Why my PetA Product Lab 30 project

Why my Pet: AI Pet Advisor

Last updated: 25 October 2026

Please read this Privacy Policy carefully. It explains what personal data we process when you use the Why my Pet mobile application, why we process it, who we share it with, and what rights you have.

1. Introduction and who we are

This Privacy Policy applies to the Why my Pet: AI Pet Advisor mobile application for iOS (the “App”) and the services available through it (together, the “Services”).

The controller of your personal data is Daryna Halavan, an individual developer established in Portugal (“we”, “us”, “our”). You can contact us about any privacy matter at productlab30@gmail.com.

“Personal data” means information relating to an identified or identifiable natural person, as defined in the EU General Data Protection Regulation 2016/679 (“GDPR”). This policy applies to all App users. The U.S. State Privacy Notice at the end additionally applies where relevant.

2. Personal data we process

2.1 Account data

When you create an account with email and password, we process your email address and password in protected form. If you use Google Sign-In, we receive the identifier, name, and email address Google shares with us. If you use Sign in with Apple, we receive Apple's account identifier and the email address you choose to share, which may be a private relay address; Apple supplies your name only during initial authorization if you choose to share it. We also generate a random internal user ID linked to your account.

2.2 Pet profile data

We process the details you choose to enter about a pet, including name, species, breed, age, weight, personality, avatar style, and pet photos. Free accounts are limited to one editable pet; Premium accounts may use additional pet profiles subject to the App’s current subscription terms.

2.3 AI chat content

We process the questions, messages, and optional pet photos you send in each pet’s chat, together with the AI-generated answers. Do not include information about people, such as faces, identity documents, addresses, or human health information. The chat is intended for questions about pets.

2.4 AI avatar data

We process pet-profile context submitted to generate an AI avatar, the selected style, and generated images. Avatar generation does not send selected chat photos to Gemini.

2.5 Purchase and subscription data

Subscriptions are processed by Apple through the App Store. We do not receive your card or bank details. We receive information needed to manage access, such as product ID, subscription status, transaction and renewal information, country or currency data supplied with the transaction, and store transaction identifiers. Superwall helps present paywalls and manage the purchase experience; subscription entitlement is verified by our backend using Apple transaction data.

2.6 Usage, device, and technical data

The App may collect device model, operating-system and app versions, language, time zone, approximate country derived from network information, IP address as handled by service providers, the random App user ID, and bounded in-app events such as first open, onboarding completion, pet creation, avatar generation, chat completion, paywall outcomes, subscription outcomes, navigation, and errors.

We use Amplitude for product analytics and Session Replay. During the private beta, Session Replay is sampled at 100% with conservative masking. Authentication, chat, pet-profile, pet-creation, and pet-image surfaces are blocked from replay. Analytics properties must not contain user-authored chat text, photos, pet identity, email addresses, access tokens, or raw error details.

We do not use Apple’s advertising identifier, track you across other companies’ apps or websites, or show advertising.

2.7 Support communications

If you contact us, we process your email address, name if provided, and the content and attachments you send so that we can respond.

2.8 Photos

The App uses Apple’s system photo picker when you choose to attach a pet image. We receive only the image you select.

2.9 Audio translations

Premium users may record a dog or cat for up to 10 seconds and explicitly submit the selected clip for an entertaining possible mood and invented quote. After your separate audio-processing permission, we send the recording, selected species, and optional saved pet name and personality through our backend to OpenAI. Microphone access alone does not grant upload permission. Please avoid recording people or private conversations.

Recordings are temporary: the App removes them after successful processing, discard, leaving the screen, or account change; abandoned files are cleared on the next launch. The backend does not save recordings or translation results. The current result is kept only on the screen, with no translation history. Share Card opens the system share sheet with a mood-and-quote image only; any copy you choose to export is handled by your chosen recipient or service.

We record your account's audio-permission choice and minimal account-linked request identifiers/timestamps for duplicate prevention and limits (6 requests per minute and 100 per rolling day). Request metadata is removed within 25 hours; Delete All Data also removes it and your audio permission. No raw audio, quote text, or share-card images are included in analytics or Session Replay; the translator and permission screens are blocked from replay. OpenAI's separate API safety and abuse-monitoring retention can still apply to submitted content.

We process account data and user content to create and authenticate your account and provide pet profiles, AI chat, and avatar features. The GDPR legal basis is performance of a contract (Article 6(1)(b)).

We process purchase information to provide subscriptions, restore access, meet accounting obligations, and prevent fraud. The legal bases are performance of a contract, legal obligation, and legitimate interests (Articles 6(1)(b), 6(1)(c), and 6(1)(f)).

We process limited usage and technical information to secure, diagnose, maintain, and improve the App. The legal basis is our legitimate interest in providing a reliable and usable service (Article 6(1)(f)). You may object as described in Section 8.

We process support communications to perform our contract and respond to requests. We may process relevant information to comply with law or establish, exercise, or defend legal claims.

Where processing relies on consent, you may withdraw consent at any time without affecting processing that took place before withdrawal. We will update this policy before using personal data for a materially new purpose.

4. How the AI features work

AI chat answers and pet insights are generated with OpenAI, and pet avatars are generated with Google Gemini. To generate answers and avatars, we send relevant pet details and conversation text to OpenAI or Google Gemini. Selected chat photos are sent to OpenAI.

The optional Premium dog/cat translator also uses OpenAI audio analysis to create an imagined mood and playful quote. It requires general AI permission plus a separate audio-purpose permission before the first audio upload. Settings → AI Processing → Review audio translation permission lets you withdraw audio permission. Withdrawing general AI permission also disables audio translation permission; re-enabling general permission alone does not re-enable audio uploads. Previously sent audio follows the provider retention terms; withdrawing permission stops future requests.

Before your account's first AI request, we ask separately for permission for this third-party AI processing. The general privacy acknowledgement does not grant this permission. We record the version of the disclosure and your choice for your account, including when you allow or withdraw permission. Existing accounts must also make this choice. We ask again only if the providers or data-sharing purposes materially change.

You can choose “Not now” and continue to use existing pet profiles and history without AI requests. Settings → AI Processing lets you review, allow, or withdraw permission. Withdrawal stops future AI requests; it does not retract information already sent to a provider or delete your profiles and history. Previously transmitted data remains subject to Section 7 and the providers' applicable retention terms.

We do not use your chats or images to train our own AI models. Provider handling and temporary abuse-monitoring retention are governed by the applicable API terms and privacy commitments.

AI output is automatic and may be inaccurate or incomplete. It provides general pet-care information and is not veterinary advice. The App does not make decisions producing legal or similarly significant effects about you.

5. Sharing of personal data

We do not sell personal data or share it for cross-context behavioural advertising. We share data only as needed with service providers and platform operators, including:

  • Supabase — authentication, database, file storage, and backend services.
  • OpenAI — AI chat generation using text and optional images, and optional dog/cat audio translation processing described in Section 2.9.
  • Google — Google Sign-In and Gemini avatar generation.
  • Amplitude — product analytics and Session Replay.
  • Superwall — paywall presentation and subscription experience.
  • Apple — Sign in with Apple, App distribution, and in-app subscription payments.

These providers process data under their own privacy terms and, where applicable, contractual processor obligations. Apple independently controls App Store payment data.

We may also disclose information when required by law, to protect rights or safety, investigate fraud, or in connection with a transfer of the App. A successor must respect this policy, and we will provide notice where required.

6. International transfers

Primary authentication, database, and file storage are hosted through Supabase in its configured region. Some providers process data outside the European Economic Area, including in the United States. Where required, transfers rely on an adequacy decision, the EU–U.S. Data Privacy Framework for participating providers, or safeguards such as the European Commission’s Standard Contractual Clauses. You may request information about applicable safeguards by contacting us.

7. Retention

Account-related data is retained while your account remains active. Pet profiles, photos, messages, and generated images remain until you delete the relevant pet or use the in-app Delete All Data action. Purchase records may be retained for the period required by tax, accounting, fraud-prevention, and legal obligations. Analytics and Session Replay data follow the configured retention periods of our analytics provider. AI providers may temporarily retain API inputs and outputs for safety and abuse monitoring under their applicable terms.

The in-app Delete All Data action removes pet profiles, stored pet images, chat history, attachments, generated avatars, and local app data associated with the signed-in user. To request deletion of the remaining authentication account record or exercise a legal right, contact productlab30@gmail.com from the account email. Deleting App data does not cancel an App Store subscription.

Backups and service-provider systems may retain residual copies for a limited period before automatic deletion or overwrite. We may retain information where required to meet a legal obligation, resolve disputes, or prevent fraud.

8. Your rights and choices

Depending on applicable law, you may have rights to access, correct, delete, restrict, or obtain a portable copy of your data; object to processing based on legitimate interests; and withdraw consent where consent is the legal basis.

You can edit pet profiles and delete stored pet data in the App. To exercise another right, request account-record deletion, or object to analytics, email productlab30@gmail.com from the address associated with your account. We may request information needed to verify your identity. GDPR requests are normally answered within one month, subject to lawful extensions.

You may complain to a supervisory authority. In Portugal, this is the Comissão Nacional de Proteção de Dados (CNPD), www.cnpd.pt. You may also contact the authority in your country of residence or work.

9. Security

We use safeguards including encryption in transit, provider encryption at rest, authentication, access controls, private storage, and database row-level security. No transmission or storage method is completely secure. We will provide legally required breach notifications.

10. Children

The App is not directed to children under 13. Users must be at least 18, or at least 13 with the consent and supervision of a parent or legal guardian. If you believe a child has provided personal data contrary to this policy, contact us so that we can investigate and delete it.

11. Changes to this policy

We may update this policy to reflect changes in the App or law. The App will contain the current version and its “Last updated” date. We will provide additional notice of material changes where required.

12. Contact

Daryna Halavan

Portugal

Email: productlab30@gmail.com

U.S. State Privacy Notice

Where applicable, residents of U.S. states with comprehensive privacy laws may have rights to know or access, correct, delete, and obtain a portable copy of personal information, and to appeal a denied request. We collect identifiers, account and subscription details, in-app usage data, and user-generated pet content for the purposes described above.

We do not sell personal information, share it for targeted or cross-context behavioural advertising, or use it for significant profiling. We do not knowingly sell or share personal information of users under 16.

Submit a request to productlab30@gmail.com with the subject “U.S. Privacy Request — [State]”. We will verify the request using the associated account email and respond within the period required by applicable law. If a request is denied, reply with the subject “Privacy Request Appeal”. An authorised agent may submit a request where permitted by law and must provide appropriate written authorisation.