Caelo Privacy Policy

Effective date: October 3, 2026

This Privacy Policy explains how Caelo ("Caelo", "we", "us", "our") collects, uses, shares, and protects information when you use the Caelo mobile app (the "App") — a social wishlist and gifting app available on Android and iOS. It applies wherever Caelo is available, and describes rights that may apply to you depending on where you live, including under the EU/UK General Data Protection Regulation ("GDPR"), the California Consumer Privacy Act as amended by the CPRA ("CCPA/CPRA"), Brazil's Lei Geral de Proteção de Dados ("LGPD"), Canada's PIPEDA, and Australia's Privacy Act 1988.

1. Who we are

Caelo is developed and operated by an individual developer based in the Netherlands.

Caelo is operated by Alexendly Jansen, as an individual.

Because Caelo is operated from within the Netherlands (an EU/EEA member state), we do not separately need an EU representative under GDPR Article 27 — we are already established in the EU.

2. Age requirements

Caelo is a general-audience app. You must be at least 13 years old to create an account. If the age of consent for information-society services in your country is higher than 13 (this varies by EU member state up to 16), you must also have the consent of a parent or legal guardian, or otherwise meet the applicable local age of digital consent, to use Caelo.

Caelo also has an optional, off-by-default "NSFW content mode" that reveals content flagged as mature/18+ by our moderation systems or by the users who posted it. Turning this on requires you to confirm, in-app, that you are 18 or older. This is a self-attestation, not a verified age check.

3. Information we collect

3.1 Information you provide directly

• Account credentials — email address and password (handled by Firebase Authentication), or, if you choose, sign-in via Google or Sign in with Apple (we receive your name/email from those providers as permitted by your choices there).
• Profile information — username, display name, bio, profile photo, and (optional) date of birth, country, and city. Your first/last name and email are stored separately from your public profile and are only ever shared with other users according to your own visibility settings.
• Content you create — wishlists, wishlist items (titles, descriptions, prices, links, images, categories), comments, likes, saves, purchase/reservation marks, and your membership in circles (groups) and collaborative wishlists.
• Photos you upload, or product images from links you paste into the app — every image is automatically classified for policy compliance (see §6) before it is ever stored in a way other users can view.
• Location — only if you tap "Use current location" in a country/city picker. We use it once to look up your city/country text and do not store precise coordinates.
• Communications — anything you send us via support requests, feedback forms, or content reports.
• Referral information — if you invite a friend or are invited, we record that connection so referral rewards can be attributed correctly.

3.2 Information collected automatically

• Device & usage data — device model, operating system, app version, general usage events, and crash reports, via Firebase Analytics, Crashlytics, and Performance Monitoring. Collection of this analytics/diagnostic data is off by default and only begins once you accept it in the in-app consent screen; you can withdraw consent at any time in Settings.
• Push notification token — a device token (Firebase Cloud Messaging) so we can deliver notifications you're entitled to see (likes, follows, comments, collab activity, etc.).
• Advertising & device identifiers — for free-tier users only (see §7), the Google Mobile Ads SDK and Google AdMob collect advertising identifiers and ad-interaction data to serve and measure ads, and (if you choose to watch a rewarded ad) to verify and grant the resulting in-app reward.

3.3 Information from purchases

If you subscribe to Caelo Premium or make an in-app purchase, the transaction is handled by Apple's App Store or Google Play Billing, and processed on our behalf by RevenueCat for subscription management. We never receive or store your payment card details — only subscription status and purchase metadata needed to grant the entitlement.

4. How we use information

• Create and maintain your account, and provide the App's core features (wishlists, social feed, following, collabs, circles, notifications).
• Personalize what you see (your feed, suggested users, search).
• Detect, prevent, and moderate abuse, spam, scams, and content that violates our policies — including automated NSFW/explicit-content classification of every image before it's shown to anyone (see §6).
• Enforce free-tier vs. premium limits and process subscription payments.
• Send you notifications and respond to support requests.
• Show advertising to free-tier users and measure ad performance (see §7).
• Analyze crash reports and usage trends to improve the App — only for users who opted in to analytics collection.
• Comply with legal obligations and enforce our Terms of Service.

5. Our legal bases for processing (GDPR)

For users in the EEA/UK, we rely on one of the following legal bases for each processing activity:

• Contract — processing needed to create your account and provide the features you sign up for.
• Consent — analytics/crash reporting, personalized advertising for EEA/UK users (collected via the Google-provided consent message shown before any ad request), and enabling NSFW content mode. You can withdraw consent at any time in Settings; withdrawal doesn't affect processing already carried out.
• Legitimate interests — securing the App, preventing fraud and abuse, and improving reliability — balanced against your rights and never used to override your objection where you have one.
• Legal obligation — where we must retain or disclose information to comply with the law.

6. How we share information

6.1 With other users

Caelo is a social app — content you mark public (public wishlists/items, your profile if public, your activity in shared circles/collabs) is visible to other users by design. You control most of this through your privacy settings (public vs. private wishlists, follower-only profile, blocking, muting).

6.2 With service providers

We share information with the following categories of service providers, each acting on our behalf under their own data processing terms. We do not sell your personal information to anyone.

• Google Firebase (Authentication, Firestore database, Cloud Storage, Cloud Functions, Analytics, Crashlytics, Performance Monitoring, Remote Config, Cloud Messaging, App Check) — our core backend infrastructure, run on Google Cloud.
• Google Cloud Vision API — classifies uploaded/scraped images for explicit or mature content before they're hosted anywhere visible to other users.
• Google AdMob — serves in-feed ads and rewarded video ads to free-tier users, and verifies rewarded-ad completions server-side.
• RevenueCat — manages subscription/purchase state on our behalf, relaying to and from Apple's App Store and Google Play Billing.
• Apple and Google — as the app stores you downloaded Caelo from and (if applicable) your in-app purchase processor.
• ScraperAPI — when you paste a product link to add an item, the URL you provide (not your account data) may be fetched through this service to read the product's public page details.
• Cloudflare — delivers already-moderated images faster via a content delivery network, and forwards email sent to our support address to our support inbox.
• Brevo — sends our service emails (for example account and moderation notices) and, if you join our waitlist or mailing list, stores your email address and sends you the emails you signed up for. Brevo is based in the EU.

6.3 Legal disclosures

We may disclose information if required by law, legal process, or to protect the rights, property, or safety of Caelo, our users, or the public.

6.4 Business transfers

If Caelo is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction; we'll notify you of any such change and any choices you may have.

7. Advertising, analytics & your choices

Caelo shows ads only to free-tier users; Premium subscribers never see ads. Advertising is provided through Google AdMob, which may use advertising identifiers and other device signals to select and measure ads, and — where you choose to watch a rewarded ad — to unlock a limited additional wishlist, item, circle, or collab beyond the free-tier limit.

EEA/UK users: before any ad-related data collection, you're shown a consent message (via Google's User Messaging Platform) covering the use of your data for advertising purposes, consistent with Google's EU User Consent Policy. You can change your choice at any time by clearing the app's stored consent state (via your device's app settings) to be shown the message again.

California & other U.S. state residents: we do not sell personal information. Depending on how Google's advertising services are configured, providing information to an ad partner for advertising purposes can be considered "sharing" under the CPRA's definition of cross-context behavioral advertising. You can opt out at any time in the App: Settings → Data & Privacy → "Do Not Sell or Share My Info." Turning it on means every ad request the App makes from that device asks for non-personalized (contextual) ads only. The setting applies per device, takes effect for ads loaded after you change it, and requires no request to us — but you can still contact us (§15) if you'd prefer we action it for you. Global Privacy Control is a browser-level signal with no equivalent in a native mobile app, so there is no GPC signal for the App to detect; the in-app control above is the mechanism we provide. You can also review and control ad personalization directly through your device's ad settings (Android: Settings → Privacy → Ads; iOS: Settings → Privacy & Security → Apple Advertising / Tracking) and through Google's own ad settings.

Analytics & crash reporting (Firebase Analytics, Crashlytics, Performance Monitoring) is off by default and only activates once you explicitly consent in the in-app prompt shown at first launch. You can withdraw this consent at any time from Settings.

8. Your rights

Wherever you're located, you can always, from within the App:

• Access & export your data (Settings → export your data).
• Correct your profile information at any time.
• Delete your account, which removes your profile and content and cascades the deletion across our systems.
• Withdraw consent for analytics or NSFW content mode at any time.
• Opt out of ad personalization ("Do Not Sell or Share My Info" in Settings → Data & Privacy), which switches that device to contextual-only ads.

For anything else, contact us (§15) and we will honor applicable requests regardless of where you live. Depending on your location, you may also have the following region-specific rights:

EEA / UK (GDPR)

The right to access, rectify, erase, or restrict processing of your data; the right to data portability; the right to object to processing based on legitimate interests; the right to withdraw consent; and the right to lodge a complaint with your local data protection authority — for the Netherlands, the Autoriteit Persoonsgegevens.

California & other U.S. states (CCPA/CPRA and similar state laws)

The right to know what personal information we collect, use, and disclose; the right to delete; the right to correct inaccurate information; the right to opt out of sale or sharing (see §7); the right to limit use of sensitive personal information; and the right not to be discriminated against for exercising these rights. You may use an authorized agent to submit a request on your behalf.

Brazil (LGPD)

The right to confirmation of processing, access, correction, anonymization, blocking or deletion of unnecessary data, portability, and information about third parties your data has been shared with, and the right to complain to Brazil's National Data Protection Authority (ANPD).

Canada (PIPEDA)

The right to access and request correction of your personal information, and to lodge a complaint with the Office of the Privacy Commissioner of Canada.

Australia (Privacy Act 1988)

The right to access and correct your personal information, and to lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

9. Children's privacy

Caelo is not directed at children under 13, and we do not knowingly collect personal information from anyone under 13. If we learn that we've collected personal information from a child under 13 without appropriate consent, we will delete it as soon as possible. If you believe a child has provided us with personal information, please contact us (§15).

10. Data retention

We keep your information for as long as your account is active. When you delete your account, your profile and content are removed and the deletion cascades across our systems. We may retain limited information where necessary for legal compliance, dispute resolution, fraud/abuse prevention, or security (for example, moderation and audit logs), for no longer than reasonably necessary for those purposes.

11. Data security

We use industry-standard safeguards to protect your information, including encryption in transit, Firebase security rules that gate access at the database level, and server-side verification for sensitive actions. No method of transmission or storage is 100% secure, and we can't guarantee absolute security.

12. International data transfers

Caelo's infrastructure runs on Google Cloud/Firebase, which may process and store data in regions outside your own country, including the European Union and the United States. Where personal information is transferred internationally, our service providers rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

13. Third-party links & content

Wishlist items may link to third-party retailer websites (for example, when you paste a product link). We are not responsible for the privacy practices of any third-party site you visit from within Caelo — please review their privacy policies separately.

14. Changes to this policy

We may update this Privacy Policy from time to time. We'll update the "Effective date" above, and for material changes we'll provide a more prominent notice in-app.

15. Contact us

Questions, requests, or complaints about this Privacy Policy or your data can be sent to:

support@mycaelo.com