← Back to Support

PollyPet Privacy Policy

Effective date: October 25, 2026

PollyPet is an app that turns photos of your pet into new images. This policy explains what information PollyPet handles, why, who receives it, how long it’s kept, and the choices you have.

PollyPet is provided by Richard Lamar II (“we”, “us”), based in Quezon City, Philippines. You can contact us at support@pollypet.app.

Summary

• You don’t need an account, and PollyPet doesn’t ask for your name, email address or phone number.
• A photo leaves your device only when you tap Generate, and only after you’ve agreed in the app. It goes to our server and then to OpenAI, which creates the new image.
• We remove location and camera details from your photo before it’s sent.
• We delete your uploaded photo from our servers about 24 hours after your image is generated, and your generated images and generation history after 30 days.
• We keep a simple record of when images are shared from the app, to see how PollyPet is used. We don’t show ads, use third-party analytics, sell your information or track you across other apps or websites.
• You can delete your data from the app at any time with Delete My Data in Settings.

Information we handle

Photos you choose to transform

When you tap Generate, PollyPet uploads the photo you selected to our server, which sends it to OpenAI to create your image. We receive only photos you choose to transform. PollyPet uses the system photo picker, so it can’t see the rest of your photo library.

Before upload, the app removes location and camera details stored inside the photo file.

Images created for you

Your generated image is stored on our server so the app can download it. A copy is also kept on your device in your History.

Generation history

For each image you create, our server records which transformation you chose, when, whether it succeeded and, if it didn’t, the general reason (for example, that an automated safety check stopped the image). The app uses this to show your History, to tell you what happened, and to return a credit if a generation fails.

Share activity

When you share an image from PollyPet, the app tells our server that a share happened. We record which image was shared and its transformation, the kind of app or destination you chose in the share sheet (for example, Messages), the time, and whether the “Made with PollyPet” mark was on. We also record when you turn that mark on or off. These records are linked to your installation, not to your name, and don’t include your IP address or the image itself. We use them only to understand how sharing is used.

App identity

When PollyPet first opens, the app creates a random identifier for your installation and a secret that only your device knows. Our server stores the identifier and a one-way hash of the secret, and issues an access token so the app can use our service. These aren’t linked to your name, Apple ID, email address or phone number.

Your consent choice

When you allow photo uploads, the app records which version of the consent wording you agreed to, and sends that version with each photo so our server can confirm the photo was sent with your permission.

Credits and purchases

We record your credit balances and how each credit was added or used, including free credits and returned credits for failed generations. When you buy credits, Apple handles the payment. We receive a signed record of the transaction from Apple, including the transaction ID and product, so we can add your credits. We never receive your payment card or billing details.

Purchase and accounting records

Apple processes payments for purchases made through the App Store. We maintain limited purchase records to verify transactions, grant and reconcile credits, prevent duplicate purchase processing, handle refunds, and meet applicable accounting and tax obligations.

Records required for accounting or tax compliance are kept for the period Philippine tax law requires. We keep other purchase-related information only for as long as necessary for the purposes described above. Where appropriate, we may separate legally required financial records from your app identity and other app data.

Network information

Our server sees your device’s IP address when the app connects, as any internet service does. It uses it briefly, in memory, to limit repeated registration attempts. We don’t store IP addresses in our records or in our application logs.

Connections to our server pass through our hosting provider, Render, and through Cloudflare, which Render uses to protect against attacks. On our hosting plan, Render doesn’t generate request logs that contain your IP address. Render and Cloudflare still see your IP address when handling the connection and may keep it in their own infrastructure logs under their own policies.

Messages you send us

If you email support, we receive your email address and whatever your message contains.

How we use information

We use this information only to:

• create the images you ask for and deliver them to you;
• keep track of your credits and apply purchases correctly;
• understand how sharing from the app is used;
• prevent abuse, such as automated attempts to collect free credits;
• answer your support requests;
• keep the service working and fix problems.

We don’t use your photos or images for advertising, and we don’t use them to train AI models.

Who receives information

• OpenAI creates your image. It receives the photo you chose and the transformation instructions. We don’t intentionally send OpenAI your name, email address or PollyPet installation identifier with the request. The photo itself may show people or other details, which OpenAI receives as part of the image. OpenAI runs automated safety checks on the images it creates, and may stop an image from being created. OpenAI doesn’t use your photo to train its models. It may keep it for up to 30 days to check for misuse, or longer if required by law. Images flagged as possible child sexual abuse material may be kept for manual review. OpenAI’s policies: https://openai.com/policies
• Render hosts our servers and database in Singapore and stores data on our behalf. Render routes connections through Cloudflare for protection against attacks, so both see your device’s IP address.
• Apple handles purchases under its own privacy policy. Our support email is hosted on Apple’s iCloud Mail, so Apple also stores the emails you send us.

The part of our service that sends photos to OpenAI keeps no copy of them.

We may also disclose information if the law requires it. We don’t sell your information or share it for advertising.

Your consent and how to withdraw it

PollyPet asks your permission before it sends any photo. If you don’t allow it, no photo is sent, and you can still browse the app, but you can’t create images.

You can withdraw permission at any time in the app’s Settings, under Photo Uploads. After that, no further photos are sent. Photos already sent are deleted on the schedule below.

If we change how photos are handled in a way that affects what you agreed to, the app will ask for your permission again.

How long we keep information

On your device

Your History and generated images stay on your device until you delete them or delete the app. If an upload couldn’t be confirmed (for example, because the connection dropped), the app keeps the prepared photo, with location and camera details already removed, so it can try again; it’s deleted once the upload is resolved, or after 7 days. The app’s identity is kept in your device’s keychain, which iOS may keep even after you delete the app; that’s how a reinstall can keep your credits. Deleting the app doesn’t delete anything on our server.

Deleting your information

You can ask us to delete the information we hold about your installation in the app, under Settings > Delete My Data. Because PollyPet has no accounts, the request is made from the app itself, which proves it comes from your installation.

When you confirm, the app immediately stops being able to use your installation, and we delete its information, including your generation history and share activity, within 30 days. If a transformation was already in progress when you confirmed, it may still finish; its photo and image are deleted with the rest of your data. Unused credits are lost and can’t be restored, including credits from a purchase still being processed. Purchase records are kept as described under “Purchase and accounting records”, without any photo or image linked to them. Photos already sent to OpenAI follow OpenAI’s retention described above.

If you no longer have the app, we can’t confirm that a request comes from you, because there’s no account to check. Information about that installation is then deleted on the schedule above.

The support ID shown in Settings helps us find your records when you contact us. It identifies your installation but doesn’t prove a request comes from you, so we don’t delete data based on a support ID alone.

Children

PollyPet is not directed at children under 13, and we don’t knowingly collect information from them.

Security

Information is encrypted in transit. We store secrets and access tokens only as one-way hashes, and we limit access to our systems. No system is perfectly secure, so we can’t guarantee absolute security.

International transfers

We’re based in the Philippines. Our servers are in Singapore, and OpenAI may process photos in other countries.

Changes to this policy

When we change this policy, we update the effective date above. If a change affects how photos are handled, the app asks for your permission again.

Contact

Richard Lamar II
Quezon City, Philippines
support@pollypet.app