Privacy Policy

Date of Last Revision: July 15, 2026

This Privacy Policy explains what personal information Cadoo Inc. (“Cadoo,” “we,” “us”) collects, how we use and share it, and the choices you have. It is part of our Terms of Use. By using the Services you agree to this Policy.

1Information We Collect

Information you provide

• Account & profile: name, email, mobile phone number, password, and any profile photo or details you add.
• Identity verification: when required, a government-issued ID and a photo/selfie, processed by our verification provider for KYC and fraud prevention.
• Payment information: handled by PCI-compliant payment processors; Cadoo does not see or store full card numbers.
• Content: photos, workout videos, messages, and other content you post.
• Invites: if you invite a friend, the email or phone number you provide, used only to send that invitation and reminders.

Information collected automatically

• Device & usage: IP address, device identifiers, app/version, and interaction logs, used to operate, secure, and improve the Services and to detect fraud and duplicate accounts.
• Location: approximate location and location signals, used to verify activity and to enforce eligibility for paid play. You can limit this in your device settings, though some features may then be unavailable.

Information from third parties

Health/fitness sources you connect (e.g., Apple Health, Google Health Connect) and login providers (e.g., Google, Facebook) provide information under their own policies; we use it as needed to run the Services.

2Health, Fitness & Workout Data

Activity data. With your permission we read step, distance, and workout data from Apple Health or Google Health Connect solely to verify Challenge results and show your progress. We do not use this data for advertising and we do not sell it.

Workout video & movement data. When a Challenge requires recording, we capture workout video and process it with automated computer vision (CadooVision) to count and score your movements. We use the video and the movement data derived from it only to verify results, credit your account, secure the integrity of contests, and create shareable clips you choose to make. We retain workout video only as long as necessary for these purposes and to resolve disputes, then delete it — except clips you have chosen to save or share. We do not use workout video or movement data for advertising and do not sell it.

3How We Use Information

We use personal information to: create and manage your account; operate Challenges and verify results; process deposits, winnings, withdrawals, and subscriptions; verify identity and prevent fraud and multi-accounting; provide support; send transactional and (unless you opt out) motivational messages; personalize matchmaking; comply with legal obligations; and improve and secure the Services.

4SMS & Mobile Messaging

When you verify your phone number, you consent to receive SMS from Cadoo, including one-time verification codes, Challenge reminders, payout confirmations, and account alerts. Message frequency varies; message and data rates may apply. Your mobile number will not be sold, rented, or shared with third parties or affiliates for their marketing. Opt out anytime by replying STOP, disabling SMS in Settings, or contacting us; reply HELP for help. Opting out won’t affect your ability to play, though you may miss reminders.

5Cookies & Similar Technologies

We and our providers use cookies and similar technologies to keep you signed in, remember your preferences, secure the Services, and understand usage. You can control cookies through your browser settings; some features require cookies to work. We do not store your password in a cookie.

6How We Share Information

• With other users: your profile name, photo, and Challenge activity are visible to others in your Challenges and on leaderboards. Don’t share anything in-game you consider private.
• With service providers: vetted vendors who process information only on our behalf (see Section 7).
• For legal & safety reasons: to comply with law or legal process, enforce our Terms, prevent fraud, or protect the rights and safety of Cadoo, users, or the public.
• Business transfers: in a merger, acquisition, or sale of assets, subject to this Policy.
• With your consent: otherwise, we share personal information only with your permission.

We do not sell your personal information for money, and we do not share your phone number for third-party marketing.

7Service Providers We Use

We share limited personal information with providers who process it only to provide services to Cadoo, including:

• Payments & payouts: Stripe, PayPal;
• Identity verification: Stripe Identity (processes the government ID and selfie you submit for KYC);
• Subscriptions: RevenueCat, and the Apple App Store / Google Play;
• Messaging: Twilio (SMS) and SendGrid (email);
• Hosting, analytics & crash reporting: our cloud, analytics, and error-monitoring providers.

These providers are contractually limited to using your information on Cadoo’s behalf.

8Data Retention

We keep personal information only as long as needed for the purposes in this Policy — to run your account, operate and verify Challenges, meet legal, tax, and fraud-prevention obligations, and resolve disputes — after which we delete or de-identify it. Workout video is retained as described in Section 2. You can request deletion as described below.

9Security

We use encryption in transit, access controls, and other safeguards to protect your information, and limit access to personnel who need it. No system is perfectly secure, so we cannot guarantee absolute security. Protect your account by using a strong password and signing out of shared devices.

10Your Choices & Rights

You can review and update your profile in the app, adjust notification preferences in Settings, and request access to or deletion of your personal information by contacting us. We respond to deletion requests within a reasonable time and typically within 30 days, subject to legal retention requirements. You will still receive essential account and legal notices.

11California Privacy Rights (CCPA / CPRA)

California residents have the right to know what personal information we collect and how we use it; to access, correct, and delete it; and to opt out of any “sale” or “sharing” as defined by California law. We do not sell your personal information for money, and we do not share your phone number for third-party marketing. We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under California law. To exercise these rights, contact privacy@cadoo.io. We will not discriminate against you for exercising them.

12EU / UK Users (GDPR)

Cadoo is the controller of the personal information you provide. We process it to perform our contract with you (operating the Services), to comply with legal obligations, for our legitimate interests (security and fraud prevention), and with your consent where required. You have the right to access, correct, delete, restrict, or object to processing, and to data portability, and you may withdraw consent at any time. To exercise these rights, contact privacy@cadoo.io. You may also lodge a complaint with your local data protection authority (and, for UK residents, the UK Information Commissioner’s Office). Some actions may limit your ability to use the Services.

13Children

The Services are not directed to children under 13, and we do not knowingly collect their information. Users aged 13–17 may use Cadoo only for free play with verifiable parental/guardian consent, and may not deposit, wager, or withdraw money. If we learn we have collected information from a child under 13, or enabled paid activity by anyone under 18, we will delete the information and reverse the activity. Contact privacy@cadoo.io with concerns.

14Changes & Contact

We may update this Policy from time to time; we will post changes here and update the revision date, and for material changes provide additional notice. The Policy in effect when information is used governs that use. Contact us at privacy@cadoo.io or by mail at the address listed at cadoo.io/contact.