This Privacy Policy explains how TAHE (“we,” “us,” or “our”) collects, uses, stores, and shares your personal information when you use our Service. By using the Service, you agree to the practices described in this Policy.
1. Information We Collect
1.1 Information You Provide Directly
Account information: The phone number you use to sign in with a verification code; or the email address and name passed to us by third-party authentication providers (Apple, Google).
Pet profile data: Your pet's name, species, breed, age, personality traits, habits, and memories you describe.
Photographs: Images of your pet that you upload for the purpose of building their persona.
Letters and written content: Letters you write to your pet and any written descriptions of memories.
Payment information: Handled entirely by the Apple App Store. We do not collect or store card details; we receive only Apple-signed transaction receipts to unlock your entitlements.
1.2 Information Collected Automatically
Usage data: Features used, session duration, and server request logs within the Service.
Device information: Device model, operating system version, IP address, and device identifiers.
Session credentials and similar technologies: Used for authentication, session management, and service functionality.
2. How We Use Your Information
We use your information for the following purposes:
Service delivery: To generate and maintain your pet's AI persona, status feeds, and letter responses.
AI processing: Your pet descriptions, letters, and photographs are transmitted to third-party AI providers (see Section 4) solely to generate Service content for you.
Account management: To authenticate your identity, manage subscriptions, and communicate with you about your account.
Service improvement: Aggregated, anonymized usage data may be used to improve Service performance and features. Individual letters and photos are never used for this purpose.
Legal compliance: To comply with applicable laws, regulations, or valid legal requests.
We do not use your personal data, photographs, or letters to train public AI models, sell to advertisers, or share with third parties for marketing purposes.
3. Lawful Basis for Processing (EU/EEA Users)
If you are located in the European Union or European Economic Area, we process your personal data under the following lawful bases:
Contract performance: Processing necessary to deliver the Service you have subscribed to.
Consent: For processing photographs and sensitive personal information (such as memorial content related to bereavement). You may withdraw consent at any time by deleting your account.
Legitimate interests: For fraud prevention, security, and improving Service reliability, where these interests are not overridden by your privacy rights.
Legal obligation: Where required by applicable law.
4. Third-Party Service Providers
To operate the Service, we share necessary data with trusted third-party processors under contractual data protection agreements. These providers are:
Anthropic, PBC (Claude): Receives text prompts (your letters and pet descriptions) to generate AI responses. Anthropic's API terms prohibit using API inputs to train their general models.
Supabase: Provides our database, storage, and authentication infrastructure, which we self-host and administer.
Apple App Store: Processes all subscription and in-app purchase payments as our Merchant of Record, subject to Apple's own privacy policy.
We do not share your data with any providers beyond those listed above for purposes related to your use of the Service. If we add new providers, this Policy will be updated accordingly.
5. Data Storage and Location
Your data is stored on servers we self-host in mainland China. To generate AI content for you, text such as your letters and pet descriptions is transferred to and processed by AI service providers located abroad (primarily in the United States). Please take this cross-border transfer into account if you are located outside those regions.
6. Data Retention
Active accounts: Data is retained for the duration of your account.
Cancelled subscriptions: Data is retained for 12 months after cancellation to allow for reactivation, then deleted.
Deleted accounts: Upon account deletion request, all personal data is permanently deleted within 30 days, except where retention is required by law.
Anonymized usage data: May be retained indefinitely for aggregate analytics purposes.
7. Your Privacy Rights
7.1 Rights for All Users
Access: Request a copy of the personal data we hold about you.
Correction: Request correction of inaccurate or incomplete data.
Deletion: Request permanent deletion of your account and all associated data (available self-service under “Delete account” in the app).
Data portability: Request an export of your generated content (letters, feed entries) in a portable format.
7.2 Additional Rights for EU/EEA Users (GDPR)
Right to restrict processing: Request that we limit how we process your data in certain circumstances.
Right to object: Object to processing based on legitimate interests.
Right to withdraw consent: Where processing is based on consent, you may withdraw at any time without affecting the lawfulness of prior processing.
You have the right to lodge a complaint with your local data protection supervisory authority.
7.3 Additional Rights for California Residents (CCPA/CPRA)
Right to know: Request details about the categories and specific pieces of personal information we collect and how they are used.
Right to delete: Request deletion of personal information we have collected.
Right to opt-out of sale or sharing: We do not sell or share your personal information for cross-context behavioral advertising.
Right to non-discrimination: We will not discriminate against you for exercising your privacy rights.
To exercise any of these rights, contact us at: support@tahe.pet
8. Session Credentials and Tracking Technologies
The app contains no third-party trackers, advertising SDKs, or cross-app analytics tools. We store only your login session credential and interface preferences (language, display settings) locally on your device so that you stay signed in; logging out or offloading the app removes them. Server logs record request timestamps and endpoints called, for security and troubleshooting, and are retained no longer than 30 days.
9. Children's Privacy
The Service is intended for users aged 18 and older. We do not knowingly collect personal information from anyone under the age of 18. If we become aware that a user under 18 has provided personal information, we will delete it promptly. If you believe a minor has provided data to us, please contact us at support@tahe.pet.
10. Data Security
We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, and access controls to protect your personal data. However, no method of data transmission or storage is completely secure. We cannot guarantee absolute security.
In the event of a data breach that affects your rights and freedoms, we will notify affected users and relevant authorities as required by applicable law, within 72 hours of becoming aware of the breach.
11. Changes to This Policy
We may update this Privacy Policy periodically. If we make material changes, we will notify you via email and/or a prominent notice within the Service at least 14 days before the changes take effect. The “Last updated” date at the top of this page will always reflect the most recent version.
12. Governing Law
This Privacy Policy and any disputes arising from it are governed by the laws of the State of Delaware, United States, without regard to conflict of law principles. Any legal action or proceeding relating to this Policy not subject to arbitration (as described in our Terms of Service) shall be brought exclusively in the state or federal courts located in Delaware.
13. Contact Us
For any questions, requests, or concerns regarding this Privacy Policy or our data practices, please contact: