Chappy AI

Privacy Policy

Effective April 10, 2026 · Last updated April 10, 2026

Contents

Introduction
Information We Collect
How We Use Your Information
Third-Party Services
Data Retention
Your Rights
Children's Privacy
AI Processing Disclosure (EU AI Act)
International Data Transfers
Security
Changes to This Policy
Contact Us

1. Introduction

This Privacy Policy describes how the Chappy AI - Pet to Human iOS application ("Chappy AI", the "App", "we", "us", "our") collects, uses, and shares information when you use the App.

We've designed the App to collect as little personal information as possible. You do not need to create an account. We do not ask for your name, email, phone number, or any other personally identifying information. This document explains exactly what we do collect, why we collect it, and the choices you have.

Plain English summary: We don't know who you are. We process the pet photo you upload only to generate the human portrait you requested, then we forget about it. We never sell your data and we never train AI models on your photos.

2. Information We Collect

Anonymous Identifier

When you first open the App, our backend (Google Firebase Authentication) generates a random anonymous user ID for your installation. This ID is not linked to your real identity, your Apple ID, or any other personal information you've shared with Apple. The ID exists so the App can sync your subscription status, generation history, and credit balance across sessions on the same device.

Device Identifier (Vendor Identifier)

We store the iOS Identifier for Vendor (identifierForVendor) provided by Apple. This identifier is unique to your device and our app, and is automatically reset when you uninstall the App. We use it for fraud prevention (e.g. detecting credit abuse) and aggregated, anonymous usage analytics.

We do not use the IDFA (Identifier for Advertisers) and we do not run any advertising trackers in the App.

Photos You Upload for Generation

When you choose to create a portrait, you select a single photo of your pet from your iOS Photo Library. The selected photo is uploaded to our AI generation provider (FAL.ai) over an encrypted connection so the AI model can process it. The photo is used solely to generate the requested human portrait.

We do not store the photo on our own servers. Once the generation is complete, the photo is no longer accessible to us. Our AI provider's data retention policy is described in their own privacy policy (linked below).

Generated Portraits

The AI-generated portraits are stored as URLs in our database (Cloud Firestore) under your anonymous user ID. The image files themselves are hosted by our AI provider for a limited time. You can delete any generated portrait at any time from the History screen of the App.

Subscription and Purchase Data

When you purchase a subscription, the transaction is processed entirely by Apple. We use a service called RevenueCat to verify and sync your subscription status. We receive only:

The product identifier you purchased
The purchase status (active, expired, refunded)
The expiration date for active subscriptions

We do not see your Apple ID, your credit card number, your billing address, or any other payment information. All payment processing is handled by Apple.

Push Notifications (Optional)

If you grant the App permission to send push notifications, Apple provides us with a push token used to deliver notifications to your device. We use the token solely to notify you when a portrait you've requested is ready. You can revoke notification permission at any time in your iOS Settings.

What We Do Not Collect

For absolute clarity, we do not collect:

Your name, email address, phone number, or postal address
Your contacts, calendar, or messages
Your location or GPS data
Any photos other than the one you explicitly select for a generation
Your Apple ID or any account information
Your IDFA or any advertising tracker data
Browsing history or activity outside the App

3. How We Use Your Information

We use the limited information we collect for the following purposes only:

To provide the pet-to-human portrait generation service you requested
To sync your subscription, credits, and history across sessions on your device
To deliver push notifications when your portrait is ready (only if you opted in)
To prevent fraud, abuse, and violations of our Terms of Service
To comply with legal obligations
To improve App performance and reliability through aggregated, anonymous analytics

We do not sell your personal information. We do not share your personal information with advertisers. We do not use your photos to train AI models.

4. Third-Party Services

The App relies on a small number of trusted third-party services. Each is bound by its own privacy policy and the limited purpose for which we use it.

FAL.ai (AI Generation)

We use FAL.ai for AI-powered image generation. When you create a portrait, your selected pet photo is sent to FAL.ai for processing. The model used is "fal-ai/nano-banana/edit".

FAL.ai privacy policy: https://fal.ai/legal/privacy-policy

Google Firebase

We use Firebase Authentication for anonymous account creation, Cloud Firestore to store your subscription/credit balance and generation history metadata, and Firebase Cloud Storage for application assets. Firebase is operated by Google LLC.

Google privacy policy: https://policies.google.com/privacy

RevenueCat

We use RevenueCat to handle subscription validation and credit synchronization. RevenueCat receives the anonymous user ID and the App Store transaction details only.

RevenueCat privacy policy: https://www.revenuecat.com/privacy

Apple

The App is distributed through Apple's App Store. Apple processes all payments and handles push notification delivery (APNs).

Apple privacy policy: https://www.apple.com/legal/privacy/

5. Data Retention

We retain the limited information we collect for as long as your installation is active, plus a reasonable period thereafter to comply with our legal obligations.

Photos you upload: Not stored by us. Sent to our AI provider for the duration of generation only.
Generated portrait URLs: Stored in our database for up to 90 days, after which they are automatically deleted. You can delete them sooner from the History screen.
Anonymous user ID and credits: Retained while your installation is active. Deleted on request (see Your Rights below).
Subscription records: Retained for the duration of your subscription plus the period required by tax and accounting laws.

6. Your Rights

Depending on where you live, you may have the following rights regarding your personal information:

European Union and United Kingdom (GDPR / UK GDPR)

Right to access the personal data we hold about you
Right to rectification of inaccurate data
Right to erasure (the "right to be forgotten")
Right to restriction of processing
Right to data portability
Right to object to processing
Right not to be subject to solely automated decision-making
Right to lodge a complaint with a supervisory authority

California, USA (CCPA / CPRA)

Right to know what personal information is collected
Right to delete personal information
Right to correct inaccurate personal information
Right to opt out of the sale or sharing of personal information (we do not sell or share)
Right to limit use of sensitive personal information
Right to non-discrimination for exercising your privacy rights

Other Jurisdictions

Brazil (LGPD), Canada (PIPEDA), Australia (Privacy Act), and other jurisdictions provide similar rights. You may exercise them through the same channel below.

How to Exercise Your Rights

To exercise any of these rights, contact us at [email protected] with the subject line "Privacy Request". Because we use anonymous identifiers, please include your anonymous user ID (visible in the App's Settings → Support contact email body) so we can locate your data. We will respond within the timeframe required by applicable law (typically within 30 days for GDPR).

7. Children's Privacy

The App is not intended for children under 13 years of age (or under the minimum digital consent age in your jurisdiction, which may be 14 or 16 in some EU member states). We do not knowingly collect personal information from children.

If you are a parent or guardian and believe a child has provided personal information to us, please contact us at [email protected] and we will delete it promptly.

The App's content rating in the App Store is set in accordance with Apple's age rating guidelines.

8. AI Processing Disclosure (EU AI Act Compliance)

In compliance with Regulation (EU) 2024/1689 (the "EU AI Act") and global best practices for transparent AI, we disclose the following:

The App uses generative artificial intelligence to create human portraits from user-supplied pet photos. The output is synthetic content generated by an AI system and does not depict any real human being.
Generated portraits are clearly marked as AI-generated within the App's history screen.
The AI model used is "fal-ai/nano-banana/edit", provided by FAL.ai.
The AI generation process is initiated only by your explicit action (tapping "Generate"). The App does not generate content automatically.
Generated portraits may be embedded with technical markers indicating their AI-generated origin.
You are responsible for the lawful use of any content generated by the App. Use of generated content to deceive others, create deepfakes of real people without consent, or otherwise violate applicable law is strictly prohibited by our Terms of Service.

9. International Data Transfers

The App's backend services (Google Firebase, RevenueCat, FAL.ai) operate from data centers located in the United States and the European Union. By using the App, you consent to the transfer of your information to these regions for processing.

For transfers of personal data from the European Union or United Kingdom to countries outside the EEA, we and our processors rely on Standard Contractual Clauses approved by the European Commission and other appropriate safeguards.

10. Security

We protect the limited information we collect using industry-standard measures, including:

TLS 1.2+ encryption for all data in transit
Encryption at rest provided by Google Cloud and our other infrastructure providers
Anonymous identifiers — no real-name linkage
Limited backend access restricted to authorized personnel
Regular security review of third-party providers

No system is perfectly secure. If you become aware of a security incident affecting your data, please contact us immediately at [email protected].

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

Update the "Last updated" date at the top of this policy
Notify users via in-app message or push notification (if granted)
For significant changes, provide a plain-language summary of what changed

Continued use of the App after changes are posted constitutes acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your data, contact us at:

Email: [email protected]
Subject: Chappy AI — Privacy Inquiry

We will respond as soon as possible, typically within 7 business days.