PetWith ("PetWith", "we", "us") is a companion app where you adopt and raise AI pets and interact with a small social community. This policy explains what we collect, how we use it, who processes it on our behalf, and the choices you have. We do not sell your personal information, we show no ads, and we do not track you across other apps or websites.
1. Information we collect
(a) Information you provide
Account information: your email address (for email sign-up); and, if you use Sign in with Apple or Google, the account identifier those providers return (and the email you authorize them to share).
Your content: pet photos, profile photos, and optional portrait-reference photos you upload; the messages and comments you create when interacting with AI pets and with other users; pet details (name, nickname, the small profile you write); and posts you publish.
(b) Information collected automatically
Identifiers: your account ID (uid); a device push token (APNs / FCM) used to deliver notifications.
Purchase and subscription information: the product purchased, subscription status and dates, and Apple transaction identifiers or signed transaction data needed to verify, restore, secure, and support your subscription. Apple processes your payment details; PetWith does not receive your full card or bank information.
Usage data (product analytics): a random, anonymous identifier (anonId) plus whether you completed key steps (such as sign-up, creating a pet, or subscribing) and your device platform (iOS / Android / Web). This does not include your name, email, photos, or message content. See Section 7.
Technical and log data: request IP address, timestamps, device and OS version, and crash / error diagnostics — used for security, troubleshooting, and abuse prevention.
We do not request access to your device's precise location, contacts, or advertising identifiers (IDFA / GAID). When you choose Google Sign-In, Google's sign-in SDK may process the name, email address, phone number, Google user ID, device ID, other data, other usage data, and coarse location inferred from your IP address that its Apple privacy manifest declares, for app functionality and, for some categories, analytics. This does not give PetWith access to GPS or precise location. A photo you choose to upload may itself contain embedded metadata, including location metadata. We use no third-party advertising SDKs and perform no cross-app or cross-site tracking.
2. How we use information
To provide core features: accounts, creating and raising pets, social features (following, posts, visits, dens), and AI generation (chat, image generation, and image-to-video).
To send notifications (you can turn these off in your device settings).
For security, anti-abuse, fraud prevention, and to meet legal obligations.
To improve the product through analytics (Section 7) — you can opt out at any time.
3. Who processes your information (service providers)
We do not sell or "share" your personal information with advertisers. To operate the service, data is processed by the following providers acting on our behalf:
Google Firebase / Google Cloud — authentication, database (Firestore), file storage (Cloud Storage), backend compute (Cloud Run), and push (FCM). Data is stored in the United States.
Cloudflare — content delivery (CDN) and web application firewall (WAF).
BytePlus (a ByteDance company) — "ModelArk" AI models — powers our AI chat, image generation, and image-to-video features. We send only the content needed to generate a result (your pet's image/text, the messages you direct to AI pets, and an optional profile or portrait-reference photo when you choose a feature that uses it). This processing is performed by Byteplus Pte. Ltd. (a Singapore-registered company) on servers located in Malaysia.
Apple (in-app purchases, Sign in with Apple) and Google (third-party sign-in) — only when you use those features. Google's sign-in SDK declares the linked data categories listed in Section 1, including coarse location inferred from IP; it declares that these categories are not used for tracking.
We may also disclose information where required by law, to protect rights and safety, or in connection with a business transfer.
4. Data storage and international transfer
Primary data is stored in the United States, with media distributed via a global CDN.
AI processing occurs in Malaysia (by Byteplus Pte. Ltd., Singapore), limited to the content needed to generate a result.
By using the app you understand that your information may be processed outside the region where you live. We do not currently offer the service in the European Union.
5. Data retention
Account and your content: retained while your account exists; handled per Section 6 when you delete your account.
Temporary portrait references: a photo selected specifically for an AI portrait-reference feature is stored in a separate non-public bucket, deleted from active storage after processing when possible, and automatically expires from active storage within about one day as a cleanup backstop. Google Cloud's soft-delete recovery layer may retain a non-public recoverable copy for up to 7 additional days before permanent purge; it is not available through PetWith during that period.
Media URLs: profile photos, pet photos, and generated images may be delivered from media storage through hard-to-guess public CDN URLs. A URL is not the same as account-authenticated access, so please do not use a public profile photo for an image you consider highly sensitive. Temporary portrait references described above are not placed on this CDN.
Product-analytics events: retained for a short period (target ~90 days) and then automatically deleted.
Logs / diagnostics: retained for a limited period, then cleared.
6. Your choices and rights
Access / correct: view and edit your profile, pet information, and content in the app.
Delete your account: you can delete your account directly in the app (Settings → Account → Delete Account). You may choose immediate deletion or schedule deletion after a 48-hour cooling-off period, during which you can cancel the request. For an Apple-linked account, the one-time reauthorization code you provide is exchanged for an Apple revocation credential; that credential is encrypted and retained only until you cancel the request or deletion runs, then it is deleted (and revoked when deletion runs). When deletion finishes, we make a best-effort attempt to send a completion notification using an available device token held only in process memory for that final send; the stored push-token record is removed first, and delivery is not guaranteed. Deletion removes account-linked profile, pet, post, chat, and media data from the active service, except where we are required to retain certain data by law. Google Cloud's non-public soft-delete recovery copies of deleted media may remain for up to 7 days before permanent purge. Anonymous analytics events are not keyed by your uid, cannot be selected by account ID during deletion, and expire automatically after about 90 days. Deleting your PetWith account does not cancel an Apple-managed auto-renewable subscription or stop Apple billing; manage or cancel it separately in your Apple ID's App Store subscription settings.
Opt out of analytics: turn it off any time under Settings → Usage Analytics; it takes effect immediately.
California (CCPA/CPRA): you have the right to know, access, delete, and correct, and to opt out of "sale/sharing" — we do not sell or share your personal information, and you will not be discriminated against for exercising your rights.
Notifications: turn off push in your device settings.
To make a request, contact jamesloopme@gmail.com. We respond within the period required by applicable law.
7. Product analytics
We perform first-party, anonymous product analytics, keyed only by a random anonId generated on your device. This identifier is not linked to your account: we do not store your account ID, name, email, IP address, or any device identifier alongside these events, so they cannot be traced back to you. Each event records only whether you completed steps such as sign-up, pet creation, and subscription, plus your device platform. It contains no photos, message content, or other free-text personal data, and is not used for advertising or cross-app tracking (so it does not trigger App Tracking Transparency). These events are deleted automatically about 90 days after they are recorded. You can turn analytics off any time under Settings → Usage Analytics. This paragraph describes PetWith's own product analytics; Google Sign-In provider processing is separate and is described in Sections 1 and 3.
8. Children's privacy
PetWith is intended for a general audience and is not directed to children under 13, and we do not collect age. We do not knowingly collect personal information from children; if we learn we have, we will delete it. If you believe a child has provided us information, contact jamesloopme@gmail.com.
9. Security
We use transport encryption (HTTPS), backend token authentication, database and storage access rules, and managed secrets. No system can guarantee absolute security, but we take reasonable measures to protect your information.
10. Changes to this policy
We may update this policy; we will notify you of material changes in the app or by email and update the "Effective date" above.