Privacy Policy

Last updated: January 21, 2026

Overview

Kitty Vault ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our todo application at cutestbaddie.in.

TL;DR: We collect minimal data. No email required. No tracking. Your passphrase is hashed. You can export and delete your data anytime.

Information We Collect

Account Information

  • Passphrase (hashed): When you create an account, we generate a unique passphrase. We store only a cryptographic hash (SHA-256 with salt) of your passphrase, never the passphrase itself.
  • Display name (optional): You may optionally set a display name.
  • No email: We do not require or collect your email address.

User Content

  • Todos, notes, and descriptions you create
  • Folders and organizational structure
  • Tags and categories
  • Comments and subtasks
  • Theme preferences

Technical Data

  • Session tokens (for authentication)
  • Timestamps of account creation and last activity

What We Don't Collect

  • Email addresses
  • Phone numbers
  • IP addresses (not logged)
  • Cookies for tracking
  • Third-party analytics
  • Advertising identifiers

How We Use Your Information

We use your information solely to:

  • Authenticate you and maintain your session
  • Store and sync your todos across devices
  • Provide the features of the application

We do not sell, rent, or share your personal information with third parties.

Data Storage & Security

  • Your data is stored securely on Convex, a modern backend platform
  • All data transmission is encrypted via HTTPS
  • Passphrases are hashed using SHA-256 with unique salts
  • Sessions expire after 30 days of inactivity

Your Rights

You have the right to:

  • Export your data: Download all your todos in JSON or Markdown format from Settings → Data.
  • Delete your account: Permanently delete all your data from Settings → Data → Danger Zone.
  • Reset your passphrase: Generate a new passphrase anytime from Settings → Security.

Third-Party Services

We use the following third-party services:

Children's Privacy

Kitty Vault is not directed at children under 13. We do not knowingly collect information from children under 13.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our website. Your continued use of the service after changes constitutes acceptance of the updated policy.

Contact

For privacy-related questions, please open an issue on our GitHub repository.