”), a US company. This policy explains what personal data we collect, the legal basis on which we process it, how long we keep it, and the rights you have. Contact us at any time via our contact form.
Email address, chosen username, display name, and a bcrypt-hashed password (for email sign-up). For Sign in with Apple or Sign in with Google we store an opaque subject identifier issued by those providers so we can recognize you on return visits. If you grant a profile picture, we store a URL to it.
Cats you add, photos, reviews, ratings, tags, comments, wishlist entries, diary entries, follow relationships, likes, and reports you file.
iOS device token for push notifications, app version, and the IP address and user-agent of your requests (used for rate limiting, abuse detection, and the contact form). We do not use third-party analytics cookies on our website. Inside the iOS app we use PostHog product analytics, which you can disable from Settings → Privacy → Analytics at any time.
Pro subscriptions are processed by Apple. We receive a transaction identifier and expiration date from Apple so we can grant Pro features. We never see your payment card.
We record the timestamp at which you confirmed you meet our minimum age (13). When you sign up with Apple or Google, we treat the age-gate on those accounts as sufficient confirmation.
We rely on the following providers. Each processes data on our behalf under a Data Processing Agreement and publishes Standard Contractual Clauses for transfers out of the EU/UK:
Our servers and processors are primarily located in the United States. If you are in the EEA, UK, or Switzerland, your data is transferred to the US under Standard Contractual Clauses published by the European Commission, together with supplementary safeguards (encryption in transit and at rest, access controls). Copies of the clauses are available from each provider; we’re happy to point you at them on request.
You have the right to:
To exercise any of these rights, use the contact form and we’ll respond within 30 days.
Every photo you upload is automatically checked by an AI model for two things: whether it contains a cat, and whether it is appropriate for a general-audience app. Photos that fail either check are deleted immediately and never stored in our database or blob storage.
If you are a California resident, you have the following additional rights, regardless of whether we are subject to the CCPA:
We do not use your data for cross-context behavioral advertising. To exercise these rights, contact us via the contact form.
Litterboxer is rated 13+ and is not intended for children under 13. We do not knowingly collect personal information from children under 13. EU member states may apply a higher minimum of 16 for consent-based processing; in those jurisdictions, parental consent is required for users under that age. If you believe a child below our minimum age has created an account, reach us via the contact form and we’ll delete the account promptly.
TLS for all data in transit, AES-at-rest via Neon and Cloudflare R2, bcrypt for passwords, TOTP-based two-factor authentication for administrators. No system is perfectly secure; we follow a documented incident response procedure and will notify affected users and regulators when required by law (within 72 hours under GDPR).
We may update this policy. Material changes will be announced in the app. The “Last updated” date at the top of this page always reflects the current version.
All requests, questions, and data-subject rights requests go through our contact form. We aim to reply within 30 days.
Bradford Operations LLC · New York, NY, USA