privacy

Catchyu — Privacy Policy

Effective date: 19 April 2026 Last updated: 3 May 2026

This Privacy Policy describes how the Catchyu Android application (the “App”), published by KaKoo Apps, handles your information.

We designed Catchyu to be a local-first auto-reply tool. By default, all of your data stays on your device. Network features (AI replies, webhooks, optional analytics) only activate when you turn them on.

1. Who we are

2. Data the App accesses

2.1 Notifications from messaging apps

Catchyu uses Android’s NotificationListenerService to read incoming notifications from messaging apps you select (WhatsApp, WhatsApp Business, Telegram, Signal, Facebook Messenger, Instagram, Viber, LINE, and any custom apps you add).

For each notification, the App extracts:

The App does not access your contacts, SMS messages, call logs, accounts, or device identifiers.

2.2 Data you create inside the App

2.3 Permissions requested

| Permission | Why | |—|—| | BIND_NOTIFICATION_LISTENER_SERVICE | Required to read notifications and send auto-replies. This is the App’s core function. | | INTERNET | Used only when you enable AI replies, webhooks, or the optional Firebase build. | | POST_NOTIFICATIONS | To show you in-app notifications (e.g. “New lead captured”). | | com.android.vending.BILLING | To process Google Play in-app purchases for Pro features. | | ACCESS_NETWORK_STATE | To detect network connectivity changes for billing state refresh. |

The App does not request permission to read your contacts, SMS, call logs, location, camera, microphone, or storage outside its own sandbox.

3. How data is stored

All App data is stored locally on your device, inside the App’s private sandbox storage:

We have disabled Android Auto Backup and Device-Transfer for this data (see data_extraction_rules.xml). Your leads, messages, and API keys are not included in automatic Google Drive backups or device-to-device transfer.

However, if you use the optional Google Drive Backup feature (Pro only), you can manually back up and restore your data — see Section 4.6.

4. When data leaves your device

Catchyu transmits data off your device only in these explicit, user-initiated scenarios:

4.1 AI-generated replies (optional, off by default)

If you enable AI replies and provide an API key, then for each rule you mark “use AI”, the following is sent over HTTPS to the provider you chose:

Supported providers and endpoints:

These providers are independent third parties governed by their own privacy policies:

If you do not enable AI, nothing is sent to either provider.

4.2 Webhooks (optional, off by default)

If you configure a webhook URL on a rule, then when that rule fires, Catchyu sends an HTTPS request to the URL you specified, containing:

{
  "event": "auto_reply",
  "sender_phone": "...",
  "sender_name": "...",
  "message": "incoming message text",
  "reply": "the reply Catchyu sent",
  "rule_id": 123,
  "timestamp": 1700000000000
}

Plain HTTP webhooks are rejected; only HTTPS is allowed. You control the destination — we do not see or store webhook payloads on our servers (we have no servers).

4.3 Google Play Billing

When you purchase a Pro subscription or the lifetime upgrade, the Google Play Billing Library exchanges purchase tokens with Google Play’s servers. We do not receive your payment details. See https://policies.google.com/privacy.

4.4 Firebase Analytics & Crashlytics (optional, build-time)

Some distributions of the App include Firebase Analytics and Firebase Crashlytics (Google services).

If included, the App sends the following to Google:

We do not send your name, email, contact list, message content, or any personally identifying information through Firebase.

If google-services.json is not bundled with the build you installed, Firebase is fully disabled and no analytics or crash data is transmitted. Google’s privacy policy: https://firebase.google.com/support/privacy.

4.5 Tasker integration (local only)

If you enable Tasker integration, Catchyu communicates with the Tasker app on your device through Android intents. No network traffic is involved.

4.6 Google Drive Backup (optional, Pro only)

If you are a Pro subscriber and choose to sign in with Google, Catchyu can back up your app data to your personal Google Drive account.

What is backed up:

How it works:

How to delete your backup:

Google’s privacy policy applies to data stored in Google Drive: https://policies.google.com/privacy

5. What we do not do

6. Data retention

7. Children

Catchyu is a productivity tool intended for users 13 years and older. We do not knowingly collect data from children under 13. If you believe a child has used the App, contact us and we will assist with deletion.

8. Your rights

Because data is stored locally on your device, you can exercise the following rights at any time directly inside the App:

If you live in the EU/UK (GDPR), India (DPDP Act), California (CCPA), or another jurisdiction with data-protection law, you also have rights to lodge a complaint with your local supervisory authority.

To request information about data we hold (we generally hold none — see Section 4), email us at privacy@kakooapps.com.

9. Security

10. Changes to this policy

We may update this policy when the App’s behavior changes. Material changes will be highlighted in-app or in the Play Store release notes. The “Last updated” date above will reflect the latest revision.

11. Contact

Questions or requests:

This policy was last reviewed on 3 May 2026.