At PawModel, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information — including the photos and AI models we create of your pet — when you use our service.

Information We Collect

Information You Provide

Account information: your email address and, if you use email sign-up, a password. If you sign in with Google, we receive the basic profile fields Google provides (name, email, avatar).
Profile information: optional name and profile picture.
Pet profile information: pet name, species, breed, and any descriptive notes you add to help the AI understand your pet.
Pet photos: the 10–20 training photos you upload for each pet. These are used exclusively to train a custom AI model of that specific pet. See Pet Photos and AI Models below for the full detail.
Payment information: when you purchase a credit pack, our payment processor (Stripe) collects your card details. We never see or store your full card number — we only receive the purchase confirmation and the last 4 digits for your receipt.
Communications: the contents of any message you send us.

Information Collected Automatically

Usage data:pages visited, features used, and in-app actions (e.g., "started training", "generated image").
Device information: browser type, operating system, and device identifiers.
Log data: IP address, access times, and referring URLs. Used for security and abuse prevention.

Pet Photos and AI Models

This is the most sensitive data we handle, so we want to be explicit about how we treat it:

Training photos are used only to train your pet's model. We never use them to train any shared, general, or third-party model. They are never used to advertise, recommend, or personalize anything outside of your own account.
We do not sell or share your photos with third parties. Photos are stored in private cloud storage (Supabase Storage) with access restricted to your account. They are transmitted to our AI training provider (fal.ai) only for the duration of training, and deleted from their systems after training completes.
Generated images belong to you. You own the images your trained model produces. We retain a copy so you can access them in your gallery, but we do not use them for anything other than delivering the service to you.
Deleting training photos may affect future retraining. You can delete training photos at any time from your pet's settings. The already-trained model will continue to work, but you would need to re-upload photos to retrain it.
Deleting a pet deletes its model and all training photos from our storage within 30 days. Generated images are deleted with the pet unless you've downloaded them first.
Deleting your account triggers deletion of all pets, models, training photos, generated images, and account metadata within 30 days.

How We Use Your Information

Provide, maintain, and improve the service
Train and serve your pet's AI model
Process credit-pack purchases and send receipts
Send transactional notifications ("your model is ready", "your images are ready") via email or web push, if you opt in
Respond to support requests
Monitor aggregate usage to improve reliability, performance, and product decisions
Detect, investigate, and prevent fraud or abuse

Information Sharing

We may share your information in the following circumstances:

Service providers: with the third-party vendors listed below, only as needed to deliver the service.
Legal requirements: if required by law or in response to valid requests by public authorities.
Business transfers: in connection with a merger, acquisition, or sale of assets. We will notify you of any such change.
With your consent: when you have given us explicit permission.

We do not sell your personal information.

Third-Party Services

Our service relies on these sub-processors:

Supabase — authentication, database, and private storage of your photos. Privacy Policy
fal.ai— AI model training, image/video generation, and automated content moderation (NSFW classification) of uploaded photos. Your pet's photos are sent to fal.ai only for these purposes; fal.ai does not retain them after the request completes. Privacy Policy
Stripe — payment processing. Privacy Policy
Resend — transactional email. Privacy Policy
PostHog — product analytics and session replay. You can opt out of analytics via the cookie banner. Privacy Policy
Vercel — hosting. Privacy Policy

Data Retention

We retain your personal information for as long as your account is active, or as needed to provide the service. When you delete a pet or your account, we purge the associated data (photos, models, generations) from our storage immediately, with backup copies expiring within 30 days. Some records required for legal, tax, or fraud-prevention purposes (e.g., Stripe payment records) may be retained longer to comply with those obligations.

Trained model adapters on fal.ai:when we train a custom AI model (LoRA adapter) on your pet's photos, the resulting adapter file is stored on fal.ai's infrastructure so we can generate from it. fal.ai does not currently offer a public API to delete trained adapters. When you delete your account, we stop using and reference the adapter, and we will request manual deletion from fal.ai on request to support@pawmodel.com. The adapter itself is a numerical pattern derived from your photos and cannot be used to reconstruct the original images.

Your Rights

Depending on your location, you may have the right to:

Access the personal information we hold about you
Request correction of inaccurate information
Request deletion of your personal information
Receive a copy of your data (photos, model info, generations) in a portable format on request
Object to or restrict processing of your information
Withdraw consent where processing is based on consent

Account deletion is available directly from your account settings and takes effect immediately. To request a copy of your data or exercise any other right above, email support@pawmodel.com and we will respond within 30 days.

Content Moderation and Safety

To keep the Service safe and to comply with our legal obligations, every training photo is automatically scanned for adult, sexual, or otherwise prohibited content before any model is trained on it. Scanning happens at our AI provider (fal.ai) on a short-lived signed URL and the result is a simple yes/no signal. Photos flagged as violating our Terms are deleted immediately.

We are required by United States federal law (18 U.S.C. §2258A) to report any apparent child sexual abuse material (CSAM) to the National Center for Missing & Exploited Children (NCMEC), and we will cooperate with law enforcement as required. If you believe your legitimate content was incorrectly flagged, email support@pawmodel.com.

Data Security

We use TLS for all data in transit, encryption at rest for your photos, row-level security for account-scoped data in our database, and time-limited signed URLs for photo delivery. No system is perfectly secure, but we take it seriously. If you believe you've found a security issue, please email support@pawmodel.com.

Cookies and Tracking

We use a small number of cookies for sign-in sessions and optional product analytics. You can decline analytics cookies via the banner on first visit, and revisit your choice from the footer link at any time. Declining analytics does not affect the core functionality of the service.

Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. In the European Economic Area, UK, and other regions where the age of digital consent is higher (typically 16), local law applies. If you believe a child has provided us with information, please contact us and we will delete it.

California Privacy Rights (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act (as amended by the California Privacy Rights Act) gives you additional rights regarding your personal information.

Categories of Personal Information We Collect

In the past 12 months we have collected the categories of personal information described in "Information We Collect" above, which map to the following CCPA categories:

Identifiers — name, email address, IP address, account ID
Customer records — billing details (handled by Stripe; we do not store full card numbers)
Internet/network activity — pages visited, feature usage, device and browser data
Visual information — pet photos you upload and the AI-generated images they produce
Inferences — usage patterns derived from your activity

We collect this information from you directly, automatically as you use the Service, and from our service providers listed in "Third-Party Services" above.

Sale or Sharing of Personal Information

We do not sell or "share" (as those terms are defined under the CCPA/CPRA) your personal information for monetary or other valuable consideration. We do not engage in cross-context behavioral advertising. We have not sold or shared personal information about consumers, including minors under 16, in the preceding 12 months.

Sensitive Personal Information

We do not use or disclose sensitive personal information for any purpose beyond what is necessary to provide the Service you requested.

Your California Rights

You have the right to:

Know what personal information we collect, use, disclose, and (if applicable) sell about you
Delete personal information we hold about you, subject to legal exceptions
Correct inaccurate personal information
Opt out of the sale or sharing of your personal information (we do not sell or share, but the right exists)
Limit use of sensitive personal information
Non-discrimination — we will not deny service, charge different prices, or provide a different level of service because you exercised your rights

How to Exercise Your Rights

Account deletion is available directly from your account settings and takes effect immediately. For all other CCPA/CPRA requests (including a copy of your data), email support@pawmodel.com with the subject line "California Privacy Request" and the email associated with your account. We will respond within 45 days as required by law (with one 45-day extension where permitted).

Authorized Agent

You may designate an authorized agent to make a request on your behalf. We will require written permission and will verify your identity directly before honoring the request.

International Data Transfers

Your information may be processed in countries other than your own, including the United States. Where required, we rely on standard contractual clauses or equivalent safeguards with our sub-processors.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we'll also email you.

Contact Us

Questions about this Privacy Policy? Email us at support@pawmodel.com.