Privacy Policy

1. Introduction

Welcome to 毛孩有話說 (the “App”). This Privacy Policy explains how OMU LABS LIMITED, a company incorporated in Hong Kong (“OMU Labs”, “we”, “us”, “our”), collects, uses, discloses, retains and protects information about you when you use the App and the related services (collectively, the “Service”).

OMU LABS LIMITED is the data controller responsible for processing the personal data described in this Policy. If you do not agree with this Policy, please do not use the App.

2. Information We Collect

2.1 Account information

• Your display name, email address and (optionally) avatar — provided when you sign up or sign in.
• If you sign in with Apple Sign In or Google Sign-In, we receive a unique user identifier and (where you allow) your email address from those providers. We do not receive your Apple/Google password.
• Authentication metadata (e.g. session tokens, last sign-in time, device hash).

2.2 Pet profile information you provide

• Pet name (nickname), species (dog, cat, rabbit, hamster, exotic), optional breed, optional age, optional gender, and personality tags you select (e.g. clingy, foodie, shy).
• Any free-text notes, favourites or comments you add to a reading.

2.3 Photos you upload (Camera / Photo Library)

The core of the App requires you to upload a photo of your pet. With your permission, the App accesses your device’s Photo Library (to pick an existing image) and/or Camera (to take a new image). These permissions are requested only at the moment you use the relevant feature, and can be revoked at any time in your device’s Settings app — although doing so will prevent the AI reading feature from working.

Photos you upload may contain incidental information such as portions of your home or environment, and image metadata (EXIF) such as the camera model and the time the photo was taken. We strip and discard precise GPS location metadata from uploaded photos before storage where technically feasible.

Photos are used solely to:

• transmit the image to our AI vision/language model providers in order to generate the reading;
• store the image, linked to your account, so that the saved reading can be reviewed, shared, exported as PDF and re-displayed on your own devices;
• display thumbnails in your history and on result cards.

We do not use your photos to train any AI model (ours or any third party’s) without your explicit, opt-in consent, and we do not share them with advertising networks or sell them.

2.4 AI-generated content linked to your account

When you generate a reading, the App stores the resulting text (inner voice, daily diary, “small secret”, “letter to owner”), the index values (e.g. happiness, foodie, curiosity), and the input snapshot (pet profile + personality tags) so the reading can be retrieved later.

2.5 Device, log and usage information

• Device model, iOS version, App version, language and timezone.
• Approximate location at the city/country level derived from IP address — used for language defaults, debugging and abuse prevention. We do not collect precise GPS location.
• Feature-usage analytics (which screens you view, how many readings you generate, credit consumption) in aggregated, non-identifying form.
• Crash reports, error logs and diagnostic events.

2.6 Payment information (when paid features launch)

When optional paid plans are introduced, all payments will be processed by Apple through the App Store’s in-app purchase / subscription system. OMU Labs does not receive your credit card number, full billing address or other payment instrument details. We only receive Apple’s transaction identifiers and entitlement status (e.g. whether your subscription is active) needed to deliver the features you paid for.

2.7 Support communications

If you email us, we receive the contents of your message, your email address and any attachments — used to investigate and respond.

3. How We Use Your Information

• Service operation: generating AI readings from your photo + pet profile, saving readings to your history, syncing across your devices, generating PDF reports, displaying favourites.
• Account management: authenticating you, securing your account, transactional messages (e.g. account confirmation, password reset).
• Paid features & entitlements: verifying your Apple subscription receipt and unlocking the corresponding features.
• Service improvement: debugging, monitoring AI quality, A/B testing — using aggregated, anonymised data.
• Safety, security & abuse prevention: rate-limiting, detecting automated abuse, enforcing our Terms (including the prohibited-content rules), and moderating inappropriate uploads.
• Legal compliance: meeting our obligations under Hong Kong law and other applicable laws, and responding to lawful requests from authorities.

4. AI Processing & Training

To generate a reading, the App transmits your uploaded photo and your pet profile (name, species, breed, age, personality tags) to third-party AI vision/language model providers. The providers return generated text and index values, which we store linked to your account.

We do not authorise these AI providers to use your inputs to train their models, and we configure API access in the “no training” / data-retention-zero mode where the provider offers it. We do not use the contents of your personal photos or readings to train AI models without your explicit, opt-in consent. We may use aggregated, anonymised usage statistics (e.g. average length of generated text, error rates) to improve our prompts and pipelines.

5. Sub-Processors

We share data only with the following categories of sub-processors, strictly as needed to provide the Service:

We do not sell your personal data. We share data with these sub-processors under contractual obligations to handle it only on our instructions and to protect it appropriately.

6. Data Retention

• Account deletion: when you delete your account, all User Content (including uploaded photos, pet profiles, generated readings and PDF files) and your personal identifiers are permanently deleted within 30 days.
• Individual reading / photo deletion: deleted items are removed from active storage immediately; residual backup copies are purged within 30 days.
• AI provider transient data: requests to AI providers are configured to minimise retention; in any event, AI providers do not store inputs longer than their own published abuse-monitoring window.
• Legal hold: certain data may be retained longer where required by applicable law or legal proceedings.
• Anonymised aggregates: non-identifying statistical data may be retained indefinitely for service improvement.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you.
• Correction: update your account, pet profile or display name directly in the App, or ask us to correct inaccurate data.
• Deletion: delete individual readings, photos, your pet profile, or your entire account from within the App (effective within 30 days).
• Data portability: export your readings as PDF (in-app), or request a machine-readable export by email.
• Restrict / object: request that we limit certain processing.
• Withdraw consent: withdraw any consent you have given (e.g. for marketing emails) at any time without affecting prior lawful processing.

To exercise any of these rights, contact us at email@omulabs.co. We respond within 30 days. We may need to verify your identity before processing your request.

8. Children

The App is not directed to children under the age of 13. We do not knowingly collect personal data from children under 13. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at email@omulabs.co and we will delete the information promptly.

9. International Data Transfers

OMU Labs is incorporated in Hong Kong. Your data may be stored and processed in Hong Kong, Singapore, the United States, the European Union or other countries where our sub-processors maintain infrastructure. Where personal data is transferred internationally, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms required by applicable law.

10. Security

We implement industry-standard security measures including encryption in transit (TLS/HTTPS), encryption at rest, row-level security policies, scoped authentication tokens, and least-privilege access controls for our team. No system is impenetrable. In the event of a data breach affecting your rights, we will notify you and the relevant authorities as required by applicable law.

11. No Sensitive Sensors

The App does not collect or use the device microphone or precise GPS location, and does not use any third-party advertising SDK, IDFA-based tracking SDK, or analytics SDK that cross-links your activity across other apps or websites.

12. Analytics & Advertising

We collect anonymised usage analytics (feature usage frequency, session duration, crash rate) to improve the Service. This data cannot identify you individually. We do not display third-party advertisements, do not use ad networks, and do not sell your data to advertisers.

13. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in the App, applicable law or our business. We will post the updated Policy with a revised “Last Updated” date and, for material changes, will notify you through the App or by email. Your continued use of the Service after the new Policy takes effect constitutes acceptance of those changes.

14. Contact

For any privacy-related question, request or complaint, please contact:

OMU LABS LIMITED
Hong Kong
email@omulabs.co

We aim to respond to all privacy-related requests within 30 days.