PetMagic Privacy Policy

1. What data we collect

We may process account data (such as email and display name), preferences, consent records, technical session data, and feature-related data such as media uploads, usage events, and support messages.

2. Why we process data

We use data to operate your account, provide app functionality, maintain security, support users, prevent abuse, and comply with legal obligations. Marketing messages are sent only if you explicitly opt in.

3. Data sharing

We do not sell personal data. We share data only with trusted infrastructure, authentication, payment, and communication providers when necessary to operate the service and fulfill legal or contractual obligations.

Optional sharing with Meta for advertising measurement is described in section 6 and requires your separate choice.

4. Storage and protection

We apply reasonable technical and organizational safeguards to protect personal data from unauthorized access, loss, or alteration. Data is retained only as long as needed for processing purposes or as required by law.

5. Your rights

Where permitted by law, you may request access, correction, or deletion of your personal data. We also store accepted legal document versions and timestamps to verify your consent status.

6. Optional advertising measurement

When advertising measurement is available, you can separately choose whether to share your device advertising identifier, app and operating system versions, and events such as app activation, registration, content views, generation milestones, checkout and verified purchases (including amount and currency) with Meta to measure advertising and improve campaign delivery. We do not send your photos, generation prompts, email address or support messages through this integration. Declining does not limit PetMagic features. On iOS, sharing also requires system tracking permission.

You can withdraw this choice in Profile settings. Withdrawal stops new collection on this device immediately; if you are offline, server revocation is retried when connectivity returns. A server consent context expires within 24 hours without renewal. Revocation removes the advertising identifier and suppresses queued delivery. Delivery records are removed within 31 days. Payment records are retained separately for accounting and service operation. Information already delivered to Meta is processed under Meta’s privacy policy. This optional advertising choice is separate from consent to marketing messages.