Privacy Policy

Last updated: September 8, 2026

CatList ("CatList", "we", "us", or "our") is operated by Popworks ("Popworks"). This Privacy Policy explains what information CatList collects when you use the app, how we use it, and the choices available to you. By using CatList, you agree to the collection and use of information in accordance with this policy.

Information we collect

Account information. When you sign in with Google, Sign in with Apple, or as a guest, we receive your email address, display name, and profile photo (if provided by that sign-in method), and a unique account identifier. This is stored against your account on our servers.

Content you save. CatList lets you save "clips" — links, notes, photos, prices, addresses, and hashtags you choose to add. This content is stored on our servers so it can sync across your devices. When you save a link to a public post (for example, from Instagram or Threads), we may retrieve and cache basic public metadata about that post (such as a preview image) to display it in your list. We do not use AI to read, analyze, or generate content from anything you save.

Photos and camera. If you choose to attach a photo to a clip, CatList accesses only the specific photo you pick, or takes a picture with your camera if you choose to. We never scan or upload your photo library in the background.

Location. If you grant permission, CatList uses your device's location while the app is in use to show nearby addresses and sort search results by distance. Your location is not stored against your account or shared with anyone.

Push notifications. If you enable notifications, we store a device push token so we can deliver them to your device.

Diagnostic and usage data. We use Firebase Crashlytics and Firebase Analytics to collect crash reports and basic usage/performance data (such as device model, OS version, and which screens are used) to help us find and fix problems and improve the app. We also use Firebase App Check to verify that requests come from a genuine, unmodified copy of the app.

How we use your information

• To provide, operate, and maintain CatList, including syncing your saved content across your devices.
• To let you optionally share a clip with someone else via a share link.
• To send you notifications you've enabled.
• To diagnose crashes, fix bugs, and understand how the app is used so we can improve it.
• To communicate with you if you contact us for support.

What we don't do

• We do not sell your personal data.
• We do not show ads, and we do not use your data for advertising or ad targeting.
• We do not track you across other companies' apps or websites.

Sharing of information

We do not share your personal information with third parties except:

• With service providers who process data on our behalf strictly to operate the app (currently Supabase for database and backend hosting, and Google Firebase for authentication, crash reporting, analytics, and push notifications).
• When you use CatList's share feature, the specific clip you choose to share becomes viewable to anyone with the link you send — no account or public directory is involved.
• If required to comply with a legal obligation, or to protect the rights, property, or safety of Popworks, our users, or the public.

Data retention and deletion

We keep your account information and saved content for as long as your account is active. You can delete your account at any time from within the app (Profile → Edit Profile → Delete Account). Deleting your account removes your saved clips, categories, and other content associated with it. We retain a limited record of deleted accounts (such as the account identifier and deletion date) as required for fraud prevention, legal compliance, and dispute resolution.

Children's privacy

CatList is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

International data transfers

Popworks is based in Hong Kong, but the infrastructure we use (Supabase and Google Firebase) may store and process data in other countries or regions. By using CatList, you understand that your information may be transferred to and processed in jurisdictions with data protection laws that may differ from those of your home country.

Your rights

Subject to applicable law, including Hong Kong's Personal Data (Privacy) Ordinance (PDPO), you may have the right to request access to, correction of, or deletion of your personal data. You can exercise most of these rights directly in the app, or by contacting us at the email address below.

Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above. Continued use of CatList after a change means you accept the revised policy.

Contact us

If you have any questions about this Privacy Policy, contact us at popworks.co@gmail.com.