Privacy Policy

Who we are

PawAndMe (pawandmeai.com) is operated from Hong Kong. Questions about this policy go to hello@pawandmeai.com.

The photos you upload

• Why we process them. To create the image you asked for. First an AI model checks that the photos are usable (one adult with a visible face, a real animal, nothing unsafe) and describes the person and the pet in words; then an image model creates the new photo from the two uploads and that description.
• Who sees them. The providers that run those models, only for that purpose: Google (Gemini image models), Anthropic (Claude, for the check and the description), and, when the primary service is unavailable, DeepSeek (check) and an OpenAI-compatible image service (image). They process the photos to return a result and do not get your name or email. We do not use your photos to train anything.
• How long we keep them. Uploads are stored encrypted on Cloudflare R2 and deleted the moment your image is finished, or after 24 hours at most if something goes wrong. They are never shown to anyone and never used for anything else.
• The description. The text description of your pet (breed, coat, markings) is kept with the finished photo so you can search your album. It never describes the person beyond what is needed to make the image, and it is deleted with the photo.

The photos we make

• Finished photos are stored encrypted on Cloudflare R2 and shown only to you, signed in.
• On an account that has bought anything they stay until you delete them. On a free account they are deleted after 7 days.
• Trial photos exist in two versions, watermarked and clean; the clean one is unlocked by your first purchase.
• You can delete any photo from your account at any time. Deleting your account deletes all of them.

Account data

• Email address: to sign you in (one-time links) and send receipts. If you opted in, a few reminder emails a year before holidays; unsubscribe in Settings.
• Credits and purchases: a ledger of credits earned and spent, and for purchases the Stripe customer id, the amount, and the time you agreed to immediate access at checkout.
• Sessions: a coarse device label (“Chrome on macOS”) and timestamps, so you can see where you are signed in. No full user agent, no IP address stored with the session.
• Abuse prevention: short-lived counters by hashed IP address and email (sign-in attempts, uploads, photos per hour), kept for at most an hour.

Payments

Stripe processes payments, calculates tax and runs the billing portal. Your card details go to Stripe directly and never reach us. Stripe’s privacy policy applies to that data.

Cookies

Two first-party cookies: the session cookie that keeps you signed in and a flag that tells the page header you are signed in. No advertising cookies, no third-party trackers. Cloudflare Turnstile runs on the sign-in form to keep bots out and may set its own cookie for that purpose.

Where data lives

Hosting, storage, database and email are provided by Cloudflare and run on its global network. The AI providers listed above process photos in their own regions, typically the United States.

Your rights

You can see and download everything in your account from the account pages, change the reminder setting, delete individual photos, and delete the whole account. For anything else (a copy of your data, a correction, a question about a provider) email hello@pawandmeai.com; we answer within 48 hours. If you are in the EU or UK you also have the right to complain to your local data-protection authority.

Children

The site is for people aged 16 and over, and purchases for 18 and over. We do not knowingly process photos of children; the pre-check refuses them.

Changes

Changes are posted here with a new date. The terms of service explain how we tell subscribers about material changes.