Privacy Policy

1. What we collect

• Account data: your email address and a hash of your password. We never store the password itself.
• Pet data: the pet profiles you create (name, species, breed, distinctive markings) and up to four reference photos per pet.
• Creations: the images we generate for you, the options you chose and any note you added.
• Consent and credit records: which version of these documents you agreed to and when, your age confirmation, and your credit balance and history.
• Technical data: IP address and device information, used for security, bot protection and rate limiting.

Pawmoji is for pet photos. We recommend uploading photos with no people in them; if a person appears, crop them out first.

2. How we use it

• To run your account and keep it secure.
• To create the images you request, and to show, export and delete them.
• To prevent abuse, enforce limits and handle reports.
• To process payments and keep the records the law requires.

We do not sell your personal data, we do not use your photos for advertising, and we do not use your photos or images to train AI models.

3. Who processes your data

We share data only with service providers that help us run Pawmoji:

• Google (Gemini API) and OpenAI (OpenAI API) receive your pet photos, pet details and creation options to generate images. We ask for your explicit agreement before sending them anything.
• Supabase hosts our database, account system and file storage.
• Stripe processes payments.
• Cloudflare (Turnstile) checks that sign-ups and sign-ins come from people rather than bots.
• Our email provider sends account emails such as confirmations and password resets.

These providers may process data in countries other than yours, including the United States. Where the law requires it, we rely on appropriate safeguards such as standard contractual clauses.

4. What the AI providers do with your photos

Google and OpenAI process your content to return the generated image. Under the paid API terms that apply to us when this version was published, they do not use this content to train their models, but they may keep it for a limited period to detect abuse and meet legal obligations. Their own privacy policies apply to that processing.

Generated images carry the providers' AI provenance signals (Google SynthID watermarks, OpenAI C2PA Content Credentials). These identify the image as AI-generated; they do not contain your name or email address.

5. How long we keep it

• Pet photos and generated images: until you delete them, delete the pet or delete your account.
• Account, consent and credit records: for as long as your account exists; payment records may be kept longer where the law requires it.
• Security logs: for a limited period, and never with photo content.

Deleting your account removes your data from our active systems straight away; copies in backups expire on the normal backup cycle.

6. Your choices and rights

You can view, edit and delete your pets and images in Pawmoji, and delete your account in Settings. Depending on where you live, you may also have the right to access, correct, export or erase your data, or to object to its processing. Write to support@pawmoji.invalid and we will respond within the time the law requires. You can also complain to your local data protection authority.

7. Children

Pawmoji is only for people aged 18 or over. We do not knowingly collect data from children; if you believe a child has created an account, contact us and we will delete it.

8. Security

Photos and images are stored privately and are only served to the account that owns them. Connections are encrypted, and the keys for the image models never leave our servers.

9. Changes

This policy shares its version date with the Terms of Service. We will ask you to agree again when a new version materially changes how we handle your data.

10. Contact

Privacy questions and requests: support@pawmoji.invalid.