Privacy Policy
Who is responsible
Cacti is a personal application by David de la Torre (Spain). For anything regarding your data you can write to hola@daviddelatorre.es. We will reply within one month at most. The rules for using the app are in the terms of use.
What data we process
- Your account: email and password (the password is stored encrypted, never in plain text), and the internal identifier the database assigns to your account.
- Your name within the group, the one you or whoever created the group wrote on the member list.
- What you tell: the text of your entries, your voice notes and their transcription, your photos (picked from your library or taken with the camera right then) and your profile photo, and your comments and reactions on editions.
- Your notification subscription: if you turn on notifications, the technical address your browser generates (or, in the iPhone app, the device identifier Apple provides) so we can send them.
- The group scoreboard: votes, fines and payments tallied. It is a symbolic scoreboard: no real money moves in the app.
- Reports: if you report a story, a comment or a person, who reported, what and when; if you are reported, the same. The reported person is never told who reported them.
- Your blocks and removals: if you block someone, who and when, so we stop showing you their content (that person is not told); and if whoever founded a group removes you from it, which group and when, so you can't rejoin with the link.
- Technical data: the IP address and connection data logged by the servers hosting the app, for security.
- The steps when joining: when you open an invitation, which screens of the way in you go through (the link, installing, picking your name, creating the account), with your phone's system and browser and a random identifier for this browser. It is only used to know at which step people get stuck and improve it.
Why, and on what basis
We use your data exclusively to provide the service: composing your group's weekly edition and delivering it to its members, notifying you of news, and keeping the scoreboard. The legal basis is the performance of the service you accept when creating your account (art. 6.1.b GDPR). Technical security logs rely on our legitimate interest in keeping the service secure (art. 6.1.f GDPR), and so do reports (reviewing them is our legitimate interest, and your group's, in keeping Cacti free of abuse) and the joining steps (making sure joining a group works). There are no ads, no profiling, and we sell data to no one.
Who else sees your data
The main recipient is obvious but must be said: the members of your group, who receive the edition with what you shared every week. Whatever you mark with the lock is seen by no one but you.
In addition, to work, the app relies on these providers (data processors):
- Supabase (database, accounts and files), hosted on AWS in the eu-west-3 region (Paris, European Union).
- OpenAI (voice note transcription with Whisper, United States).
- Anthropic (composition of the edition's text with the Claude API, United States).
- Vercel (hosting and delivery of the app, United States).
The OpenAI and Anthropic APIs we use do not employ your content to train their models. Transfers to the United States rely on the EU-US Data Privacy Framework and on the European Commission's standard contractual clauses, depending on the provider.
If you turn on notifications, the push service of your browser or phone (Google Firebase Cloud Messaging on Android and Chrome, Apple on iPhone and Safari, Mozilla on Firefox) receives your subscription's technical address to deliver each notification. The notification never carries what you shared. Depending on the type of notification, it carries who shared something and in what form (text or voice note), the group's name, or who commented and whose story it is. From a browser or an app installed from Safari, the notification is end-to-end encrypted and that service cannot read it. In the iPhone app from the App Store, Apple receives the notification's text unencrypted in order to deliver it, as with any iPhone app.
The Android app is downloaded from Google Play, which handles download data under its own policy. Inside it is the same Cacti as on the web: it collects nothing more from your phone.
The iPhone app is downloaded from Apple's App Store, which handles download data under its own policy. Inside it is the same Cacti as on the web, with three differences: notifications arrive through Apple's push service (APNs) using the device identifier above; the microphone is requested by the app itself, only when you record a voice note; and sharing a link opens your iPhone's share sheet. It collects nothing more from your phone: no contacts, no location, no advertising identifiers.
How long we keep your data
As long as your account exists. If you delete it, we immediately remove your entries, your audio, your photos, your profile photo, your comments and reactions, your notification subscriptions and your account. Two things are kept: the editions already published (a newspaper already delivered to the group does not get unpublished, just like a printed one) and the group scoreboard (votes, fines and payments are the group's shared tallies and deleting them would unbalance everyone else). Your name stays on the group's list as an unclaimed seat, and the groups you founded pass to the longest-standing member (if you are the only one with an account, the whole group is deleted). Reports are kept while they are reviewed and, once closed, are deleted at the next review after 12 months; if you delete your account, they no longer identify you. Your blocks and removals are deleted with your account. The joining steps stay as statistics, but deleting your account unlinks them from it and from your name. Technical database backups expire within 30 days at most.
How to delete your account
From the app itself (Settings › Your account) or at cacti.social/cuenta/borrar, logging in with your email and password. Deletion is immediate and permanent. If you can't log in, write to us from your account's email. The steps and details are at cacti.social/borrar-cuenta.
Your rights
You can exercise your rights of access, rectification, erasure, portability, restriction and objection by writing to hola@daviddelatorre.es. If you believe we have mishandled your data, you have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
Cookies and local storage
We use no third-party or advertising cookies. The app stores in your browser only what is technical and essential: your session, your active group, the language, the theme and the random identifier of the joining steps.
Minimum age
Cacti is for people over 18.
Changes to this policy
If this policy changes, we will update the version date above and, if the change matters, we will tell you inside the app.