Privacy Policy — Dear Pet

1. Scope

This Policy applies to the Dear Pet app distributed on Google Play (package name: dev.honami.dearpet) and to our backend APIs that power the Service. It does not apply to third-party websites or services that we do not control.

The Service is intended for users aged 13 and over. If you are under the age required in your country to consent to data processing without parental consent, you may not use the Service.

2. Summary of processing

Dear Pet lets you upload a photo of your pet and receive a short AI-generated video. We use a device-based account (no email or password required). We process data to operate the Service, prevent abuse, handle in-app purchases through the app store, improve reliability, and comply with law.

We do not sell your personal data. We do not use third-party advertising or analytics SDKs in the app beyond what is described in this Policy.

3. Data we collect

3.1 Account and authentication data

When you first use the app, our servers create an anonymous account linked to a secret identifier generated on your device (“account identifier”). We store:

• A one-way hash of your account identifier (we do not store the full identifier on our servers after initial registration).
• Account metadata such as creation time and video credit balance.
• Security tokens.

Important: Your full account identifier is stored only on your device. If you lose it (for example by uninstalling the app and clearing app data without backup), we cannot restore your account or purchased entitlements tied to that identifier.

3.2 Optional device and usage analytics

If the app sends analytics to our servers, we may store optional fields such as:

• Country and locale-related settings
• Time zone
• Language preferences
• Device type and device model
• App version and build number
• Install source

All analytics fields are optional; we merge updates you send over time.

3.3 Fraud prevention and platform integrity

On Android, we may process:

• A platform integrity attestation token from the app store.
• A hashed device identifier derived on your device from Android system identifiers.

We use this information to protect the Service against abuse and automated misuse. We do not use it for advertising profiles.

3.4 User content and job data

To generate videos, we process:

• Pet photos you upload.
• Pet name and description you provide.
• Generated video files produced for your request.
• Technical metadata about each generation job.

User content is stored in encrypted cloud storage operated by our infrastructure provider.

3.5 Purchase and subscription data

If you buy credit packs or subscriptions through the app store, we process:

• Product identifiers (e.g. credit products, weekly or monthly subscription plans).
• Purchase tokens and order references from the app store operator.
• Subscription status, billing period, and fair-use counters linked to your account.
• Refund and revocation events received from the app store operator.

We do not receive or store your full payment card number. Payment processing and tax collection are handled by the app store operator. Prices shown in the app are tax-inclusive where applicable.

3.6 Data you send us directly

If you email contact@dearpet.app, we process the information you include (such as your email address and message content) to respond to you.

4. How we use your data

We process personal data on the following legal bases under the GDPR:

We do not use automated decision-making that produces legal or similarly significant effects solely based on profiling.

5. AI and automated processing

Video generation uses third-party automated AI services:

• An image analysis provider — receives your pet photo and the pet name you provide to analyze the image.
• A video generation provider — receives temporary access to your image (via a secure, time-limited link) and a text prompt to generate the video.

These providers process data on our instructions to deliver the Service. Processing may occur outside the European Union, including in the United States. Outputs may be imperfect or unexpected.

6. Where data is stored and processed

Primary hosting is with cloud infrastructure providers in the European Union (Ireland), including:

• Application servers
• Databases
• User photo and video storage
• API delivery and edge protection
• Operational logging

Because we operate worldwide, data may also be processed in other countries, including the United States, when:

• App store and payment platform operators process billing, subscription, or integrity-related requests;
• AI providers perform image analysis or video generation;

Where required, we rely on appropriate safeguards for international transfers, such as Standard Contractual Clauses approved by the European Commission and supplementary measures where appropriate.

7. Retention

We keep personal data only as long as necessary for the purposes above:

When retention periods expire, we delete or anonymize data unless we must retain it to comply with law or establish, exercise, or defend legal claims.

8. Sharing and disclosure

We share personal data only with:

• Service providers that help us run the Service (cloud hosting, AI providers, app store and payment platform APIs), under contracts that require them to protect your data and use it only for our instructions.
• App store operators when you use in-app purchases or when the app submits platform integrity checks.
• Authorities or third parties when required by law, court order, or to protect rights, safety, and security.

We do not sell or rent personal data.

9. Your rights

If GDPR or comparable law applies to you, you have the right to:

• Access your personal data and receive a copy.
• Rectify inaccurate data (note: much of your account data is technical; some fields can be updated by using the app).
• Erase your data (“right to be forgotten”) in certain circumstances.
• Restrict processing in certain circumstances.
• Object to processing based on legitimate interests.
• Data portability for data you provided, where technically feasible.
• Withdraw consent where processing is based on consent (we use consent sparingly).
• Lodge a complaint with a supervisory authority — in Slovakia, the Úrad na ochranu osobných údajov SR (dataprotection.gov.sk).

To exercise your rights, contact contact@dearpet.app. We will respond within one month, extendable where permitted by law.

Account and data deletion

You may request deletion of your account and associated personal data by emailing contact@dearpet.app. We will verify the request and complete deletion within 30 days, unless we must retain certain data for legal, billing, or security reasons (we will explain if so).

Because we do not hold your full account identifier, we may need you to demonstrate account ownership (for example by contacting us from the same device while still signed in, or providing information only you would know about recent activity).

10. California privacy notice (CCPA / CPRA)

If you are a California resident, you may have additional rights under California law, including the right to know categories of personal information collected, to delete personal information, and to correct inaccurate personal information. We do not sell or share personal information for cross-context behavioral advertising.

To submit a request, email contact@dearpet.app. We will not discriminate against you for exercising your rights.

Categories collected in the last 12 months (illustrative): identifiers (hashed account identifiers, hashed device identifiers); customer records related to purchases (via the app store); internet or app activity (optional analytics); user-generated content (photos, pet names, descriptions, videos); inferences from AI processing.

11. Security

We implement reasonable technical and organizational measures to protect personal data, including encryption in transit (HTTPS/TLS), encryption at rest on storage systems, access controls, and redaction of secrets in logs. No method of transmission or storage is 100% secure.

If we become aware of a personal data breach likely to pose a high risk to your rights, we will notify you and the relevant supervisory authority as required by applicable law (including GDPR breach notification rules).

12. Children

The Service is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided data, contact contact@dearpet.app and we will take appropriate steps to delete it.

13. Changes to this Policy

We may update this Privacy Policy from time to time. We will post the revised version at https://dearpet.app/privacy.html and update the “Last updated” date. For material changes, we may provide additional notice in the app where appropriate.

14. Contact

This document describes our privacy practices as of the effective date. It is provided for transparency and does not constitute legal advice.