PetMagic Privacy Policy

1. Operator and contact

PetMagic creates AI pet images and videos and provides pet profiles, digital purchases and support. This notice covers the mobile apps, related website and backend. The operator and controller is Elastic Labs LLC, a US company. Correspondence address: 2150 N Miami Ave, Apt 915, Miami, FL 33127-4944, United States.

Contact Profile / Support. Without an account or the app, use the form at https://petgpt.app/privacy-request or write to privacy@petgpt.app. Privacy responsibility, including the person in charge of the protection of personal information under Quebec law: Vladimir Shumsky, privacy@petgpt.app. Never send passwords, verification codes or full card details.

2. Account, pet and content information

We process email, optional name and avatar, authentication/session records, preferences and legal-document acknowledgement versions and times. Apple or Google sign-in supplies available identifiers and account information, potentially an Apple relay email, not your Apple or Google password.

Pet profiles contain name, type, optional breed and selected photos linked to your account. Generations process source media or previous results, instructions, template settings, generated images/video, file details, status and history. Photos may incidentally reveal people or sensitive information. Upload only content you may lawfully use.

Support messages, attachments and feedback can include account, generation and order identifiers. Authorized support and administration personnel can access relevant records and media for operations, requests, incidents and abuse handling.

3. Payments, diagnostics and device storage

Purchase records include products, PawSpark ledger entries, subscriptions, orders, transaction identifiers, receipts/purchase tokens and status, with verified amount and currency where available. Apple, Google Play or Stripe process the selected payment channel. Do not send card details to support.

For eligible external purchases in the Android app, Google Play supplies a transaction attribution token. We protect this token on the server and send Google verified payment amounts, currency, tax country, payment time, external transaction identifiers and links between initial purchases, renewals and refunds to meet mandatory transaction-reporting requirements. Stripe hosts card entry; PetMagic does not receive full card numbers. Checkout links are cleared after account deletion. Tokens are removed after initial reporting or confirmation that the checkout ended without payment; tokens required for outstanding reporting remain protected until that reporting is resolved. Financial reports follow the accounting retention and limited exceptions in section 8.

Servers and infrastructure process IP addresses, request times, security and diagnostic records, versions and service interactions. Operational events can be account-linked and include a country code or device class; they are not all anonymous.

The app uses secure device storage for sign-in tokens, local preferences, caches and saved media. Device or cloud photo backups can retain copies you save. Cache clearing, hiding a result, deleting a device photo and account deletion are distinct.

Product analytics: the app records how its features are used — screens opened, onboarding steps, template, generation, paywall and purchase steps, errors shown and experiment variants — with a random installation identifier, a session identifier, the app version and platform, and your account identifier when you are signed in. It contains no photos, prompts, messages, IP addresses or advertising identifiers. We use it to find where people get stuck, compare versions of screens and improve the service, relying on legitimate interests where GDPR applies. Experiment variants are assigned from the random installation identifier only. Product analytics is kept 13 months and erased with the account.

4. Purposes and legal grounds

Account, content and transaction processing supplies requested functions, purchases, wallet/history, service messages and support. Where GDPR applies, necessary processing relies on contract performance or steps you request before it.

Proportionate security, fraud prevention, reliability and claims handling may rely on legitimate interests after balancing rights; mandatory recordkeeping relies on applicable law. Optional marketing and measurement require a separate choice where consent is required. Other regional consent requirements also apply.

Acknowledging this notice is not blanket consent. Missing information necessary for a function can prevent that function working; refusing optional advertising does not restrict PetMagic features.

5. External AI processing

For generation, selected source media or a temporary link, instructions, model settings and job information are sent to fal.ai (Features & Labels, Inc.) or Kie.ai (NEXUSAI SERVICES LLC). Depending on the model, fal may use an external model supplier such as OpenAI, Google, Black Forest Labs, ByteDance or Kling. Processing is not entirely on your phone. Before the first generation the app asks for your permission; you can withdraw it in Settings, after which generation is unavailable until you allow it again. Files that fal generates for you are set to expire after 72 hours, and the link to your photo that fal receives stops working after one hour; fal may keep records of requests under its own terms.

Exact model terms matter: we do not promise identical retention or no-training terms for all models. A no-training restriction differs from request/file deletion. The selected model and provider must match information disclosed before transmission. See https://fal.ai/legal/api-services and https://fal.ai/legal/privacy-policy.

Permission to deliver the requested result does not authorize unrelated advertising with private uploads or training a separate PetMagic model.

Kie.ai (NEXUSAI SERVICES LLC) is an additional possible AI processor. A generation may use fal.ai, Kie.ai, or both at different stages. Adding Kie requires renewed AI-processing permission (ai-processing-v2); you may refuse or withdraw permission in Settings. Kie storage and request-record retention are governed by its applicable service terms; the fal file-expiry periods above do not describe Kie. We do not promise a Kie retention period or no-training guarantee that has not been confirmed. See https://kie.ai/privacy-policy.

6. Other recipients and international processing

Cloudflare R2 is integrated for media storage/delivery. Hosting, databases and backups process service records. Firebase Cloud Messaging and Apple notification infrastructure process delivery identifiers and notification payloads. Firebase Crashlytics receives diagnostic reports, installation identifiers and crash details in non-debug builds, separately from Meta measurement.

Apple/Google support sign-in and store purchases; Stripe supports payments where offered. The email provider handles addresses and service or consented marketing messages. Providers may have independent roles for their direct services. Hosting and email recipients: OVHcloud US (servers and database), Cloudflare (DNS, storage of generated media and encrypted backups) and Resend (email delivery).

Processing may occur in the US and supplier countries outside Canada, Quebec, the EEA, UK or Switzerland; local authorities may have lawful access. Servers and the database are in Virginia, USA; Cloudflare chooses where media and encrypted backups are stored, which may be outside your region; fal.ai and its model providers, Firebase (Google) and Resend process data mainly in the USA. PetMagic, a US company, collects data directly from you; its providers process it under data processing terms that include, where required, the European Commission's Standard Contractual Clauses or, for certified providers, the EU-US Data Privacy Framework and its UK and Swiss counterparts. Applicable safeguard information can be requested. General consent does not replace a required transfer mechanism.

Legal requests, claims, abuse investigations and business reorganizations remain subject to applicable privacy duties, purpose limitations and any required notice or choice.

7. Optional Meta advertising and marketing

When eligible and available, if you are 18 or older you can separately allow Meta to receive your advertising identifier, app/OS versions and activation, registration, viewing, generation, checkout, trial, subscription and verified purchase events, including amount/currency, for attribution and campaign improvement. Allowing requires confirming that you are 18 or older; unknown age is not treated as adult. This integration excludes photos, prompts, email and support messages. iOS additionally requires App Tracking Transparency. Apple may separately give Meta aggregated install attribution through SKAdNetwork, without identifiers from PetMagic. Refusal does not restrict features.

Withdraw in Profile settings. Device collection stops; an offline server withdrawal retries after reconnection. Your choice stays in place until you withdraw it, but the advertising identifier is re-checked against device settings at least every 24 hours. Server-side events that occur while your choice remains in place, such as a subscription renewal while the app is closed, are sent only after the next successful check and only if they are at most 6 days old. Signing out or switching accounts also ends the permission. Revocation removes its advertising identifier and stops queued delivery; delivery records are cleaned up within 31 days. This does not recall data already received by Meta or erase separate payment records.

PetMagic does not offer uploaded photos for sale to data brokers. Advertising disclosures may nevertheless be sale or sharing under US state law without monetary payment. Applicable opt-outs can be requested through the privacy contact and measurement disabled in settings. See https://www.facebook.com/privacy/policy/.

Marketing-message permission is separate and off unless you turn it on. Every marketing email contains an unsubscribe link that works without signing in; you can also switch these emails off in Settings or through the privacy contact in section 1, and withdrawal also stops messages already queued. Necessary account, payment and security messages may continue. Change push permissions in device settings. Under-18 advertising safeguards are specified in section 12.

Install source (Android): only if you allowed advertising measurement above, the app reads the Google Play install referrer once and sends its campaign labels (source, medium, campaign; no advertising identifier, IP address or raw referrer) as a product-analytics event. We combine them with registrations and verified purchases to assess which campaigns work. Retention and deletion are as for product analytics; withdrawing the permission stops further collection.

8. Retention and deletion

Account and pet records remain while needed for the account. Generation media are temporary; the app displays a deletion date when supplied by the server. Media reused by another active/unexpired generation can remain until that dependency ends. Media removal does not necessarily erase job history, accounting records or shared/saved copies.

Unused uploads, support attachments, email jobs and advertising records have distinct cleanup rules. Link expiry is not file deletion. Retention periods: account and profile data while the account exists; pets and photos until you delete them or the account (their files are removed within 30 days); generated media 7 days after completion; unused uploads 60 minutes; generation history without media while the account exists; support conversations 24 months after closing, attachments 30 days; product analytics 13 months; security and audit logs 24 months; system server logs 14 days, application logs until size-based rotation overwrites them; ended sign-in sessions 30 days; email delivery records 7 days; identifiers of deleted accounts kept to prevent abuse 12 months; privacy requests 24 months; payment and subscription records 7 years, after account deletion only as accounting records; backup copies of the database and of files stored on our servers (such as profile pictures and support attachments) up to 12 months; backup copies of deleted media up to 90 days.

Use the account-deletion action in Profile settings or request erasure through section 1. Identity is checked proportionately. Deleting the account erases your data in all PetMagic services, normally within minutes and at most within 30 days, except the records listed above that we must keep, which are then no longer linked to your email or sign-in; backup copies expire as stated above.

Specific obligations, payment disputes, security investigations or claims can justify limited, time-bound retention, not indefinite keeping of all content. Backups need expiry and safeguards against restoring erased data to ordinary use. Account/app deletion does not cancel store-managed subscriptions.

9. Sharing, permissions and security

Recipients of shared files/links can retain or forward copies. A generation link may allow any holder to see the result while available. PetMagic deletion cannot erase recipients' independent copies.

Camera, photo-library and notification permissions support corresponding features and can be restricted in device settings. Library access is not permission to upload every item. Production architecture uses authentication, access controls, protected connections and restricted media links; no system guarantees absolute security.

10. Rights and requests

Applicable rights may include access, copy/portability, correction, erasure, restriction, objection and consent withdrawal; opt-outs of sale/sharing, targeted advertising or certain profiling; using an authorized agent, appealing a refusal and complaining to a regulator. Exercising applicable rights does not result in a penalty.

Provide enough information to locate the account and understand the request. Proportionate identity/authority checks may be needed; requests sent through the form are acted on only after you confirm your email address. We explain lawful refusals and respond within applicable deadlines, generally one month. Withdrawal does not invalidate earlier lawful processing. Copies must respect others' rights. The channel in section 1 works without an account.

11. Regional information

EEA, UK and Switzerland: contact the competent privacy regulator and exercise applicable rights, including safeguards for significant solely automated decisions. Required representatives, if applicable: No representative has been appointed. Initial Store distribution is limited to the United States, Canada and Mexico; expansion to the EEA, UK and Switzerland is deferred and requires a separate applicability assessment before launch. Creative generation is not a legal eligibility decision or professional advice.

Canada and Quebec: federal/provincial access, correction, consent and complaint rules can apply despite US establishment; processing can occur outside your province or Canada.

Mexico: service and optional purposes are distinguished above. Applicable ARCO rights (access, rectification, cancellation and objection) can be exercised through section 1; we respond within the statutory deadlines.

US states: rights depend on residence and statutory scope. PetMagic does not sell personal information for money. Measurement that may count as sharing for targeted advertising runs only in the app, only after you allow it, and can be switched off in Settings; the website uses no advertising tracking, so browser opt-out signals such as Global Privacy Control have nothing further to stop there. Authorized agents and appeals of refused requests use section 1.

12. Teenagers, updates and effective date

PetMagic is for people aged 16 or older; you confirm this when you accept these documents, and we delete accounts of younger people when we learn of them. Where local law requires, users under 18 need a parent's or guardian's permission for purchases. Advertising measurement is available only to people who confirm they are 18 or older. Store ratings do not verify age. Report suspected use by a child to the privacy contact.

Document versions and acknowledgements are recorded. Material new uses require appropriate notice and any required choice before they begin. Updates do not automatically enable optional marketing or measurement. Effective date: October 16, 2026.