Privacy Policy for HAPI Pet

Last Updated: January 15, 2026

This Privacy Policy describes how WHISKERS N PAWS LIMITED (“we,” “us,” or “our”) collects, uses, and discloses your information in connection with the HAPI Pet mobile application (the “App”). By using the App, you consent to the data practices described in this policy.

1. Information Collection and Processing

We collect information that you voluntarily provide and information that is collected automatically through your use of the App.

1.1 Personal Data Provided by You

Account Credentials: Includes your name, email address, and authentication tokens.
User-Generated Content: Includes pet photos, images, and other media files uploaded for AI processing.
Support Data: Correspondence sent to our support teams, including feedback and bug reports.

The App requires access to your device’s camera and photo library to allow you to upload images. We only access the specific files you choose to share with the App.

1.2 Automatically Collected Information

Device Identifiers: We collect hardware model, operating system version, and unique device identifiers.
Usage Metrics: Log data regarding your interactions with the App, including feature usage and session duration.
Diagnostics: Crash reports and system performance data via third-party providers (e.g., Firebase).
Coarse Location: Location data is derived solely from your IP address for regional analytics and is not used to track your precise physical movement.

2. Artificial Intelligence (AI) and Media Processing

The App utilizes advanced AI models to generate avatars and personalization features.

Processing Purpose: Uploaded media is used exclusively to execute the requested AI generation.
Data Integrity: We do not utilize your private photos to train or improve our general-purpose AI models without explicit, opt-in consent.
Non-Commercialization: Your uploaded photos are never sold to third parties or used for targeted advertising.

3. Legal Basis for Processing

We process your data under the following legal frameworks:

Contractual Necessity: To provide the core services of the App.
Legitimate Interests: To improve App security, functionality, and performance.
Consent: Where you have provided explicit permission for specific data uses.

We do not sell your personal data. We disclose limited information only to the following categories of Data Processors:

Infrastructure Providers: We use third-party services to host, store, and deliver our platform’s content. These include Cloudflare and DigitalOcean for cloud hosting and security, and Strapi and PocketBase for content and data delivery.
Diagnostics: System performance data via third-party providers (DigitalOcean).
Infrastructure Providers: We engage reputable third-party vendors to host, store, and deliver platform content, including Cloudflare and DigitalOcean for cloud infrastructure and security, as well as Strapi and PocketBase for content and data management.
Diagnostics: We may share system performance and diagnostic data with trusted providers (e.g., DigitalOcean) to monitor and enhance the reliability of our services.
AI Service Providers: Select third-party AI partners, such as Grok and Modal, may process uploaded media solely to enable features like image processing and automation. These providers are contractually obligated to handle your data in accordance with our privacy standards and applicable laws.

5. Data Retention and Deletion

We retain your personal data only for the duration that your account is active or as necessary to fulfill the services described in this policy.

5.1 Data Erasure and Account Deletion

In accordance with global privacy standards and platform requirements we offer primary methods for the permanent erasure of your data by In-App Deletion: You may initiate the deletion of your account and all associated data by navigating to Settings > Account > Delete Account.

5.2 Processing Period

Upon initiating a deletion request, all personal identifiers, account metadata, and uploaded media will be purged from our active production servers within 30 days. Please note that certain data may be retained for a limited period if required to comply with legal obligations, resolve disputes, or enforce our agreements.

6. Child Safety and CSAE Standards

HAPI Pet has a zero-tolerance policy regarding Child Sexual Abuse Material (CSAM) and Child Sexual Abuse and Exploitation (CSAE). In accordance with Google Play’s Child Safety Standards, we implement the following:

Explicit Prohibition We strictly prohibit users from creating, uploading, or distributing any content that facilitates the exploitation or abuse of children. This includes, but is not limited to, grooming, sexualization of minors, and any form of CSAM.
Reporting to Authorities We comply with global child safety laws. Any confirmed instances of CSAM will be reported to the National Center for Missing & Exploited Children (NCMEC).
In-App Reporting Users can report suspicious content or potential child safety violations directly within the app via the Report/Feedback button.
Child Safety Point of Contact For concerns specifically regarding child safety, please contact our designated safety representative at: admin@protocol-8.com

7. International Data Transfers

Your information may be transferred to and maintained on computers located outside of your state or country. We implement Standard Contractual Clauses (SCCs) and other recognized safeguards to ensure your data receives an adequate level of protection regardless of location.

8. Your Statutory Rights

Depending on your jurisdiction (e.g., GDPR, CCPA), you may have the following rights:

Right of Access: To request copies of your personal data.
Right to Rectification: To request correction of inaccurate information.
Right to Portability: To request the transfer of your data to another organization.
Right to Object: To opt-out of certain processing activities.

For all privacy inquiries, please contact:

9. Amendments

We reserve the right to modify this Privacy Policy at any time. We will notify you of material changes via an in-app notification or the email address associated with your account.