PawSnap

Privacy Policy

Last updated: May 20, 2026

This Privacy Policy explains what data PawSnap (“PawSnap”, “we”, “us”) collects when you use the PawSnap mobile app and the website at pawsnap.app, how we use it, who we share it with, and the choices you have. We try to keep this short and human-readable.

1. Information we collect

1.1 Information you provide

  • Pet photos. The images you upload to generate AI portraits.
  • Optional account information. If you choose to sign in (e.g. via Apple, Google, or email), we receive a stable user identifier and the email address you authorize.
  • Order details. If you order a physical print, the shipping address and order metadata you submit (payment is handled by Stripe and never touches our servers).
  • Support correspondence. Anything you send us at pawsnap@xmasdong.com.

1.2 Information collected automatically

  • Device identifier. A random ID generated on first launch and stored on your device. We use it to associate generations with your install and enforce free-credit limits.
  • Technical logs. IP address, timestamp, app version, OS, and basic request metadata, kept short-term for security and abuse prevention.
  • Crash and performance data. Aggregated, non-identifying telemetry to keep the app healthy.

1.3 We do not collect

  • Precise location data.
  • Contacts, microphone, calendar, or health data.
  • Tracking identifiers for cross-app advertising.

2. How we use your information

  • To generate AI pet portraits from the photos you upload.
  • To deliver the app, sync your gallery across devices if you sign in, and operate features such as ad-grant credits.
  • To process print orders and ship them to you.
  • To enforce quota limits, prevent abuse, and keep the service secure.
  • To respond to support requests and improve the app.
  • To comply with legal obligations.

We do not sell your personal information, and we do not use your pet photos to train third-party AI models.

3. Where your data lives

  • R2 (Cloudflare). Pet photos and generated portraits are stored as encrypted objects on Cloudflare R2.
  • D1 (Cloudflare). Metadata such as generation records, quota counters, and order references are stored in Cloudflare D1.
  • Replicate. Photos you upload are sent to Replicate-hosted AI models for the time it takes to generate your portrait. Replicate acts as a sub-processor under its own privacy terms.
  • Stripe. If you make a purchase, payment data is handled directly by Stripe; we receive only a non-sensitive reference.
  • Printify (only if you order a print). Shipping address and the chosen image are sent to Printify to fulfill the order.
  • RevenueCat. Subscription status, if any, is managed through RevenueCat.

4. Retention

  • Uploaded source photos are deleted within 7 days of generation completion.
  • Generated portraits are retained for 30 days so you can revisit your gallery, then deleted unless you save or order them.
  • Order records are kept for as long as required for tax, accounting, and customer-service purposes (typically 7 years).
  • Logs are kept for up to 90 days.

5. Your rights

Regardless of where you live, you may:

  • Access a copy of the personal data we hold about you.
  • Correct data that is inaccurate.
  • Delete your data, including all generated portraits and your device record. You can also do this from inside the app under Settings → Delete my data.
  • Object to or restrict certain processing.
  • Port your data to another service.
  • Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, email pawsnap@xmasdong.com. We respond within 30 days. If you are in the EEA, UK, or Switzerland, you also have the right to lodge a complaint with your local data protection authority.

6. AI-generated content

Portraits are produced by machine-learning models. They are creative reinterpretations and may not be photographically accurate. We disclose AI-generated content in-app and provide tools to download, share, or delete each result.

7. Children

PawSnap is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

8. International transfers

PawSnap is operated from the United States and uses globally distributed infrastructure (Cloudflare, Replicate, Stripe, Printify, RevenueCat). When you use PawSnap from outside the US, your information may be transferred to and processed in the US under appropriate safeguards such as the EU Standard Contractual Clauses.

9. Security

We use TLS in transit, encrypted object storage, scoped access tokens, and least-privilege internal access. No system is perfectly secure, but we take security seriously and disclose material incidents promptly.

10. Changes

We may update this Policy. If changes are material we will notify you in-app or by email (where applicable) before they take effect. The “Last updated” date above always reflects the current version.

11. Contact

Questions, requests, complaints? Email pawsnap@xmasdong.com.