PetWith ("PetWith", "we", "us") is a companion app where you adopt and raise an AI pet, either by yourself or with one co-care partner, and discover public pet profiles through City and Following. This policy explains what we collect, how we use it, who processes it on our behalf, and the choices you have. We do not sell your personal information, we show no ads, and we do not track you across other apps or websites.
1. Information we collect
(a) Information you provide
Account information: your email address (for email sign-up); and, if you use Sign in with Apple or Google, the account identifier those providers return (and the email you authorize them to share).
Your content: pet photos, profile photos, and optional portrait-reference photos you choose to upload; private pet-chat messages, shared household messages, comments, and household activity text or media; pet and shop names and other text you create; pet details (such as name, nickname, traits, and hobbies); and relationship, memory, City, Following, co-care, and activity context created as you use the companion features.
(b) Information collected automatically
Identifiers: your account ID (uid); a device push token (APNs / FCM) used to deliver notifications.
Purchase and subscription information: the product purchased, subscription status and dates, and Apple transaction identifiers or signed transaction data needed to verify, restore, secure, and support your subscription. Apple processes your payment details; PetWith does not receive your full card or bank information.
Usage data (product analytics): a random, anonymous identifier (anonId) plus whether you completed key steps (such as sign-up, creating a pet, or subscribing) and your device platform (iOS / Android / Web). This does not include your name, email, photos, or message content. See Section 7.
Technical and log data: request IP address, timestamps, device and OS version, and crash / error diagnostics — used for security, troubleshooting, and abuse prevention.
We do not request access to your device's precise location, contacts, or advertising identifiers (IDFA / GAID). When you choose Google Sign-In, Google's sign-in SDK may process the name, email address, phone number, Google user ID, device ID, other data, other usage data, and coarse location inferred from your IP address that its Apple privacy manifest declares, for app functionality and, for some categories, analytics. This does not give PetWith access to GPS or precise location. A photo you choose to upload may itself contain embedded metadata, including location metadata. We use no third-party advertising SDKs and perform no cross-app or cross-site tracking.
2. How we use information
To provide core features: accounts, creating and co-caring for pets, City and Following, household invitations and membership management, private or shared-household AI pet chat, household activities, text and photo safety checks, and image and video generation.
To send notifications (you can turn these off in your device settings).
For security, anti-abuse, fraud prevention, and to meet legal obligations.
To improve the product through analytics (Section 7) — you can opt out at any time.
Co-care visibility
When you care for a pet alone, your private pet chat, private call name, preferences, memories, and keepsakes are visible only to you. If a second person later joins the household, this earlier private content is not moved into or shown in the shared household room.
After an invitation is accepted, messages sent in the household room, the pet's replies there, and household activities created during co-care are visible to both current members. An invited member can view private household activities only from the time they joined. Public pet profiles do not show household member names, relationships, member count, household messages, or private household activities.
A person who has a one-time invitation link can see limited pet and inviter profile information before deciding whether to join. Share invitation links only with someone you trust. A link expires, is single-use, and stops working if revoked.
When co-care ends, the shared room stops accepting new messages and future household activities and pet assets are no longer available to the former member. Each participant can retain a read-only view of the shared messages from the household period in which they participated, subject to account deletion, legal requests, and the retention terms below.
3. Who processes your information (service providers)
We do not sell or "share" your personal information with advertisers. Before PetWith sends your personal data to the third-party AI providers identified below, the app presents a separate disclosure and asks for your explicit permission. If you choose Not now, your personal data is not sent to those AI providers and AI and photo features, plus sharing or editing features that require AI text safety checks, remain unavailable unless you later allow them in Settings. In a two-person household, the pet AI processes shared-room messages only while both current members have valid permission. If either member has not allowed or later withdraws permission, the two members can continue exchanging ordinary messages, but pet AI replies and generation based on the shared chat are paused. To operate the rest of the service, data is processed by the following providers acting on our behalf:
Google Firebase / Google Cloud — authentication, database (Firestore), file storage (Cloud Storage), backend compute (Cloud Run), and push (FCM). Primary account and service data is stored in the United States.
Google Cloud Vision — performs safety checks on the image pixels of pet, profile, and portrait-reference photos you choose to upload, and on generated images. PetWith removes embedded image metadata before this check.
Cloudflare — content delivery (CDN) and web application firewall (WAF).
BytePlus — ModelArk AI models — powers AI pet chat, text safety checks, and image and video generation. With your permission, we send only the content needed for the requested or automated companion feature. Depending on the feature, this may include messages and other text you provide, pet details and photos, a profile or portrait-reference photo you choose, recent conversation content, and relationship, memory, mood, outing, or other activity context. This processing is performed by Byteplus Pte. Ltd. (a Singapore-registered company) on servers located in Malaysia.
Apple (in-app purchases, Sign in with Apple) and Google (third-party sign-in) — only when you use those features. Google's sign-in SDK declares the linked data categories listed in Section 1, including coarse location inferred from IP; it declares that these categories are not used for tracking.
We may also disclose information where required by law, to protect rights and safety, or in connection with a business transfer.
4. Data storage and international transfer
Primary data is stored in the United States, with media distributed via a global CDN.
BytePlus ModelArk processing occurs in Malaysia (by Byteplus Pte. Ltd., Singapore), limited to the content needed for the disclosed purposes.
Your information may be processed outside the region where you live. PetWith asks for separate permission before sending personal data to BytePlus ModelArk or Google Cloud Vision. We do not currently offer the service in the European Union.
5. Data retention
Account and your content: retained while your account exists; handled per Section 6 when you delete your account.
Household chat and read-only archives: shared messages are retained while co-care is active. When co-care ends, the room becomes read-only for the members who participated in that household period, until the relevant account is deleted, a valid deletion request is handled, or we no longer have a reasonable need to retain the data.
Private household activities and outing media: available only after an active household-membership check. Personalized outing media is stored in non-public storage and delivered through short-lived access URLs issued after that check. A former member cannot obtain new access URLs for future activity. These activities and media are retained with the creator's household account and handled under the exit, deletion, and legal-request rules in this policy.
Temporary portrait references: a photo selected specifically for an AI portrait-reference feature is stored in a separate non-public bucket, deleted from active storage after processing when possible, and automatically expires from active storage within about one day as a cleanup backstop. Recoverable soft-delete copies are disabled for this non-public bucket.
Public media URLs: profile photos, public pet photos, and public catalog assets may be delivered from media storage through hard-to-guess public CDN URLs. A URL is not the same as account-authenticated access, so please do not use a public profile photo for an image you consider highly sensitive. Private household media and temporary portrait references described above are not placed on this public CDN.
Product-analytics events: retained for a short period (target ~90 days) and then automatically deleted.
Logs / diagnostics: retained for a limited period, then cleared.
6. Your choices and rights
Access / correct: view and edit your profile, pet information, and content in the app.
Leave co-care: an invited member can leave, and the household creator can remove the invited member. Leaving or removal immediately ends access to future household activities, private media, and pet assets; the completed shared-room period becomes read-only. Blocking or reporting does not prevent either member from leaving co-care or deleting an account.
Delete your account: you can delete your account directly in the app (Settings → Account → Delete Account). You may choose immediate deletion or schedule deletion after a 48-hour cooling-off period, during which you can cancel the request. If an invited member deletes their account, PetWith first removes that membership; messages sent by that account and its identity links are removed from shared data, while the pet and remaining shared assets stay with the creator. A household creator must end co-care before deleting an account while another member remains; PetWith does not directly cascade-delete a pet that another person is actively co-caring for. For an Apple-linked account, the one-time reauthorization code you provide is exchanged for an Apple revocation credential; that credential is encrypted and retained only until you cancel the request or deletion runs, then it is deleted (and revoked when deletion runs). When deletion finishes, we make a best-effort attempt to send a completion notification using an available device token held only in process memory for that final send; the stored push-token record is removed first, and delivery is not guaranteed. Deletion removes account-linked profile, chat, household-activity identity, and media data from the active service and, when you are the creator, the related pet and household data, except where we are required to retain certain data by law. The non-public media bucket is configured without recoverable soft-delete copies. Anonymous analytics events are not keyed by your uid, cannot be selected by account ID during deletion, and expire automatically after about 90 days. Deleting your PetWith account does not cancel an Apple-managed auto-renewable subscription or stop Apple billing; manage or cancel it separately in your Apple ID's App Store subscription settings.
Third-party AI permission: allow or decline the separate disclosure shown before any personal data is sent to BytePlus ModelArk or Google Cloud Vision. You can later allow or withdraw permission under Settings → Third-party AI processing. Withdrawal takes effect for future transfers; AI and photo features, plus sharing or editing features that require AI text safety checks, become unavailable. In a two-person household, either member's withdrawal pauses shared pet AI and generation based on shared chat, but does not stop ordinary member-to-member messages or prevent leaving the household. Withdrawal does not remove content already stored in your PetWith account or results already generated; use account deletion or contact us for those requests.
Opt out of analytics: turn it off any time under Settings → Usage Analytics; it takes effect immediately.
California (CCPA/CPRA): you have the right to know, access, delete, and correct, and to opt out of "sale/sharing" — we do not sell or share your personal information, and you will not be discriminated against for exercising your rights.
Notifications: turn off push in your device settings.
To make a request, contact jamesloopme@gmail.com. We respond within the period required by applicable law.
7. Product analytics
We perform first-party, anonymous product analytics, keyed only by a random anonId generated on your device. This identifier is not linked to your account: we do not store your account ID, name, email, IP address, or any device identifier alongside these events, so they cannot be traced back to you. Each event records only whether you completed steps such as sign-up, pet creation, and subscription, plus your device platform. It contains no photos, message content, or other free-text personal data, and is not used for advertising or cross-app tracking (so it does not trigger App Tracking Transparency). These events are deleted automatically about 90 days after they are recorded. You can turn analytics off any time under Settings → Usage Analytics. This paragraph describes PetWith's own product analytics; Google Sign-In provider processing is separate and is described in Sections 1 and 3.
7a. Optional Apple Ads measurement
This is separate from anonymous usage analytics and is off by default. If you are 18 or older, you may opt in under Settings → Apple Ads measurement. We obtain campaign, ad-group, keyword (when supplied), conversion-type and country/region information through Apple’s AdServices framework. We link this information to your PetWith account and Apple-verified subscription transactions, including renewals and revocations/refunds, solely to measure PetWith’s own advertising. We do not access IDFA or send your account, purchase history, or chat content to advertising networks. Apple’s transient attribution token is exchanged server-side and is not stored; a one-way token hash is retained for up to 24 hours to prevent duplicate attribution. Subscription-measurement records expire about 400 days after purchase; the campaign information remains until you withdraw consent or delete your account. Turning this setting off deletes the linked measurement data and does not cancel your subscription or change VIP benefits. Anonymous product analytics remains separate, with no account-to-anonymous-ID mapping. We do not combine this data with other companies’ user profiles or use it for cross-app targeting.
8. Children's privacy
PetWith is intended for a general audience and is not directed to children under 13, and we do not collect age. We do not knowingly collect personal information from children; if we learn we have, we will delete it. If you believe a child has provided us information, contact jamesloopme@gmail.com.
9. Security
We use transport encryption (HTTPS), backend token authentication, database and storage access rules, and managed secrets. No system can guarantee absolute security, but we take reasonable measures to protect your information.
10. Changes to this policy
We may update this policy; we will notify you of material changes in the app or by email and update the "Effective date" above.