Effective 30 August 2026
Clotty is made by Vasbyte. This policy explains what the app collects, why, who it goes to, and how to get it deleted. It is written to be read, not to be survived.
The short version. Your cycle, food and star data belongs to you. We do not sell it, we do not advertise against it, and we do not share it with anyone except the service providers listed below who are needed to run the app. Anything you share with your girls is visible only to the friends you have accepted.
Vasbyte is the responsible party (data controller) for the information described here. Contact us at info@vasbyte.co.za.
This is sensitive information and we treat it that way.
If you subscribe, Apple or Google processes the payment. We never see your card details. We receive the status of your subscription — active, expired, or a billing problem — and store it so the app knows what to unlock.
| What | Why |
|---|---|
| Account information | To create and secure your account and let you sign back in |
| Cycle and daily logs | To show your phase, predictions and history — the core of the app |
| Food entries and photos | To track your day and, if you ask, to estimate calories and macros from a photo |
| Birth details | To calculate your chart and write your readings |
| Capsule photos and friends | To show your posts to the friends you accepted |
| Push tokens | To send the notifications you turned on. You can turn them off at any time. |
| Subscription status | To unlock paid features and stop unlocking them when a subscription ends |
We rely on your consent for health, cycle and birth information, and on the necessity of performing our agreement with you for the rest. You can withdraw consent by deleting the data or your account.
Two features send data to Anthropic, an AI provider, so that a result can be generated:
These requests are made by our own server, under Anthropic's commercial API terms, which do not permit your content to be used to train their models. Meal photos are sent for analysis and are not stored by us as photos — only the food entries you choose to keep are saved.
We do not sell your information and we do not share it for advertising. We use these service providers to run the app:
| Provider | What it handles |
|---|---|
| Google (Firebase) | Sign-in, database, file storage, push notifications and our servers |
| Anthropic | The AI behind Girl Dinner AI and Astrology+ |
| USDA FoodData Central | Nutrition reference data for food names |
| RevenueCat | Managing subscription status |
| Apple and Google | Payments, and the sign-in option you chose |
Some of these providers process data outside South Africa, including in the United States. We only use providers that commit to appropriate safeguards for international transfers.
We may also disclose information if the law requires it, or where it is necessary to protect someone's safety.
We keep your information for as long as your account exists. Delete something in the app and it is removed from our database. Delete your account and we remove your personal information within 30 days, except anything we are legally required to keep — for example basic records of a purchase.
You can delete your account from inside the app: open the menu and choose Delete my account, or use the same option on your profile. This removes your profile, your logs, your food days, your photos, your friendships and your subscription record. It cannot be undone.
If you would rather we did it for you, email info@vasbyte.co.za from the address on your account. We will confirm and complete the deletion within 30 days.
You can ask us to:
Email info@vasbyte.co.za and we will respond within 30 days. If you are unhappy with our answer, you may complain to the Information Regulator of South Africa, or to your local data protection authority.
Clotty is not directed to children under 13, and we do not knowingly collect information from them. If you are under 18, please use Clotty only with a parent or guardian's permission. If we learn that we hold information from a child under 13, we delete it.
Your data is held in Google Cloud infrastructure, encrypted in transit and at rest. Access rules on our database restrict every record to the account that owns it, and our AI features run on our own server so that no keys or credentials ship inside the app. No system is perfect, but we take this seriously.
If we change this policy we will update the date at the top, and we will tell you in the app if the change is significant.
Vasbyte — info@vasbyte.co.za