Privacy Policy.
Effective date: November 4, 2026
Made by BitterSweet publishes stories, a daily Reflection, and products connected to those stories, on our website (madebybittersweet.com) and in our mobile app for iOS and Android. Both are operated by BitterSweet Collective LLC ("BitterSweet," "we," "us").
This policy explains what information we collect through the website and the app, why, who we share it with, and the choices you have. Our shop is the same in both places: when you shop in the app, you are using our website's shop inside the app.
The short version: we collect only what we need to run the website and app and fill your orders. We do not sell your personal information. Your Reflection journal entries stay on your phone, and we never see them.
1. Information we collect
Account information (app): your name and email address, when you create an account or sign in.
Your preferences (app): topics you follow, saved items, Reflection schedule and times, and notification and display settings, when you set them.
Order information (shop, on the website and in the app): name, billing and shipping address, email, phone number, items ordered, and order history, at checkout.
Payment information (shop, at checkout): card details are handled by our payment processor. We see only a confirmation and limited details such as card type and last four digits.
Newsletter sign-up (website): your email address, when you subscribe.
Push notification token (app): a device identifier that lets us send notifications you've turned on, when you allow notifications.
Usage information (website and app): pages and screens viewed, stories opened, features used, links tapped, and referring sites.
Device and diagnostic information (website and app): browser or device model, operating system, app version, language, time zone, IP address and approximate region, and crash logs.
Cookies. Our website, including the shop when it opens inside the app, uses cookies and similar technologies. They keep your cart working, remember your settings, and measure visits through Google Analytics. You can block or delete cookies in your browser settings, though parts of the shop may stop working. The app itself measures usage with PostHog rather than cookies.
We do not collect your precise location, contacts, photos, or microphone audio. If you contact us by email, we keep that correspondence so we can respond.
2. Your Reflection journal stays on your phone
Anything you write in a Reflection journal is stored only on your device. It is never sent to our servers, and we cannot read, recover, or share it.
Because of this, journal entries are not backed up by us. If you delete the app or lose your phone, your entries may be lost. They may be included in your phone's own backup (iCloud or Google), depending on your device settings.
The app also stores copies of stories and images on your device so you can read offline. You can clear these by deleting the app.
3. How we use information
We use the information above to:
Create and manage your app account, and keep your saved items and preferences across devices
Show you stories and Reflections that match the topics you chose
Send the app notifications you've turned on, at the times you picked
Send our newsletter, if you subscribed
Process payments, fulfill and ship orders, and send order updates
Understand which parts of the website and app people use, so we can improve them
Fix crashes and keep the website and app secure
Respond to your messages and requests
Meet our legal obligations
Our home feed is arranged by our editors, not by an algorithm that profiles you. We do not show third-party ads, and we do not use your information for targeted advertising.
4. Who we share information with
We do not sell your personal information or share it for cross-context behavioral advertising. We share it only with service providers that help us run the website and app, and only what each one needs:
Squarespace hosts our website and runs our shop. It receives order information and usage and device information.
Stripe processes payments. It receives payment details, email, and billing information.
Printful prints, packs, and ships orders. It receives your shipping name and address, email, and the items ordered.
Mailchimp sends our newsletter. It receives your email address and whether you open or click our emails.
Google Analytics measures website visits. It receives usage and device information, via cookies.
PostHog measures app usage. It receives usage and device information.
Expo (EAS) delivers app updates and crash and performance reports. It receives device and diagnostic information.
Google Firebase Cloud Messaging delivers app push notifications. It receives your push notification token.
Our web hosting provider stores app account data and serves app content. It receives account information and preferences.
Partner links. Some cards in the app link to partner organizations. They open in a browser inside the app, but the partner's site is run by the partner, under its own privacy policy. Links may include tags that tell the partner the visit came from Made by BitterSweet. We do not send partners your name or email.
Legal and safety. We may disclose information if required by law, or to protect the rights, safety, or property of our users, BitterSweet, or others.
Business changes. If BitterSweet is involved in a merger, acquisition, or sale of assets, your information may be transferred. This policy will continue to apply to it.
5. Your choices and rights
Notifications: Turn each type on or off in the app under Profile > Notification preferences, or in your phone's settings.
Analytics: Opt out of Google Analytics on the website with Google's browser add-on. In the app, turn off usage analytics in Profile > Display settings. Crash reports may still be sent so we can fix problems.
Cookies: Block or delete cookies in your browser settings.
Newsletter: Unsubscribe with the link at the bottom of any newsletter email.
Access and correction: Update your app account details in the Profile tab, or email us for a copy of your data.
Delete your account: Use Profile > Delete account in the app, or email us. We delete your account and preferences within 30 days, except order records we must keep for tax and accounting.
California residents. Under the California Consumer Privacy Act, you can ask to know what personal information we collect, use, and disclose; to delete it; to correct it; and to opt out of its sale or sharing. We do not sell or share personal information as those terms are defined. We will not treat you differently for using these rights. To make a request, email info@bittersweetcollective.com. We may need to confirm your identity first, and you may use an authorized agent.
Residents of other US states with privacy laws can make the same requests the same way.
6. How long we keep information
We keep account information and preferences while your account is open, and delete them within 30 days after you delete your account. Order records are kept for up to 7 years for tax and accounting. Analytics data is kept for up to 14 months. Newsletter emails are kept until you unsubscribe. Push tokens are deleted when you turn off notifications or delete your account.
7. Security
We use encryption in transit (HTTPS) and trusted providers to protect your information. Card numbers never touch our servers. No system is perfectly secure, so we can't guarantee absolute security.
8. Children
The website and app are not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child under 13 has given us information, contact us and we will delete it.
9. Changes to this policy
If we change this policy, we will update the effective date above. If the change is significant, we will tell you on the website or in the app before it takes effect.
10. Contact us
BitterSweet Collective LLC
info@bittersweetcollective.com