Privacy Policy — Catecases

Last updated: September 14, 2026

Catecases LLC (“Catecases,” “we,” “us,” or “our”) operates catecases.com and related websites, online stores, mobile applications (including games), digital products (including courses and other downloadable or streamable content), and related services (collectively, the “Services”).

This Privacy Policy describes how we collect, use, disclose, and protect personal information when you visit or use the Services, make a purchase (physical or digital), download or use our apps from the Google Play Store or the Apple App Store, or otherwise communicate with us.

Our storefront at catecases.com is powered by Shopify. Where Shopify processes personal information on its own behalf in connection with Shopify features, Shopify’s privacy notices also apply. If there is a conflict between our Terms of Service and this Privacy Policy regarding the collection, processing, or disclosure of your personal information, this Privacy Policy controls for those topics.

Please read this Privacy Policy carefully. By using the Services, you acknowledge that you have read this Privacy Policy and understand how we handle information as described here.

---

1. Who We Are / Contact

Controller: Catecases LLC
Address: 210 E Main St, Unit 528, Jackson, MO 63755, United States
Email: admin@catecases.com
Phone: +1 312-416-1952

For questions about this Privacy Policy, privacy requests, or children’s privacy inquiries, contact us using the details above.

---

2. Scope of This Policy

This Privacy Policy covers personal information we collect in connection with:

1. Physical goods — for example, phone cases and accessories sold through catecases.com and related channels.
2. Digital goods and courses — for example, digital downloads, online courses, guided content, subscriptions, or other paid digital products.
3. Mobile apps and games — including apps and games distributed through the Google Play Store and the Apple App Store, which may include apps that participate in Google Play’s Families program and that display ads through Families self-certified ads SDKs.
4. Marketing, community, wholesale, fundraising, and customer support communications related to the Services.

This Policy applies to information collected online through the Services. It does not cover websites, apps, or services we do not control.

---

3. Personal Information We Collect or Process

When we say “personal information,” we mean information that identifies or can reasonably be linked to you or another person. It does not include information that is collected anonymously or that has been de-identified so that it cannot reasonably identify you.

Depending on how you interact with the Services, where you live, and what the law allows or requires, we may collect or process the categories below (including inferences drawn from them).

3.1 Information you provide directly

• Contact details: name, email address, phone number, billing address, shipping address.
• Account information: username, password, security questions, preferences, settings, profile details you choose to provide.
• Transaction and order information: items viewed, cart contents, wishlist items, purchases, returns, exchanges, cancellations, order history, and related receipts.
• Payment information: payment method details and confirmation. Card numbers and similar payment credentials are typically processed by our payment processors (for example, Shopify Payments and/or Apple/Google in-app purchase systems) and are not stored by us in full where those processors handle payment.
• Digital product and course information: course enrollments, progress, completion status, certificates (if offered), content access logs, and communications related to digital products.
• Communications: information you include when you contact support, email us, fill forms, participate in surveys, wholesale/fundraising inquiries, or community sign-ups.
• User content: reviews, comments, feedback, or other content you submit.
• Age-related or parental information (apps/games): information needed to run age screens, parental gates, or to verify a parent/guardian when required by law (for example, under COPPA), such as a parent’s email address for verifiable parental consent.

3.2 Information collected automatically

• Device information: device type/model, operating system and version, browser type, network connection information, IP address, language, time zone, and other technical identifiers.
• App identifiers (as applicable and permitted): install ID, app instance identifiers, crash/diagnostic identifiers, and similar technical IDs. For children and users of unknown age in Families/child-directed contexts (including AdMob child age treatment), we do not collect or use persistent advertising identifiers such as Android Advertising ID (AAID), IDFA, IMEI, or MAC address for advertising.
• Usage information: pages/screens viewed, features used, clicks, session duration, navigation paths, referring URLs, and interaction with ads (for example, ad impressions or clicks, without interest-based profiling for children).
• Diagnostics: crash logs, performance data, and error reports.
• Cookies and similar technologies on our websites (see Section 8).

3.3 Information from third parties and platforms

• Shopify and store vendors that help host the store, process payments, fulfill orders, and provide analytics or customer tools.
• App platforms: Apple App Store / App Store Connect and Google Play / Play Console may provide limited account, purchase, refund, or integrity signals related to downloads and in-app purchases.
• Advertising and analytics partners (subject to the children’s advertising rules in Section 6).
• Course / digital delivery providers if we use a learning platform, DRM, or content-hosting vendor.
• Shipping and fulfillment partners for physical goods.
• Partners you choose to connect with (for example, social login or social widgets), if offered.

We may also create inferences (for example, product interests) from the information above, except where prohibited for children or users of unknown age.

---

4. Personal Information Sources

We may collect personal information from:

• You, when you create an account, make a purchase, enroll in a course, use an app/game, contact us, or otherwise provide information.
• Automatically, through cookies, SDKs, pixels, and similar technologies when you use websites or apps.
• Service providers acting on our behalf.
• Platforms and partners, including Shopify, Apple, Google, payment processors, analytics providers, and (where permitted) advertising partners.
• Other third parties, where lawful (for example, updated address information from a carrier).

---

5. How We Use Personal Information

Depending on how you interact with us, we may use personal information to:

5.1 Provide, operate, and improve the Services

• Process and fulfill physical and digital orders, including shipping, downloads, course access, and in-app purchases.
• Create and manage accounts, preferences, and customer records.
• Deliver digital goods and courses; track access and progress where needed to provide the product.
• Operate apps and games, including saving progress (if offered), syncing settings, and providing customer support.
• Personalize the shopping or learning experience for adult users where permitted.
• Maintain, debug, and improve performance, security, and usability.

5.2 Payments and fraud prevention

• Process payments and prevent chargebacks, abuse, fraud, and unauthorized access.
• Authenticate accounts and protect the security of the Services.

5.3 Marketing and advertising (adult / non–child-directed contexts)

• Send promotional emails or other marketing where permitted (you can unsubscribe).
• Show ads and measure campaigns on our websites and, for non-child audiences, in apps where allowed by law and platform rules.
• Work with Shopify and marketing partners for advertising, subject to your opt-out rights.

Important: Advertising in apps directed to children, or shown to children / users of unknown age, follows the stricter rules in Section 6. We do not use children’s data for interest-based advertising or remarketing.

5.4 Communications

• Respond to support requests, wholesale/fundraising inquiries, and other messages.
• Send transactional notices (order confirmations, shipping updates, course access, security alerts, policy updates).

5.5 Legal and safety

• Comply with law, respond to lawful requests, enforce our terms, and protect Catecases, our users, and the public.

5.6 Legal bases (EEA/UK and similar jurisdictions)

Where required, we rely on one or more of: performance of a contract; legitimate interests (for example, securing and improving the Services, preventing fraud, and limited marketing where allowed); consent (for example, certain cookies, email marketing, or tracking); and legal obligation.

---

6. Mobile Apps, Games, Google Play Families Ads, and Apple App Store

This section applies specifically to our mobile apps and games distributed through Google Play and the Apple App Store.

6.1 What our apps may collect

Depending on the app/game and platform permissions you grant, we and our service providers may process:

• Device and technical information needed to run the app.
• Usage and gameplay analytics (for example, levels completed, session length, crash data).
• Purchase and entitlement data for paid apps, in-app purchases, or unlocks.
• Limited account or progress data if the app offers sign-in or cloud save.
• Ad-related technical events (impressions/clicks) when ads are shown, subject to Families/child rules below.

We design apps so that any data practices match what we disclose here and in each store listing’s privacy disclosures (including Apple’s App Privacy details and Google Play’s Data safety form).

6.2 Google Play Families program, Families ads, and AdMob

Our games use Google AdMob (the Google Mobile Ads SDK) to display ads. AdMob is configured to comply with the Google Play Families program when ads are shown to children or users of unknown age.

If an app participates in Families and/or shows ads to children or users of unknown age, we commit to the following practices:

1. Privacy policy accuracy. This Policy (and any app-specific notices) accurately describes data collection and handling in the app, including through APIs and SDKs such as AdMob.
2. Families self-certified ads SDK. We use AdMob / Google Mobile Ads SDK versions that participate in Google Play’s Families Self-Certified Ads SDK program for ads shown to children or users of unknown age.
3. Child-directed / age-restricted ad treatment. For those users we configure AdMob so ad requests receive child age treatment (for example, Tag for Child-Directed Treatment / Tag for Age Treatment set to child, as supported by the SDK version we ship). This disables interest-based advertising and remarketing for those requests.
4. G-rated ad content. We set the maximum ad content rating to G for child / unknown-age ad requests so creatives are appropriate for children.
5. No persistent advertising identifiers for children. When child age treatment is applied, AdMob is configured so Android Advertising ID (AAID) and iOS Identifier for Advertisers (IDFA) are not transmitted for those ad requests. We do not collect IMEI, MAC address, or similar persistent identifiers from children for advertising.
6. No interest-based advertising or remarketing to children or users of unknown age. Ads in those contexts are contextual / non-personalized as required by Families policy and COPPA.
7. Child-appropriate ad formats consistent with Google Play Families ads and monetization requirements.
8. Mixed audience apps. If an app targets both children and older users, we use a neutral age screen (or equivalent) so that children only receive Families-compliant, non-personalized AdMob ads and child-appropriate data treatment.
9. Other SDKs. We only include additional SDKs that are appropriate for the audience and configured for child-directed treatment where required. We do not use non-approved ad SDKs in a way that collects children’s data improperly.
10. COPPA / GDPR-K and similar laws. We comply with applicable children’s privacy laws. Where parental consent is required, we obtain verifiable parental consent before collecting personal information from a child beyond what the law allows without consent.
11. Google’s role. Ad serving, ad selection, and related processing for AdMob ads are performed by Google under Google’s advertising and privacy terms. Learn more in Google’s Privacy Policy and AdMob Help.

6.3 Apple App Store requirements

For apps on the Apple App Store, we:

1. Publish a publicly accessible privacy policy URL (this Policy) in App Store Connect and make the policy easy to find in the app.
2. Complete and keep current App Privacy disclosures in App Store Connect, covering data collected by us and by third-party partners/SDKs, including whether data is linked to the user or used for tracking.
3. Clearly state what data is collected, how it is used, with whom it is shared, how long it is kept, and how users can request deletion or withdraw consent.
4. Request device permissions (for example, notifications, tracking, photos) only when needed, with clear purpose strings, and never make core paid functionality contingent on unnecessary data access.
5. Use Apple’s App Tracking Transparency framework before any tracking across apps/websites owned by other companies, where “tracking” is defined by Apple. We do not track children in ways prohibited by law or Apple policy.
6. Ensure third parties that receive user data provide at least the same level of protection described in this Policy and Apple’s guidelines.

6.4 In-app purchases and platform billing

Purchases made through Apple or Google are also subject to Apple’s or Google’s terms and privacy practices. We receive confirmation of purchases and entitlements as needed to unlock content; we do not receive your full payment card number from Apple or Google for standard in-app purchases.

6.5 Push notifications

If you enable notifications, we may send service or engagement messages. You can disable them in device settings. We do not use children’s notifications for interest-based advertising.

---

7. Children’s Privacy (Website, Courses, and Apps)

7.1 Website and adult-oriented digital products

Our website storefront and many marketing pages are directed to a general (primarily adult) audience purchasing physical goods, accessories, and certain digital products. We do not knowingly collect personal information from children under 13 (or the age of digital consent in your jurisdiction) through the general storefront for those adult-directed experiences.

If you believe a child provided personal information on the storefront without appropriate consent, contact us at admin@catecases.com and we will take steps to delete it as required.

7.2 Child-directed apps and games; Families experiences

Some of our apps and games may be designed for or appeal to children, or may be included in Google Play’s Families program. For those experiences:

• We collect only the personal information reasonably necessary to provide the app/game, support it, secure it, and (where applicable) show Families-compliant ads.
• We do not condition a child’s participation on disclosing more personal information than is reasonably necessary.
• We do not sell children’s personal information.
• We do not use children’s personal information for interest-based advertising or profiling unrelated to the service.
• Parents/guardians may review, request deletion of, or refuse further collection of their child’s personal information by contacting admin@catecases.com. We may need to verify the parent/guardian’s identity before fulfilling the request.

As of the Effective Date of this Privacy Policy, we do not have actual knowledge that we “sell” or “share” (as those terms are defined under applicable U.S. state privacy laws) personal information of individuals under 16 years of age for cross-context behavioral advertising.

7.3 Courses and educational digital goods

If a course or digital product is marketed to adults (for example, parents, catechists, or educators), accounts should be created by adults. If a course is offered to minors, we will apply age-appropriate notice and consent practices, and parents may contact us to manage the child’s information.

---

8. Cookies, SDKs, and Similar Technologies

8.1 Websites

We and our partners (including Shopify) use cookies, pixels, local storage, and similar technologies to:

• Keep you signed in and remember cart contents.
• Secure the Services and prevent fraud.
• Understand traffic and improve the site.
• Support advertising and measurement for adult audiences where permitted.

You can control cookies through your browser settings. Some features may not work if cookies are disabled. Where required by law, we present a cookie banner or preference center.

8.2 Apps

Apps may include first-party and third-party SDKs for crash reporting, analytics, cloud save, payments, and advertising. Our games use Google AdMob (Google Mobile Ads SDK) for ads. In child / Families contexts, AdMob is limited as described in Section 6.2 (child age treatment, G-rated creatives, no AAID/IDFA transmission for those requests). Other SDK behavior in child contexts is likewise limited as described in Section 6.

---

9. How We Disclose Personal Information

We may disclose personal information in these circumstances:

• Service providers / processors that help us operate the Services (hosting, Shopify, payment processing, shipping/fulfillment, customer support, email delivery, cloud storage, analytics, course delivery, crash reporting, and Families-compliant ad serving via Google AdMob).
• App platforms (Apple, Google) as needed to distribute apps, process in-app purchases, and comply with store requirements.
• Business and marketing partners for advertising and measurement in non–child-directed contexts, including Shopify’s personalized advertising features where applicable. Those partners use information under their own privacy notices. You may have the right to opt out of sale/sharing or targeted advertising (see Section 11).
• At your direction, for example when you use social widgets or request that we share information with a third party.
• Affiliates within our corporate group, if any.
• Business transfers, such as a merger, acquisition, financing, or bankruptcy.
• Legal and safety disclosures: to comply with law, respond to lawful process, enforce our terms, or protect rights, safety, and security.

We require service providers to use personal information only to provide services to us and to protect it appropriately. For children’s data, we impose contractual and technical limits consistent with COPPA, Google Play Families policies, Apple requirements, and other applicable law.

---

10. Relationship with Shopify

The catecases.com storefront is hosted by Shopify. Shopify collects and processes personal information about your access to and use of the storefront to provide and improve those services. Information you submit may be transmitted to Shopify and related third parties, which may be located in countries other than where you live.

We may also use Shopify enhanced features that incorporate data from your interactions with our store and, in some cases, other merchants. In those circumstances, Shopify may be responsible for certain processing and for responding to related rights requests. Learn more in the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.

---

11. Your Rights and Choices

Depending on where you live, you may have some or all of the rights below. These rights are not absolute and may not apply in every case.

• Access / Know — request access to personal information we hold about you.
• Delete — request deletion of personal information.
• Correct — request correction of inaccurate personal information.
• Portability — request a copy of personal information in a portable format.
• Opt out of sale / sharing / targeted advertising — depending on your state or country, opt out of “sale,” “sharing,” or targeted advertising. Where available on our site, use the opt-out links provided; if you send a Global Privacy Control (GPC) signal, we will treat it as an opt-out for that browser/device as required. Other than GPC, we do not respond to generic “Do Not Track” signals.
• Limit use of sensitive personal information — where applicable law provides this right.
• Manage marketing emails — unsubscribe using the link in our emails. We may still send transactional messages.
• App permissions — revoke device permissions in your OS settings.
• Advertising choices (adults) — use platform settings (for example, Google Ads settings, Apple Personalized Ads) in addition to our opt-outs.
• Parents of children — review, delete, or refuse further collection of a child’s information as described in Section 7.

Additional rights for EEA/UK residents

Subject to law, you may also:

• Object to certain processing or request restriction of processing.
• Withdraw consent where processing is based on consent (withdrawal does not affect prior lawful processing).
• Lodge a complaint with your local data protection authority. For the EEA, a list of authorities is available from the European Data Protection Board.

How to exercise rights

Email admin@catecases.com or write to the address in Section 1. We may need to verify your identity (and, for a child’s data, parental authority). You may designate an authorized agent where the law allows; we will require proof of authorization. We will not discriminate against you for exercising privacy rights.

For certain Shopify-controlled processing, you may also use Shopify’s privacy tools at https://privacy.shopify.com/en.

---

12. Security and Retention

No security measures are perfect. We use administrative, technical, and organizational measures designed to protect personal information, but we cannot guarantee absolute security. Avoid sending sensitive information over unsecure channels.

We retain personal information only as long as needed for the purposes described in this Policy, including to:

• Maintain accounts and provide Services.
• Complete transactions and keep business/tax records.
• Resolve disputes and enforce agreements.
• Comply with legal obligations.
• Support security, fraud prevention, and backups.

Retention periods vary by data type. Children’s data is retained only as long as reasonably necessary to fulfill the purpose for which it was collected, unless a longer period is required by law. When no longer needed, we delete or de-identify information.

---

13. International Transfers

We may transfer, store, and process personal information in the United States and other countries that may have different data-protection laws than your home country.

For transfers from the EEA/UK (and similar jurisdictions), we use appropriate safeguards such as the European Commission’s Standard Contractual Clauses (or UK equivalent), unless the destination is recognized as adequate.

---

14. Third-Party Websites and Services

The Services may link to third-party websites, app stores, payment pages, social networks, or tools we do not control. Their privacy practices are governed by their own policies. We are not responsible for those third parties. Content you post on public or semi-public platforms may be visible to others.

---

15. Do Not Sell or Share / Targeted Advertising Notice (U.S. State Laws)

Depending on your state (for example, California, Colorado, Connecticut, Virginia, and others), “sale” or “share” can include disclosing personal information to advertising partners for cross-context behavioral advertising.

For our adult-directed website and marketing, we may engage in activities that qualify as “sale,” “sharing,” or targeted advertising under those laws. You can opt out as described in Section 11.

For child-directed apps/games and Families ad contexts, we do not sell or share children’s personal information for cross-context behavioral advertising, and we do not use children’s data for interest-based ads.

California residents may also have rights under the CCPA/CPRA as described in Section 11, including the right to know categories of personal information collected, sources, purposes, and categories of third parties. We do not use or disclose sensitive personal information for purposes that require a separate “limit the use” right beyond what is necessary to provide the Services, except as disclosed and permitted.

---

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, products (including new apps, games, or courses), or legal requirements. We will post the revised Policy on this page, update the “Last updated” date, and provide additional notice when required by law (for example, in-app notice or email for material changes).

If we make material changes to how we handle children’s personal information, we will notify parents as required by applicable law and obtain new consent where required.

---

17. Contact and Complaints

Questions, privacy requests, or complaints:

• Email: admin@catecases.com
• Phone: +1 312-416-1952
• Mail: Catecases LLC, 210 E Main St, Unit 528, Jackson, MO 63755, United States

Depending on where you live, you may appeal our decision on a privacy request by contacting us again and stating that you are appealing, or you may contact your local data protection authority.

---

Appendix A — Summary of Data Uses by Product Type

---

Appendix B — Parent / Guardian Request Form (informational)

To exercise rights regarding a child’s information, email admin@catecases.com with:

1. Parent/guardian full name and email.
2. Child’s name / username or other identifier used in the app (if any).
3. App or product name.
4. Request type: access, deletion, or stop further collection.
5. Confirmation that you are the child’s parent or legal guardian.

We will follow up with verification steps as required by law.