Privacy Policy

Clarity Technology Pte. Ltd. (UEN 202614948D), 60 Paya Lebar Road, #06-28, Paya Lebar Square, 409051, Singapore, is the organisation responsible for the personal data described here.

As required by section 11(3) of the PDPA, we have appointed a Data Protection Officer. You can reach them at eachotter.sg@gmail.com for anything on this page — access, correction, withdrawal of consent, deletion, or a complaint.

Everything below is either something you typed in, or something you did in the app.

Account details

• Your email address and a password. The password is hashed by our authentication provider — we never see it.
• Your display name.
• If you choose "Sign in with Google": your name and email address from your Google profile. Nothing else, and no access to your Google account.

What you tell us during onboarding

• Your date of birth. We store the date and calculate your age from it when needed.
• Your gender, including the option to say you would rather not answer.
• Your life stage, how familiar you are with Singapore, the kinds of weekends you rank highest, how you like to connect with people, and what you are looking for.
• Your answers to the quiz, kept as a record so we can re-derive your profile if we improve the method.

What the AI writes about you

• Your Otter Type, your personality summary, your interests, your energy and communication style, and the scores behind the card.
• Whether your profile came from the quiz alone or from a longer chat.

What you do in the app

• Places you save and events you mark yourself interested in.
• An activity log of taps that signal taste — opening a listing, swiping, viewing on the map — with a weight attached to each, and the preference profile we roll that up into.
• Searches you type. These are logged with your account if you are signed in, and without any account identifier if you are not.
• Reports you file about a listing. You can file these while signed out, and then we do not know who you are.
• Referral links you use or share.

Consent records

• When you accepted these terms, and whether and when you opted in to marketing emails. The PDPA requires us to be able to show this.

Technical data

• Your IP address, used to stop bots and abuse. It is held briefly in a rate-limiting counter and in our host's server logs, and is not attached to your profile.
• Standard web request information such as browser type and the pages you requested.

If you list a business

• Business name, category, description, address and location, booking link and Instagram handle.
• Contact person's name, email address and phone or WhatsApp number, used to verify you and to reach you. Contact details are private and are never shown to users.
• Photos you upload.

• Your NRIC, FIN or passport number. We never ask, and you should never send it to us.
• Payment or card details. EachOtterAIis free for users and we take no payments in the app. Bookings happen on the organiser's own site.
• Your live location. The map works from listing addresses, not from tracking you. We do not ask for GPS permission.
• Your contacts, photos, calendar or other apps.
• The text of your AI conversation. See section 4 — the transcript is not saved on our servers.
• Sensitive categories. We do not ask about your health, race, religion, political views or sexuality. Please do not volunteer them in the chat.

When you chat with EachOtterAI or complete onboarding, your messages are sent to Anthropic, the company behind the Claude AI models, which processes them on our behalf and returns a profile.

• We do not store the transcript on our servers. We store only what the AI concluded — your type, summary, interests and scores.
• A copy of the current conversation is kept in your own browser so you can resume it. Clearing your browser data removes it.
• Anthropic processes the text to generate a response and does not use it to train its models. It retains the request only briefly, for safety and abuse monitoring.
• We do not train AI models on your data either.Not on your messages, not on your profile, not on what you tap. We use an AI provider's model as it comes; we do not build or tune models on you. This is also written into section 7 of the Terms of Use, so it is a promise you can hold us to and not just a statement of current practice.
• This processing happens in the United States. See section 7.

We use your data only for the purposes above, or for a purpose you would reasonably expect and which we have told you about. If we ever want to use it for something genuinely new, we will ask first.

We do not make decisions about you that have legal or similarly significant effects using automated processing alone.

You consent to the processing described here when you create an account and accept the Terms of Use. You may withdraw that consent at any time.

Marketing email

We only send marketing email if you actively ticked the box. It is off by default. Every such email has an unsubscribe link, and you can also email eachotter.sg@gmail.com. We will stop within ten business days, and we keep a record that you withdrew.

Emails we must send to run your account — password resets, security notices, changes to these policies — are not marketing and continue regardless.

Withdrawing consent entirely

You can withdraw consent to all processing, which means closing your account. We will tell you what that means before we act on it. Once done, we can no longer provide the service to you.

We do not sell your personal data, and we never will. We do not share your profile with advertisers or data brokers.

We use these service providers to run EachOtterAI:

Each is bound to use the data only to provide their service to us, and to protect it to a standard comparable to what the PDPA requires.

What businesses see

Partners never see your name, email address or profile. If we give them audience information in future, it will be aggregated statistics about groups of people, never anything that identifies you.

Other users

Person-to-person matching, messaging and invitations are currently switched off. Today, no other user can see your profile. If we turn those features on, it will be opt-in and we will update this policy and tell you before anything of yours becomes visible.

Other situations

• Where the law requires it, or in response to a valid request from the police, a court or a regulator.
• Where it is necessary to investigate abuse, prevent fraud, or protect someone from harm.
• If our business is reorganised or acquired, in which case the acquirer is bound by this policy and we will tell you.

Some of the providers in section 7 process data outside Singapore, mainly in the United States. Section 26 of the PDPA requires us to make sure your data stays comparably protected when it does.

We do this by contracting only with providers whose terms commit them to protection standards at least equivalent to the PDPA, by sending them the minimum necessary, and by not sending them anything from the "do not collect" list in section 3.

We use very little of this, and no advertising trackers at all.

• Essential cookies — these keep you signed in. Without them the app cannot work, so there is nothing to opt out of.
• Local storage in your browser — your onboarding progress, your current AI conversation, your theme, and cached listings so pages load quickly. This lives on your device, not on our servers, and clearing your browser data removes it.

We do not use Google Analytics, advertising pixels, or any third-party tracking or profiling cookie. Our usage statistics are our own and stay in our own database.

When a retention period ends, we delete the data or strip out anything that identifies you and keep only the statistics.

• Everything travels over encrypted connections and is encrypted at rest by our database provider.
• Access to your data is enforced at the database itself, row by row, so one account cannot read another's.
• Administrative access is limited to those who need it.
• Sensitive keys are held as server-side secrets and never sent to your browser.

No system is perfectly secure. If a breach occurs that is likely to cause you significant harm, or that affects a large number of people, we will notify the Personal Data Protection Commission within 3 calendar days and notify you as soon as practicable, as Part 6B of the PDPA requires.

Under the PDPA you may:

• Ask what we hold about you, and how we have used it in the past year.
• Correct anything that is wrong. Most of it you can edit yourself in the app.
• Withdraw your consent, for marketing or in full.
• Ask us to delete your data and close your account.
• Ask for a copy of the data you gave us, in a readable format.

Email eachotter.sg@gmail.com from the address on your account. We will respond within 30 days, and if we genuinely cannot, we will tell you when we can. These requests are free unless they are repetitive or excessive.

There are narrow cases where the law allows us to refuse — for example where releasing data would reveal someone else's personal information, or would compromise an investigation. If we refuse, we will tell you why.

You must be 18 or over to hold an account. We do not knowingly collect personal data from anyone younger. If you believe a child has an account, tell us at eachotter.sg@gmail.com and we will delete it and their data.

An adult may bring someone under 18 to an event they found here — see section 2 of the Terms of Use. That child has no account and we hold nothing about them: the booking is made by the adult, under the adult's account, and anything the organiser needs about the child is collected by the organiser directly, not by us.

If we change this policy in a way that materially affects you, we will tell you by email or in the app at least 14 days before it takes effect. The date at the top always shows the current version.

Please raise it with us first at eachotter.sg@gmail.com — we would rather fix it than have you escalate. If you are not satisfied with how we handled it, you can complain to the Personal Data Protection Commission (PDPC) of Singapore at pdpc.gov.sg.

See also our Terms of Use and Community Guidelines.