Privacy

Version 1.3 · Last updated 16 September 2026

Pawmory (“we”) explains how we collect, use, store, and share personal information when you use the Pawmory Service, and the rights you may have. Using the Service means you have read this policy. Material changes will be sent to your account email.

1. Data controller

  • Name: Pawmory (individual / sole trader, brand Pawmory)
  • Privacy and support email: support@pawmory.org
  • Data Protection Officer: not appointed

2. Information we collect

2.1 Information you give us

  • Account: name, email, password (stored hashed by our auth provider), and basic profile data if you sign in with Google.
  • Payments: amount and status. We do not store full card numbers. Cards are processed by Waffo Pancake.
  • Content: pet profiles, photos, scene notes you type, and generated videos.
  • Messages you send to support@pawmory.org.

2.2 Information collected automatically

  • Device and network: IP address, browser type, time zone (for security and bot checks).
  • Usage: sign-in events, generation status, necessary logs and errors.

We do not collect precise location or full payment card numbers.

3. How we use information

  • Provide accounts, generate videos, store memories: contract.
  • Billing and payment: contract.
  • Support and security (including Cloudflare Turnstile and abuse prevention): contract / legitimate interests.
  • Service notices (billing, security, policy updates): legitimate interests.
  • Legal compliance: legal obligation.

We do not currently send marketing email. If we ever do, we will ask for consent and provide an opt-out.

4. Cookies and similar technologies

  • Strictly necessary: keeping you signed in (these cannot be turned off if you want to use an account).
  • Security: Cloudflare Turnstile.

We do not currently use Google Analytics or marketing pixels. Infrastructure providers such as Vercel and Cloudflare may process access logs.

5. Sharing

We do not sell your personal information, including “sale” as defined under laws such as CCPA. We share information with processors only as needed to run the Service, including:

  • Supabase: accounts and database (including the United States).
  • Vercel: website hosting.
  • Cloudflare: DNS, Turnstile, and object storage for photos and videos.
  • MuAPI / MiniMax: generating video from your photos.
  • Google: if you choose Google sign-in.
  • Waffo Pancake: payments. Card data is processed by Waffo Pancake under PCI-DSS and is not stored on our servers.

We may also disclose information if required by law or with your consent.

6. Security

  • In transit: HTTPS / TLS.
  • Passwords: hashed by the auth provider; we cannot see plaintext.
  • Access: least privilege; API keys stay on the server.

If a security incident affects your rights, we will notify you and any required regulator within 72 hours of becoming aware, where the law requires it.

7. Retention

  • Account and content: while the account is open; deleted or anonymized promptly after you delete the account.
  • Transaction records: after payments go live, kept as needed for accounting and fraud prevention, typically up to 7 years.
  • Support email: up to 2 years.
  • Security logs: up to 12 months.

8. Your rights

You may ask to access, correct, delete, restrict, port, or object to certain processing, or withdraw consent. Email support@pawmory.org. We will respond within 30 calendar days. You may also complain to a data protection authority where you live.

You can delete your account in Settings at any time.

9. Marketing

We do not currently send marketing email. Necessary notices (sign-in security, confirmation, billing) are not marketing and cannot be opted out of if you use the Service.

10. International transfers

Servers and vendors may be in the United States and other countries (including Vercel, Supabase, and Cloudflare R2). We transfer only what is needed to provide the Service, relying on our vendors’ contracts and security practices.

11. Children

The Service is for users 18 or older. We do not knowingly collect information from children. If you believe a child provided information, contact support@pawmory.org and we will delete it.

12. Third-party services

The Service may link to third parties (for example Google sign-in). This policy covers information we collect directly.

13. Changes

For material changes we will email you at least 15 days in advance and update the date on this page. Continued use after the effective date is acceptance.

14. Contact

If you have a question, contact support at support@pawmory.org. Privacy requests go to the same address.

Pawmory · https://www.pawmory.org

This policy is for the product and payment review. It is not legal advice. Last updated: 16 September 2026.