Privacy Policy
Last updated: April 10, 2026
BADI ("we", "us", "our") is operated by Otter OU, a company registered in Estonia. This Privacy Policy explains what data we collect, why, and what we do with it.
If you have any questions, email us at hello@badi.ee.
What we collect
When you use BADI, we collect the following:
Account information — When you sign in with Google, we receive your name, email address, and profile photo from Google. We use this to create and display your BADI account.
Event and RSVP data — When you create events, respond to events, or add guest counts, we store that information so your team can see who's coming.
Discussion posts — Anything you post in your team's discussion feed is stored and visible to other team members.
Team membership — We store which teams you belong to and your role (member or admin).
Usage data — We collect basic analytics to understand how BADI is used, including page views and feature usage. We do not track you across other websites.
What we don't collect
We don't collect payment information, location data, contacts from your phone, or data from your Google account beyond what's listed above. We don't read your Gmail or access your Google Drive.
Why we collect it
We use your data to:
- Let you sign in and identify yourself to your team
- Show your name and photo to other team members
- Display RSVPs, guest counts, and discussion posts to your team
- Send you event notifications (if enabled)
- Improve BADI and fix bugs
We don't sell your data. We don't use it for advertising. We don't share it with data brokers.
Who can see your data
Your team members can see your name, profile photo, RSVPs, guest counts, and discussion posts within your shared team.
Team admins can additionally manage events and moderate discussion posts.
No one outside your team can see your activity. BADI does not have public profiles, search indexing of user content, or social discovery features.
Third-party services
We use the following services to run BADI:
| Service | Purpose | Data shared |
|---|---|---|
| Google OAuth | Sign-in | Name, email, profile photo (received from Google) |
| Supabase | Database and file storage | All app data (stored in EU) |
| Vercel | Hosting | Server logs, IP addresses |
| Resend | Email notifications | Email address, event details |
Each service has its own privacy policy. We choose services that store data in the EU where possible.
Cookies
BADI uses a session cookie to keep you signed in. We don't use tracking cookies, advertising cookies, or third-party analytics cookies.
Data retention
Your data is kept for as long as you have an account. If you want your data deleted, email hello@badi.ee and we'll remove your account and associated data within 30 days.
Team admins can remove members from a team, which removes that member's access but does not delete their posts or RSVPs. To fully delete your data, contact us directly.
Your rights (GDPR)
Since Otter OU is based in Estonia, the EU General Data Protection Regulation (GDPR) applies. You have the right to:
- Access your data — ask us what we have
- Correct inaccurate data
- Delete your data ("right to be forgotten")
- Export your data in a portable format
- Object to processing
- Withdraw consent at any time
To exercise any of these rights, email hello@badi.ee. We'll respond within 30 days.
Children
BADI is not intended for anyone under 16. We don't knowingly collect data from children. If you believe a child is using BADI, please contact us and we'll remove their account.
Changes to this policy
If we make significant changes, we'll notify you through BADI or by email. Minor wording updates won't trigger a notification.
Contact
Otter OU Email: hello@badi.ee Website: https://badi.ee