PawMe Privacy Policy
Effective date: November 11, 2026 (previous version effective November 3, 2026)
PawMe’s operator (the “Company”, listed at the bottom of this page) processes PawMe account information, pet photos, generated results and purchase information as described below.
1. Information we collect and why
| Feature | Information | Purpose |
|---|---|---|
| Account (created automatically when the app runs) | The account identifier created on this device when you first run the app. For users who linked a Google account in an earlier version, that account’s email address, name and profile image | Authenticating the account, managing your results and purchases. The current app does not offer any separate sign-in (including Google sign-in). Google account information linked earlier is kept while that account exists and is handled when the account is deleted |
| Restoring your account after reinstalling on the same device | Android device identifier (ANDROID_ID), Play Integrity verdict (whether the app was installed from Google Play and the device passes integrity checks), connection IP address | Reconnecting your previous account when you delete the app and reinstall it on the same device. The device identifier is sent to the server over an encrypted connection when an account is first created or changes on this device; the server does not store the raw value and keeps only a value converted with a server secret key, linked to the account identifier. The IP address is also converted with the secret key and used only to limit the number of requests |
| Photo selection help (app 0.1.57 or later) | Up to 5 candidate photos you choose and their on-device analysis results | Help you choose using pet recognition, brightness and sharpness on your device. On-device recommendation results are not sent to the Company or Google. Sending the photos you choose for a suitability check follows ‘Photo upload & AI generation’ below |
| Google ML Kit SDK diagnostics | Device and app information, per-installation identifiers, feature events, errors, performance, image format and resolution, and input/output sizes | Google’s SDK diagnostics, usage analysis, maintenance, improvement and abuse prevention. Photo content and per-photo recommendations are not included in these metrics |
| Photo upload & AI generation | Photos you choose (including the check before you create an image), photo check results, generation instructions, generated images and videos, job status and identifiers | Checking photo suitability, creating, storing and restoring personalized content, providing wallpapers, reviewing photo check quality and improving the service (including review by our staff) |
| In-app purchases and entitlements, preview before purchase | Purchase token, order number, product, purchase and refund status, preview-before-purchase and pack usage counts and transaction history | Verifying payments, granting, reserving, using and returning entitlements, limiting the preview before purchase to one, restoring purchases, preventing abuse |
| Sharing results (optional) | Share-link identifier, the shared result, the sender’s display name (the first part of the Google account name linked in an earlier version; otherwise the default name “PawMe 친구”), the title and the pet name you entered, the recipient’s account identifier and time received | Providing share links, adding results to the recipient’s library, cancelling shares and preventing misuse |
| Completion notifications | Push notification token (Firebase Cloud Messaging), a random identifier created for each app installation, whether notifications are on or off | Sending a notification when your wallpaper is ready. You can turn this off under My PawMe > Settings > Completion notifications in the app or in your device’s notification settings |
| App install source | The install source that Google Play passes to the app (ad, Play search or share link, ad click identifier, click and install times) and the app version. Stored once with the account identifier on first launch | Measuring usage and purchases by ad and by install source, and deciding ad spending. Deleted together with the account |
| Inquiries, reports, deletion requests | Account identifier, contact details, what you write, the content concerned, handling records | Customer support, handling harmful content, exercising your rights and resolving disputes |
| Optional usage analytics (app versions that support it) | Random install and session identifiers, screen names, time on screen and activity times, app version, scene codes, upload and purchase attempts and results (sign-in attempts in earlier versions), image/video saving, wallpaper applying and sharing actions, predefined error categories. A pseudonymous identifier linked to the app account | Analysing drop-off by screen, conversion from the preview before purchase to purchase, return visits, feature usage and errors. Collected only with separate opt-in consent; you can use the service without consenting. Names, email addresses, photos, file paths, message text and advertising IDs are never included in analytics events |
| App usage statistics (Google Analytics for Firebase, app 0.1.56 or later) | App instance identifier, advertising ID, device model, operating system, language and app version, country/region estimated from the IP address, install source (including ad campaign), screen views and time on screen, which buttons were tapped, scene codes viewed, photo selection and upload progress, photo check result category, generation start, purchase and wallpaper-apply results | Finding where people drop off and improving the app, measuring ad performance (linked with Google Ads). You can turn this off at any time under My PawMe > Settings > “App usage statistics” in the app and still use every feature. Photos, names, email addresses, typed text and file paths are not sent |
| Service operation | Connection information such as IP address, request times, job, error and security logs, device and app information processed by the authentication SDK | Authentication and security, providing the service, diagnosing and recovering from failures |
When you share a result, anyone with the link can see it (the video for a live wallpaper, a blurred preview for an image) together with your display name and title (including the pet name you entered), and the result is added to the library of the person who opens the link in the app. Share links are valid for 7 days and can be cancelled by the sender at any time. Share records are kept while the account exists and are handled together when the account is deleted.
PawMe is used without a separate sign-in; an account for this device is created automatically when you first run the app. The default wallpapers can be used without sending any photos. Photo selection help analyzes only the candidates you choose on your device; it does not search your whole library. From app 0.1.81, when you choose photos, the chosen photos (up to 5) are sent to the server so we can check in advance that your pet is clearly visible. This happens before you tap create; if you do not create an image, the sent photos are still kept under the retention rule below (30 days from upload). When you request image creation, the confirmed photos are used for generation. Sent photos and their check results may be viewed by our staff to review photo check quality and improve the service, and are not used for advertising or a public gallery. In earlier versions, the selected photos are sent when you request image creation. We do not collect your whole photo library, contacts or microphone. Card numbers are handled by Google Play and are not stored on our servers. People or documents that appear in your photo may also be passed to AI processing, so please do not upload photos that contain unnecessary personal information.
2. Retention and deletion
- Account and entitlement information is kept while the account exists to provide the service, and is handled when the account is deleted. Original photos are kept for 30 days from upload, and previews before purchase, generated images and videos for 30 days from completion. After 30 days, viewing, downloading and selecting them as a video candidate in the app is blocked and the files are deleted from production storage in turn. Automatic clean-up targets within 24 hours after expiry; files needed for a job started just before expiry are deleted after that job ends. Sharing or downloading again does not extend this period. Previews before purchase and received images can only be viewed in the app; images used with a purchased entitlement (pack or Credit) and available videos can be downloaded as files. PNG and MP4 files you saved separately remain where you saved them regardless of server retention or deleting the app, and you can delete them yourself. You can ask Support to delete specific data even before deleting your account.
- As required by law, records of contracts and withdrawals of orders and records of payment and supply are kept for 5 years, records of consumer complaints and disputes for 3 years, and records of labelling and advertising for 6 months, separately and only for the period each record requires. We do not keep all photos on the grounds that they are transaction records.
- After production files are deleted, Cloud Storage recovery copies may remain for 7 days under the current settings. General service logs are kept for 30 days and required audit logs for 400 days. Log retention is different from the retention of original photos.
- Electronic files due for deletion are deleted from production storage. If ongoing jobs, refunds or legally required retention need to be checked, we will tell you the status and the reason for any delay. Separate periods and exceptions described below may apply to security and backup copies held by external processors.
The Company’s optional usage analytics starts only after separate consent from users aged 14 or over and is separate from Google Analytics for Firebase statistics and ML Kit SDK diagnostics. Raw analytics records and the link to install identifiers are kept for up to 30 days from the relevant record such as the last activity; expired data is excluded from queries and deleted regularly. If you withdraw consent under My PawMe > Settings > “Usage analytics (optional)” in the app, collection stops, records waiting to be sent on the device are cleared, and deletion of that device’s analytics records is requested once a network connection is available. Linked analytics records are also deleted when the account is deleted. This consent and withdrawal setting applies to the Company’s optional analytics; it does not control Firebase statistics or ML Kit SDK diagnostics. Transaction and generation records follow the retention rules above.
Under the Google Analytics retention settings, app usage event records are deleted after 2 months and user-level data such as the app instance identifier 14 months after the last activity; aggregate reports that do not identify individuals may remain. Turning off “App usage statistics” under My PawMe > Settings stops Google Analytics for Firebase event collection and sending from that device from then on. This setting does not control the Company’s separate optional analytics or ML Kit SDK diagnostics. You can reset or delete the advertising ID in your device settings.
To restore your account when you reinstall on the same device, to prevent the preview before purchase from being provided more than once and to prevent automated abuse, we process the Android app/user/device-scoped identifier (ANDROID_ID), the connection IP address and Play Integrity verdicts. The device identifier is sent to the server over an encrypted connection when an account is first created or changes on this device and when you request the preview before purchase. Raw device identifiers and IP addresses are not stored in our operational database; only values converted with a server secret key are used, and Play Integrity verdicts are used only to check the request and are not stored. Request-verification and per-IP counter records are not used after they expire (2 minutes to 24 hours), and the verification and counter records for preview requests are deleted automatically in turn. The link between the device and the account (the converted value and the account identifier) is kept while it is needed to restore the account on the same device, and an account for which deletion has been requested is not used for restoring. Records of preview-before-purchase use are kept to the extent needed to prevent duplicate provision while that preview is offered. You can ask Support to delete or restrict these records; if you restrict them, automatic restoring after reinstalling on the same device will not be available. These records are not used for advertising or optional analytics.
Separately from analyzing photos on your device, the ML Kit SDK may send diagnostic metrics to Google during initialization and feature use. PawMe does not offer a setting to disable these SDK metrics. Google’s retention and deletion policies apply; the Company’s 30-day analytics retention and Firebase retention settings above do not apply to these metrics.
3. External processors and processing outside Korea
We pass the information needed for account authentication, storage, AI generation, analytics and SDK diagnostics to the companies below. We do not put account information or purchase history into AI generation instructions. We do not post your photos or results in our advertising or in public galleries without your separate permission.
| Company & contact | Information & purpose | Location, timing and method of transfer | Retention & deletion |
|---|---|---|---|
| Google / Firebase / Google Cloud Privacy contact | Account and authentication information, photos and generated results, purchase, support and job records. Authentication and server and storage operation, app and device checks through Play Integrity, completion notifications through Firebase Cloud Messaging | Production storage and database for photos and results are in Seoul, Republic of Korea. Firebase Authentication is processed in the United States. Play Integrity and Firebase Cloud Messaging are processed on Google’s infrastructure; processing only in Korea is not guaranteed. Sent over encrypted connections when you run the app, upload or make service requests | Production data follows the retention rules above. Other Firebase Authentication user data is removed from live and backup systems within up to 180 days after deletion begins; authentication IP logs and similar have separate security retention periods |
| Google LLC — Google Analytics for Firebase, Google Ads Privacy Policy | App usage statistics (items listed in section 1). Usage flow analysis and ad performance measurement | Sent over encrypted connections while the app is used. Processed in Google data centers in the United States and other countries | Google Analytics retention settings apply (events 2 months; user-level data 14 months after last activity). Collection can be turned off under My PawMe > Settings in the app |
| Google LLC — ML Kit ML Kit privacy information | SDK diagnostics listed in section 1, for performance and usage analysis, maintenance, improvement and abuse prevention. Recommendation photos and results are not sent to Google | Sent over HTTPS to Google servers during SDK initialization and feature use. May be processed on Google’s global infrastructure; processing only in Korea is not guaranteed | Retention and deletion follow Google’s Privacy Policy, separately from the Firebase statistics toggle and withdrawal of the Company’s optional analytics consent |
| OpenAI Privacy requests | Photos, check and generation instructions passed through fal.ai. Photo suitability checks and personalized image generation. Direct API requests for some earlier processing | Sent through fal.ai for photo checks (from app 0.1.81, when you choose photos) and when generation is requested, including some earlier direct API processing. Processing and storage in a specific country only is not guaranteed | API abuse-monitoring records are kept for up to 30 days by default, with legal and security exceptions. Requests made through fal.ai are also subject to the policies of fal.ai and its sub-providers. See the official data guide for API training defaults and retention exceptions |
| fal.ai — Features & Labels Inc. privacy@fal.ai | Photos, reference images, check and generation instructions and results. Photo suitability checks and personalized image generation (OpenAI image model), live wallpaper video generation (Seedance; Kling for some earlier scenes), SeedVR upscaling for some earlier scenes | Sent over encrypted connections for photo checks (from app 0.1.81, when you choose photos) and when images and videos are generated. Under its official policy, processed and stored in the United States and other countries. Third-party API models receive content through their model providers | Request inputs and outputs are retained by default, and a way to delete payloads and output files of completed requests is provided. Input files, sub-provider copies and legal and security exceptions are handled separately. On a data deletion request, handled through the applicable deletion process |
fal.ai being located in the United States does not mean every model is processed only in the United States. Content sent to models through fal.ai may be passed to the model provider (OpenAI, ByteDance as the Seedance provider, Kling and others), and the exact processing countries for every path cannot be confirmed from public documents alone. We do not describe generation through OpenAI or fal.ai as a service where data stays only in a specific country. The scope of processing by these providers follows the fal API terms, privacy notice and list of sub-processors. This page describes the processing confirmed at present and will be updated when the providers’ scope is confirmed or changes.
If you do not want AI processing outside Korea, you can use the default wallpapers without choosing photos (from app 0.1.81, chosen photos are sent right away) or requesting personalized generation. Account authentication (Firebase Authentication, United States) happens automatically when you run the app, so if you do not want this processing outside Korea you can stop using the app and request deletion of your data; in that case you cannot use the service. You can request suspension of processing or deletion of information already provided using the contact below; the related features may then be limited.
4. Your rights and deletion requests
You can request access, correction, deletion, suspension of processing and withdrawal of consent under My PawMe > Settings in the app (Request data deletion, Usage analytics, App usage statistics, Completion notifications), on the deletion request page or at sunileng.dev@gmail.com. A data deletion request made in the app is filed for the account of this device that the app is currently using, and you can check its status in the same menu. Accounts created in the current version have no email address linked, so for a request by email we check the minimum information needed to identify the account (for example, the Google Play order number if you made a purchase, or an email sent from the Google account linked in an earlier version); if the account cannot be identified, we may ask you to make the request in the app. Requests by an agent may be checked for valid authorisation. We never ask for passwords, card numbers or ID documents by email. You do not need to delete your Google account to have your data deleted.
Our operating standard is to check inquiries once each business day and send a first reply within 3 business days. If completion takes longer, we will tell you the progress. This standard does not limit legal deadlines or your rights.
5. Children under 14
PawMe is intended for users aged 14 or over. The Company does not operate a parental consent process, so we do not knowingly collect personal information from children under 14, and children under 14 may not use photo upload, personalized generation or purchases. The app shows a notice that it is for users aged 14 or over on the photo selection screen. If we learn that personal information of a child under 14 has been collected, we delete it without delay, and a parent or legal guardian can request deletion using the contact above.
6. Security
We use encrypted network connections, private storage, per-account access permissions, separation of server secret keys and controlled operator access. From app version 0.1.56, PawMe uses Google Analytics for Firebase for app usage statistics and processes the advertising ID, linked with Google Ads, to measure ad performance. Firebase statistics collection can be turned off under My PawMe > Settings > “App usage statistics” in the app. The Company’s separately consented optional usage analytics is sent to the Company’s Google Cloud servers and storage (Seoul, Republic of Korea) and is not provided to separate advertising analytics companies. Only staff who pass operator authentication can access the aggregate dashboard.
7. Privacy contact and changes
Privacy contact: PawMe Operations
Email: sunileng.dev@gmail.com
If this policy changes, we will announce the changes and their effective date on this page and, where necessary, in the app. If additional consent is required, we will follow that process before the change applies.
This policy is provided in English and Korean. If the two versions differ, the Korean version prevails.