Your privacy, protected by design

What data we collect

• Account data: email, name, and authentication info via Clerk (our auth provider).
• Pet content: images you upload, prompts, style selections, and generated outputs.
• Usage data: device info, interactions, and diagnostic events to improve reliability and prevent abuse.
• Payment/credits: transactional records (no full card numbers) and credit balance used for generations.
• Support: messages you send to our team so we can resolve issues.
• Cookies and local storage: session, security, and preference cookies; optional analytics cookies only with consent where required.

Why we process data (GDPR legal bases)

• Provide the service: run accounts, generate pet art, and deliver features (contract necessity).
• Security and abuse prevention: detect misuse and keep the platform safe (legitimate interests).
• Product improvement: quality tuning, reliability, and UX research with aggregated or de-identified data (legitimate interests).
• Communications: service emails and support responses (contract necessity); marketing only with your consent and easy opt-out.
• Compliance: records needed for accounting, audits, and legal obligations.

AI processing

We use third-party AI providers (e.g., OpenAI and Replicate) to process prompts and images. Inputs are sent securely, used to generate outputs, and not added to public training sets. We apply reasonable safeguards to prevent unintended reuse and honor deletion requests when applicable.

Data sharing

We only share data with vetted processors who follow our instructions:

• Authentication: Clerk for secure sign-in and account management.
• AI generation: OpenAI and Replicate to generate outputs from your inputs.
• Hosting and storage: Infrastructure and CDN partners to serve the app.
• Payments and credits: Payment processors for transactions and invoices.
• Analytics (if enabled): Privacy-focused analytics; consent where required.
• Compliance and safety: If required by law or to protect rights and safety.

We do not sell personal data. We impose confidentiality, security, and GDPR-compliant terms on all processors.

International data transfers

When data moves outside your region (for example, to the United States), we use appropriate safeguards such as the EU Standard Contractual Clauses and equivalent UK addenda. We assess vendor practices and limit transfers to what is necessary to provide the service.

Retention

We keep personal data only as long as needed for the purposes above:

• Account data: kept while your account is active.
• Generated images and prompts: retained to power your history and share links; you can request deletion.
• Logs and security data: typically 12–18 months unless needed for investigations.
• Billing records: kept for legal and tax obligations.

Your rights

Where GDPR or similar laws apply, you can:

• Access and receive a copy of your personal data.
• Correct inaccurate or incomplete data.
• Delete data in certain cases (“right to be forgotten”).
• Restrict or object to processing based on legitimate interests.
• Data portability for information you provided.
• Withdraw consent at any time for consent-based processing.
• Lodge a complaint with your local supervisory authority.

To exercise rights, email privacy@aipetgenerator.app. We may need to verify your identity to process the request.

Security

We apply layered security: encryption in transit, access controls, least-privilege principles, and ongoing monitoring. No online service is perfect, but we actively mitigate risks and respond to incidents.

Children

AI Pet Generator is not intended for children under 16. We do not knowingly collect data from children. If you believe a child provided data, contact us to delete it.

Changes to this policy

We may update this notice to reflect product or legal changes. We will post updates here and, when appropriate, notify you through the app or email.