Privacy Policy

Effective date: May 1, 2026

Overview

This Privacy Policy describes how Callaloo (“we”, “us”) collects, uses, and shares information when you use our mobile application, websites, and related services (the “Service”).

Information we collect

Depending on how you use the Service, we may process:

  • Account data: such as email address and authentication identifiers when you sign in (for example, via email/password or a sign-in provider).
  • Household data: such as household name, roles (for example, admin or parent), invite codes, and list items you or your household stores in the Service.
  • Order-related data: such as requests parents submit and statuses admins update in the app.
  • Device & technical data: such as device tokens used to deliver push notifications, and basic diagnostic or operational logs needed to run and secure the Service.

How we use information

We use information to:

  • Provide, maintain, and improve the Service
  • Authenticate users and enforce household access controls
  • Deliver notifications you expect (for example, push or email alerts related to orders)
  • Protect against fraud, abuse, and security threats
  • Comply with legal obligations

How we share information

We share information with service providers who help us operate the Service (for example, cloud hosting, authentication, databases, messaging, and optional email delivery). We may also disclose information if required by law or to protect rights, safety, and integrity.

Retention

We retain information as long as needed to provide the Service and for legitimate business purposes such as security, troubleshooting, and legal compliance. Retention periods may vary based on the type of data and how you use the Service.

Your choices

You may access or update certain information through the app. You can disable push notifications in your device settings. You may request deletion of your account or personal information where applicable law provides such rights; we will respond consistent with those laws.

Children

The Service is not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect personal information from children in that category.

International users

If you use the Service from outside the country where we operate infrastructure, your information may be processed in countries that may have different data protection laws than your own.

Changes

We may update this Privacy Policy from time to time. We will post the updated policy with a new effective date.

Contact

For privacy questions or requests, email be.mobile.dev1@gmail.com.