Privacy Policy

Effective August 1, 2026 · Version 2026-08-01

This Privacy Policy explains how Novadri LLC, a Washington limited liability company, collects, uses, discloses, retains, and protects information when you use Buddiy. Buddiy currently has no advertising SDK and does not sell personal information.

Information you provide

Account information includes your email address, chosen username, authentication provider, and account preferences. Project content includes project types, measurements, design selections, properties, addresses you type, jurisdiction choices, notes, shopping lists, saved designs, build-sheet configurations and snapshots, and content you choose to share. Support information includes messages and materials you send us. We do not access your device's GPS location; an address or location value in Buddiy is one you provide.

Purchases, entitlements, and promotions

For in-app purchases and promotions, we receive and store limited Apple transaction information such as product, transaction and original-transaction identifiers, purchase or redemption time, environment, refund or reversal state, and an account-binding token. We store Buddiy entitlement, Build Pack, revision, complimentary-grant, and promotion-eligibility records. Apple processes payment-card and billing information; Novadri LLC does not receive your full payment-card number.

Information collected automatically

Buddiy and its service providers may process device and app version, platform, a push-notification device token when you enable notifications, request timestamps, network addresses and related network or server logs, authentication events, server errors and request-performance diagnostics, security signals, and feature-operation metadata. We use this information to operate, secure, debug, send requested service notifications, and prevent abuse of the service.

Buddiy does not use network addresses to derive location. Its application rate limiter converts them to rotating opaque tokens before retaining them in application memory or logs; infrastructure providers may retain network logs under their operational and security practices. We do not currently use third-party advertising identifiers or cross-app behavioral tracking.

Sign in with Apple

If you use Sign in with Apple, Apple supplies an account identifier and the email address you authorize, which may be an Apple private-relay address if you select Hide My Email. We use it to authenticate and maintain your Buddiy account.

How we use information

We use information to provide and synchronize Buddiy; generate, freeze, and retrieve requested outputs; operate sharing; process and restore entitlements; administer promotions; respond to support; send requested service notifications; protect accounts and prevent fraud or abuse; monitor reliability; comply with law; enforce agreements; and improve product quality. AI features may send the prompt and necessary project context to the identified AI service provider only when you invoke such a feature.

How we disclose information

We disclose information to service providers that process it for us, including Apple for authentication and purchases, Supabase for authentication/database/storage, infrastructure and hosting providers, notification delivery providers, and AI providers when you use an AI feature. We disclose content to people you deliberately share with and may publish content only through an explicit public or curated feature. We may disclose information when reasonably necessary to comply with law, protect rights or safety, investigate abuse, or complete a financing, merger, acquisition, reorganization, or sale subject to appropriate safeguards.

No sale or behavioral advertising

Novadri LLC does not sell personal information and does not share it for cross-context behavioral advertising. Buddiy currently contains no third-party advertising SDK. If that practice changes, this Policy and required choices will be updated before the change applies.

Sharing and visibility

Private content is available to your account and to recipients you explicitly authorize. A recipient may import a separate copy. Public or featured content is visible more broadly only through the applicable publishing workflow. Usernames may be visible with content you share. Review recipients and visibility before sharing, and do not include sensitive personal information in shared titles, notes, or images.

Storage, security, and backups

Cloud account data is hosted using Supabase and related infrastructure. We use HTTPS in transit, database and Storage access controls, least-privilege service credentials, and client-encrypted backups. No method of storage or transmission is completely secure, and Buddiy is not an end-to-end encrypted service.

Production database backups are encrypted before upload. Daily backups are retained for up to 35 days, and designated monthly recovery copies for up to 400 days. Backup credentials and decryption keys are separated. Operational logs and security records are retained only as reasonably needed for reliability, fraud prevention, legal compliance, and dispute handling.

Retention and deletion

Active account and project information is retained while your account exists and as needed to provide the service. You may delete your account in the app. Completed deletion removes active cloud account data, private Storage objects, build-sheet snapshots, and local account data on that device, subject to limited records we must or may retain for transaction integrity, fraud prevention, legal obligations, or disputes.

Deleted information may remain in encrypted disaster-recovery backups until those backups expire, for no more than 400 days under the current schedule. Backups are isolated from ordinary use, and deletion tombstones are applied before a restored backup is returned to active service. Consumable Build Packs and unused revisions cannot be restored after account deletion.

Your choices and rights

You can review or change many account and project fields in Buddiy, control sharing, disable notifications in device settings, restore eligible Apple purchases, and delete your account in the app. Depending on where you live, you may have additional rights to access, correct, delete, restrict, object to, or receive a copy of personal information. Contact support@buddiy.app to make a request. We may verify your identity and may retain information where an exception applies.

Children

Buddiy is not directed to children under 13 and Novadri LLC does not knowingly collect personal information from them. If you believe a child provided information, contact support@buddiy.app.

International processing

Buddiy and its providers may process information in the United States and other countries where privacy laws may differ. Where required, providers use appropriate contractual or legal safeguards.

Changes to this Policy

Material changes use a new policy version and effective date and require notice or renewed acceptance when appropriate. The effective date above identifies the current version.

Contact

The controller of personal information described in this Policy is Novadri LLC, a Washington limited liability company, 7504 117th Ave NE, Kirkland, WA 98033, United States.

Privacy questions or requests: support@buddiy.app. Legal notices: erkan@novadri.net or the mailing address above.