About This Policy

This Data Policy supplements the CoPet Privacy Policy with detail on exactly what data we hold, why we hold it, where it lives, and how you can control it. It is written to meet the transparency requirements of the EU General Data Protection Regulation (GDPR) and the Australian Privacy Principles.

1. What We Collect and Why

Account data — name, email address, encrypted password. Purpose: signing you in and communicating with you about your account.

Conversations and memories — what you say to your AI pet and the memories it keeps. Purpose: generating personalised responses; this is the heart of the product.

Pet and game state — your pet, its care levels, coins, and items. Purpose: so your progress follows your account across devices.

Purchase records — what you bought and when, as reported by the Apple App Store, Google Play, or Stripe. Purpose: crediting your purchases and support. We never hold your card details.

Location (optional) — approximate location, only if you grant permission. Purpose: local context such as the weather. Never collected in the background.

Device and log data — IP address, device type, OS and app version. Purpose: security, abuse prevention, and troubleshooting.

Notification tokens — the device token for push notifications you have enabled.

2. Where Your Data Is Stored

Your data is stored on secure cloud infrastructure provided by Amazon Web Services. Data is encrypted in transit (HTTPS/TLS). Access to production data is restricted to authorised personnel.

3. Who Processes Your Data

We use a small set of processors, each receiving only what it needs: AI providers (such as OpenAI) generate your AI pet's responses from your conversations; RevenueCat validates purchases; Google Firebase delivers push notifications; Amazon Web Services hosts our servers and sends our emails. Stripe processes payments made on our website. We do not sell your personal data to anyone.

4. International Transfers

AI processing may occur on servers located in the United States. Where data leaves your region, it is protected by encrypted transfer and by our processors' own data protection commitments.

5. How Long We Keep It

We keep your data while your account is active. When you delete your account, your personal data is permanently removed from our servers, except where we are legally required to retain specific records. Residual copies in encrypted backups age out on a rolling basis.

6. Your Controls

You can reset your AI pet in the app to erase its memories; revoke location permission in your device settings; disable push notifications at any time; delete your account in the app or at getcopet.com/deleteAccount; and contact us at support@getcopet.com to access or correct your data.

7. Legal Bases (GDPR)

Where the GDPR applies, we process your data to perform our contract with you (providing the app), with your consent (location, push notifications), for our legitimate interests (security and service improvement), and to comply with legal obligations.

8. Changes

We may update this Data Policy from time to time. Changes take effect when published, with an updated version number and effective date.

Contact us

Questions about this Data Policy or our data practices: