Last updated: May 24, 2026

This Privacy Policy describes how Caddie (the "Service") collects, uses, and shares information about you when you use the Caddie iPhone application and related services. Caddie is operated by Daniel Hariyanto ("Caddie", "we", "us", "our"). By using the Service, you agree to the practices described here.

1. Information we collect

1.1 Information you provide

Account information. When you sign in with Apple, we receive your Apple-issued user identifier and, if you choose to share it, your name and email address.
Profile information. The preferred name and time zone you provide during onboarding.
Conversation content. Messages you send to Caddie, files you upload, and instructions you give the assistant.
Integration data. If you connect a third-party service (for example, Google Workspace, Microsoft 365, or Notion), we receive access tokens and the data from that service that is necessary to complete the tasks you direct.
Support correspondence. Email and in-app messages you send to our support addresses.

1.2 Information collected automatically

Device and usage data. Device model, iOS version, application version, language, crash reports, and anonymized usage events.
Subscription status. Active tier, renewal status, and receipts received from Apple.

1.3 Information from third parties

Apple. Authentication, subscription, and receipt information.
Service providers. Limited operational data from the infrastructure and AI providers we use to run the Service (see Section 4).

2. How we use information

We use information to:

Provide, operate, and maintain the Service;
Execute the tasks you instruct Caddie to perform;
Process subscriptions, billing, refunds, and renewals through Apple;
Communicate with you about your account, security, and important Service updates;
Improve the Service, debug issues, and develop new features;
Detect, prevent, and respond to abuse, fraud, or violations of our Terms;
Comply with applicable legal obligations.

We do not sell your personal information. We do not use your conversation content or uploaded files to train artificial intelligence models, our own or anyone else's.

3. How we share information

We share information only as described below:

Service providers. We share data with third parties that help us operate the Service under contracts requiring them to protect your data (see Section 4).
At your direction. When you instruct Caddie to interact with a third-party service (for example, to send an email or schedule a meeting), we share with that service only the data necessary to complete the task.
Legal requests. If required by law, court order, or to protect our rights, our users, or third parties, we may disclose information.
Business transfers. In the event of a merger, acquisition, or asset sale, your information may be transferred. You will be notified of any change in ownership or material change in use of your data.

4. Service providers

We rely on the following categories of third parties to operate Caddie. Each is bound by data protection terms.

Cloud infrastructure for hosting your dedicated backend instance and storing your data.
AI model providers to generate Caddie's responses. Conversation content may be transmitted to these providers solely to produce a reply; they are contractually prohibited from using your data to train their models.
Apple Inc. for authentication, in-app purchases, subscription management, and platform-level analytics.
Customer-support tooling used to triage and respond to support inquiries.
Aggregated analytics to understand, in aggregate and without identifying individual users, how the Service is used.

5. Data retention

We retain your account data for as long as your account is active. When you request deletion, we remove your data within 30 days, except where retention is required for legal compliance, dispute resolution, or enforcement of our agreements. Backups containing your data may persist for up to an additional 30 days before they cycle out.

6. Your rights

Depending on where you live, you may have the following rights with respect to your personal information:

Access — request a copy of the personal information we hold about you;
Correction — ask us to correct inaccurate or incomplete data;
Deletion — ask us to delete your account and associated data;
Portability — receive your data in a portable, machine-readable format;
Objection — object to certain processing of your data;
Restriction — request that we limit how we use your data;
Withdraw consent — where processing is based on consent, withdraw it at any time.

To exercise any of these rights, email hey@heycaddie.app. We will respond within 30 days. You may also have the right to lodge a complaint with your local data protection authority.

7. California privacy rights

California residents have rights under the California Consumer Privacy Act (CCPA), including the rights to know, delete, and correct personal information, and the right not to be discriminated against for exercising those rights. We do not sell or share personal information for cross-context behavioral advertising. To exercise your rights, email hey@heycaddie.app.

8. Children's privacy

The Service is not directed to children under 13 (or under 16 in jurisdictions where that is the applicable threshold), and we do not knowingly collect personal information from children under those ages. If you believe a child has provided us with personal information, contact us at hey@heycaddie.app and we will delete it.

9. International data transfers

Caddie is operated from the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. We rely on appropriate safeguards (including Standard Contractual Clauses where applicable) to protect your information during international transfers.

10. Security

We use industry-standard technical and organizational measures to protect your information, including encryption in transit and at rest, per-user isolation of backend instances, and least-privilege access controls. No system is perfectly secure; if you believe your account has been compromised, contact us at hey@heycaddie.app immediately.

11. Changes to this policy

We may update this policy from time to time. Material changes will be communicated by in-app notification or email, and the "Last updated" date at the top of this page will reflect the change. Continued use of the Service after changes are posted constitutes acceptance.

12. Contact

Caddie · operated by Daniel Hariyanto
Email: hey@heycaddie.app