1. Introduction

Kaizen Lab Ltd, trading as getcake.co ("Company," "we," "us," or "our") operates the getcake.co application ("App"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use the App globally through various communication channels. By using the App, you consent to the practices described in this Policy.

2. Information We Collect

2.1 User-Provided Data

We collect information that you or others (with your authorization) provide, including contact details, names, dates, or other information necessary to deliver the Service.

2.2 Automatically Collected Data

We may collect technical data such as device information, IP address, browser details, and usage patterns to operate, improve, and secure the App.

2.3 Contact Syncing Data

If you choose to sync your phone contacts, we collect only the information you explicitly authorize for syncing.

2.4 Third-Party Data

We may receive limited information from payment processors, messaging providers, or infrastructure partners in order to facilitate the Service.

2.5 Advertising and Analytics Data

We use advertising and analytics technologies such as:

• Meta Pixel (Facebook / Instagram)
• TikTok Pixel and Events API
• X Ads Pixel (formerly Twitter)
• Google Ads (Global Site Tag / gtag.js)

These services may receive hashed identifiers (such as phone numbers or email addresses), page interaction data, and event metadata (such as signups or referral clicks) for purposes including conversion tracking, audience retargeting, and campaign reporting.

Where applicable, identifiers are hashed using SHA-256 before transmission. Data is used in aggregate to improve marketing effectiveness and is not used to directly identify individual users.

2.6 First-Party Cookies

We may use first-party cookies to help advertising partners such as TikTok, Meta, and Google measure conversions, build custom audiences, and improve targeting. These cookies may store pseudonymous identifiers and session information.

2.7 Facebook Importer Chrome Extension Data

If you use our Chrome extension "Export Facebook Birthdays to getcake.co", the extension processes birthday information (names and dates) visible within your Facebook account.

• Only reads data already visible in your Facebook account
• Does not collect Facebook login credentials
• Does not post to or modify your Facebook account
• Temporarily stores data in your browser until import completion
• Requires your explicit action to import selected birthdays

3. How We Use Google User Data

We request only the minimum Google OAuth permissions required to identify and import birthdays.

• calendar.readonly – used to identify potential birthday events
• userinfo.email – used to link your Google account to your profile

If you choose to import birthdays, we retain only the names and dates you select. Other calendar data is deleted immediately after import or within 30 days if the connection is removed.

OAuth tokens and calendar data are encrypted at rest and access is restricted to essential operational processes. We comply with Google's Limited Use requirements.

4. How We Use Facebook Importer Data

When using our Facebook Importer Chrome extension, we access only birthday information visible in your Facebook friends list to help you import birthdays into the App.

• Birthday data is transmitted securely from your browser to our servers
• You must provide a valid authentication code to import birthdays
• Only selected birthdays are saved to your account
• Non-selected data is deleted immediately after import

The extension operates entirely within your browser and requires you to be logged into Facebook. It is not affiliated with or endorsed by Meta Platforms, Inc.

5. Other Uses of Information

We use your information to provide, personalise, and improve the Service, manage accounts and payments, communicate with users, maintain security, and comply with legal obligations.

Imported birthday data is treated the same as manually entered data and is used only to deliver birthday reminders according to your settings.

6. Data Sharing and Disclosure

6.1 Service Providers

We share information with third-party service providers such as payment processors, messaging services, and infrastructure providers only as necessary to operate the Service.

Limited hashed identifiers may be shared with advertising platforms (Meta, TikTok, Google, X) for campaign measurement and optimisation purposes.

6.2 Legal Requirements

We may disclose information if required by law or legal process, or to protect our rights, users, or others.

6.3 Business Transfers

In the event of a merger, acquisition, or asset sale, user data may be transferred subject to appropriate confidentiality protections.

7. Data Retention

Google Calendar data is deleted immediately after import unless you choose not to proceed, in which case it is removed within 30 days.

Facebook Importer extension data follows the same policy: selected birthdays are saved to your account, while unselected data is removed immediately.

Birthday data remains stored until deleted by you. Account data may be retained as required for operational, billing, or legal purposes.

8. Data Security

We implement administrative, technical, and physical safeguards to protect your data. Data is transmitted over secure HTTPS connections and stored with encryption at rest. Access is restricted and logged for operational security.

9. Your Rights

Depending on applicable laws such as GDPR or CCPA, you may have rights to access, correct, delete, or restrict processing of your personal data. You may contact us to exercise these rights.

Email: hello@getcake.co

10. Third-Party Services

We rely on third-party services for infrastructure, messaging, and payments. Their own privacy policies apply to their handling of data.

The Facebook Importer Chrome extension is not affiliated with Meta Platforms, Inc.

11. International Transfers

Your data may be processed in countries including the United States. We take appropriate measures to ensure transfers comply with applicable data protection laws.

12. Children's Privacy

The App is not intended for users under the age of 13. If we discover that personal data has been collected from a child without verified consent, it will be deleted promptly.

13. Updates to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated through the App or your contact information at least 30 days before taking effect.

14. Contact Us

If you have questions or requests regarding this Privacy Policy, contact us at:

Email: hello@getcake.co