Privacy Policy

Last updated: March 9, 2026

1. Information We Collect

When you use EachOtter, we collect:

  • Account information (name, email) from your Google or Facebook login
  • Contact information you add (names, birthdays, anniversaries, addresses, phone numbers)
  • Relationship and group (Raft) data you create
  • Gift tracking data
  • Calendar event data if you enable Google Calendar sync
  • Notification preferences

2. How We Use Your Information

We use your information to:

  • Provide the EachOtter service (reminders, contact management, gift tracking)
  • Send reminder notifications via SMS (if enabled)
  • Sync with Google Calendar and Google Contacts (if authorized)
  • Improve the service through aggregated, anonymized usage analytics

3. Data Security

We take security seriously. All OAuth access tokens are encrypted using AES-256-GCM before storage. We use HTTPS for all data transmission and follow industry-standard security practices including input validation, parameterized queries, and session-based authentication.

4. Data Sharing

We do not sell, rent, or share your personal information with third parties for marketing purposes. We may share data only with:

  • Service providers that help us operate EachOtter (e.g., Twilio for SMS, MongoDB for storage)
  • Law enforcement when required by law

5. Your Rights

You have the right to:

  • Access your data at any time through the app
  • Export all your data in JSON format via Settings
  • Request deletion of your account and all associated data
  • Opt out of SMS notifications at any time
  • Revoke Google or Facebook access at any time

6. Data Retention

We retain your data for as long as your account is active. If you request account deletion, we will permanently delete all your data within 30 days. Anonymized, aggregated analytics data may be retained indefinitely.

7. Cookies

We use essential cookies only for authentication (session management via NextAuth). We do not use tracking cookies or third-party advertising cookies.

8. Children's Privacy

EachOtter is not intended for use by children under 13. We do not knowingly collect information from children under 13.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via the app or email. Continued use of EachOtter after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this privacy policy or your data, please contact us at privacy@eachotter.com.