Privacy policy.

1. Who we are

Howdy (howdy.bio) is a link in bio service. This policy explains what personal data we handle when you use our website, create a page, or visit a page made with Howdy.

2. Data we collect from you as a creator

• Account data: your email address and, if you sign in with Google, your name and profile picture from Google.
• Page content: the name, bio, links, images, sections and settings you add to your page.
• Profile answers: your niche, goal and platforms from onboarding, used to personalise suggestions.
• Billing data: your plan and payment status. Card details go directly to our payment provider and never reach us.
• Messages: anything you send through our contact form.

3. Data we collect from visitors to a Howdy page

When someone visits a page made with Howdy we record page views and link clicks for the page owner's analytics. We store: the type of event, which link was clicked, the referring site, device type, browser name, a country code derived from the connection, any UTM tags in the address, and a random visitor identifier stored in the visitor's browser to count unique visitors. We do not store IP addresses with these events and we don't use advertising cookies.

If a visitor chooses to subscribe or send a message through a page, we store the details they type (such as email, name and message) and make them available to that page's owner. The page owner decides what to do with them and is responsible for using them lawfully.

4. App developers and app links

If you add an iPhone app, we read its public listing through Apple's public iTunes API: its name, icon, screenshots, description, category, price, version, release notes and public rating. We do not ask for, and never receive, your App Store Connect credentials or API keys.

When someone opens a Howdy smart link or an app page, we record whether it was a visit or a tap on the store button, which source link was used, the device type and operating system, a country code, and where the visit came from (a website or an app such as Instagram). We do not store IP addresses with these events, and we don't count link-preview bots. The app's owner sees these numbers in their dashboard.

If you add an optional Apple provider token, we add it to your App Store links so Apple can record campaigns in App Store Connect. It is a public identifier, not a secret.

5. How we use data

• To provide and secure the service, including sign-in and publishing your page.
• To show you analytics about your own page.
• To power AI writing and design suggestions you ask for.
• To process payments, send receipts and prevent fraud.
• To answer your messages and improve the product.

6. AI features

When you use an AI helper, the text you provide (for example your bio or link names) and some context such as your niche are sent to an AI provider to generate suggestions. We do not use your pages, subscribers or messages to train AI models, and we do not allow our provider to do so on our behalf.

7. Who we share data with

We use service providers to run Howdy. They process data only to provide their service to us:

• Supabase: database and sign-in
• Cloudflare: image storage
• Dodo Payments: payments, invoicing and tax, acting as merchant of record
• An AI provider: generating suggestions you request
• Our hosting provider: serving the website

We do not sell your personal data.

8. Cookies and local storage

We use storage in your browser to keep you signed in, remember small preferences, and, on Howdy pages, to remember that a visitor has seen an intro and to count unique visitors. We do not use third-party advertising or tracking cookies.

9. How long we keep data

We keep your account and page data while your account is open. When you delete your account we remove your page, apps, subscribers, messages, analytics, uploaded files and login straight away. We may keep limited records where the law requires, such as payment records.

10. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to or restrict some processing. You can edit your content in the dashboard and download your subscribers as a CSV. You can delete your account yourself in Settings, which removes your page, apps, messages, analytics, uploaded files and login at once. For anything else, or if you can't sign in, use our contact page and choose “Delete my account”. We act on requests within 48 hours for deletion and within 30 days for other requests.

11. Security

We protect data with encryption in transit, access controls on the database and server-side checks on every sign-in action. No system is perfectly secure, so please use a strong, unique password.

12. Children

Howdy is not for children under 13, or under the minimum age in your country. We do not knowingly collect data from them. If you think a child has given us data, contact us and we'll delete it.

13. International transfers

Our providers may process data in countries other than your own. Where required we rely on appropriate safeguards for those transfers.

14. Changes to this policy

If we make important changes we'll update the date at the top and, where appropriate, tell you by email or in the product.

15. Contact

For privacy questions, use our contact page.