This Privacy Policy explains what personal data Uchipaw collects, why we collect it, who processes it on our behalf, and the rights you have over it. It applies to the Uchipaw app and website.
Who we are
The controller of your personal data is TZAIS E TAIS SRL, Constanța, Romania (CUI 35131599). You can reach us about privacy at hello@uchipaw.com.
What Uchipaw does
You upload a photo of your real pet. Our AI generates a cartoon portrait and a personality profile from it, and you then care for and chat with the resulting virtual companion. Uchipaw has a free tier with daily message limits, and an optional paid tier (Uchipaw+) and one-time credit packs.
Data we collect
- Account & sign-in data: your email address and the authentication identifiers issued by our auth provider (Google sign-in or a one-time email code).
- Pet photos you upload: stored privately in AWS S3 in the EU (Stockholm), accessible only through short-lived signed links.
- Generated pet portraits: stored in a public bucket — anyone who has the link can view a portrait, and pet share pages are public by design.
- Pet details you provide: name, birthday, gender, and the memorial flag.
- Chat messages you exchange with your pet, which are stored.
- AI-derived content:a rolling “memories” summary and follow-up questions generated from your chats, and quiz questions derived from your photo and chats.
- Usage & care data: daily usage counters, care-streak data, scheduled reminder entries, and the wardrobe/room items you own or have equipped on a pet.
- Web Push subscriptions: only if you opt in to notifications.
- Household & sharing data:if you invite others to a pet, we store who’s a member of that household and any active invite links; if you use the referral program, we store your referral code and, when someone signs up through it, a link between the two accounts.
- Billing data: if you subscribe to Uchipaw+ or buy credits, our payment processor (Stripe) handles your payment details — we never see or store your card number. We keep a record of your subscription/tier status and purchase history.
- Moderation data: a hash of uploaded photos and an automated content-safety verdict.
- Product analytics: pseudonymous usage events (e.g. which features you use) via PostHog, and technical error reports via Sentry, so we can fix bugs and improve the app.
How we use your data and our legal bases
- To run the service — creating your companion, storing pets, chatting, care mechanics, reminders, households, and referrals (legal basis: performance of our contract with you).
- Paid features — the Uchipaw+ subscription and credit packs, processed by Stripe (legal basis: performance of our contract with you).
- Optional features you switch on — uploading photos and receiving push notifications (legal basis: your consent, which you can withdraw at any time).
- Keeping the service safe and working well — automated moderation of uploads, abuse prevention, security, product analytics, and error monitoring (legal basis: our legitimate interest in a safe, reliable, and improving service).
Who processes your data
We rely on a small number of processors, all under data-processing terms:
- Supabase — authentication and database, hosted in the EU.
- AWS (Amazon Web Services) — hosting, file storage, and AI inference through Amazon Bedrock. Chat and photo analysis run in EU regions (Frankfurt and EU cross-region inference).
- Stripe — payment processing for Uchipaw+ subscriptions and credit packs.
- PostHog — product analytics, hosted in the EU.
- Sentry — error monitoring, to catch and fix crashes and bugs.
International transfer for portrait generation
Image generation runs in the United States (AWS us-east-1). This means the pet photo you upload is transmitted to AWS in the US for the one-time portrait generation and for any monthly regenerations. This international transfer is safeguarded by the EU–US Data Privacy Framework and AWS’s Standard Contractual Clauses.
AI and your content
The AI models we use (Anthropic Claude and Stability AI, both via Amazon Bedrock) do nottrain on your content, per AWS Bedrock’s terms. We do not sell your data, we do not run third-party advertising, and we do not use cross-site tracking.
Cookies and local storage
We use strictly-necessary authentication cookies to keep you signed in (your session with our auth provider), plus your browser’s localStorage for preferences such as mute state and last-visit time. Our product analytics (PostHog) also runs on localStorage, not cookies. We do not run third-party advertising and we do not use cross-site tracking or marketing cookies.
Automated decisions
When you upload a photo, an automated check assesses whether it contains a pet and whether it is safe. Uploads that fail this check may be rejected automatically. We do not make automated decisions that produce legal or similarly significant effects about you.
How long we keep your data
We keep your data for as long as your account exists. When you delete your account, your data is deleted, and copies in backups are purged on our providers’ backup schedule.
Your rights
Under the GDPR you have the rights of access, rectification, erasure, portability, objection, and restriction of processing.
- Erasure is self-service:the in-app “delete account” option permanently removes all of your data — photos, generated art, chats, and your authentication identity.
- For access, rectification, portability, objection, or restriction, contact us at hello@uchipaw.com.
- Where we rely on consent (photo uploads, push notifications) you can withdraw it at any time without affecting prior processing.
You also have the right to lodge a complaint with a supervisory authority — in Romania this is the ANSPDCP (www.dataprotection.ro) — or with the authority in your country of residence.
Children
Uchipaw is intended for users aged 16 and over (or younger with parental consent where local law allows). We do not knowingly collect personal data from children below that age; this also satisfies the US COPPA threshold of 13. If you believe a child has provided us data, contact us and we will delete it.
United States users
We do not sell or share your personal information as those terms are used under the California Consumer Privacy Act (CCPA). California residents may exercise their rights by emailing us at hello@uchipaw.com.
Changes to this policy
We may update this policy as the service evolves. When we make material changes, we will update the date below and, where appropriate, notify you in the app.
Contact
For any privacy question or request, email hello@uchipaw.com.
Last updated: 2026-07-09