pet-portrait.ai
← Back to home

Privacy Policy

Last updated: 2026-07-21

This Privacy Policy explains how Felix Harmel ("we", "us") collects and processes personal data when you use our app to generate AI pet portraits and order prints (poster/canvas).

1) Controller (Who is responsible)

Felix Harmel
c/o IP-Management #7882
Ludwig-Erhard-Str. 18
20459 Hamburg
Germany

Contact: privacy@checkurchat.app

2) What the app does

Our app lets you upload a pet photo, generate a stylized portrait using AI, and (optionally) order a physical print (poster/canvas) shipped to your address.

3) Data we process

A) Images and content you provide

  • Uploaded pet photos (the images you upload for processing)
  • Generated portraits (the AI-generated output image)

B) Order and shipping information (if you place an order)

  • Name and shipping address
  • Country
  • Order details (product type/size, price, order status)
  • Operational identifiers (e.g., order ID)

C) Payment information (if you place an order)

Payments are processed by Stripe. We receive information needed to confirm and manage your order (e.g., payment status, transaction/order identifiers). We do not store full card details on our servers.

D) Technical data

To operate and secure the service, we may process limited technical data such as IP address (e.g., in server logs), device/app information (e.g., app version), and timestamps.

We use Vercel Web Analytics to measure aggregated usage of our website in a privacy-friendly manner. Vercel Web Analytics does not use cookies and helps us understand page visits, referrers, device/browser information, and similar technical usage data.

If you choose the Analytics category in our cookie settings, we also use PostHog EU Cloud for product analytics, funnel analysis, error tracking, heatmaps, and sampled session replay. PostHog is not initialized before that choice. Optional analytics can be rejected or withdrawn at any time through the Cookie settings link in the footer.

Session replay masks form inputs, strips query strings from recorded URLs, and excludes uploaded source photos and generated customer portraits. It is disabled on admin, login, checkout-result, payment-success, and other payment-sensitive routes. Marketing is a reserved consent category; no advertising vendor is active under that category today.

4) Why we process data (purposes) and legal bases

We process personal data for the following purposes:

  1. Provide the app and generate portraits
    Legal basis: performance of a contract / steps prior to entering a contract.
  2. Process orders, production, and shipping
    Legal basis: performance of a contract.
  3. Operate, secure, and maintain the service (fraud prevention, abuse detection, debugging)
    Legal basis: legitimate interests (service security and reliability).
  4. Compliance with legal obligations (e.g., accounting and tax obligations for orders)
    Legal basis: compliance with legal obligations.

5) Uploaded photos vs. generated portraits (storage and deletion)

Generated portraits. We store generated portraits so you can access your portrait in the app, place an order, and so authorized operators can provide customer support, investigate failures, prevent fraud, maintain service reliability, and perform limited short-term quality assurance.

Uploaded photos. Your uploaded pet photo(s) are used to generate the portrait. Authorized operators may access recent uploads and results for the operational purposes described above. A source upload linked to a successful generation is scheduled for deletion 30 days after the generation. A source upload linked to a failed generation is scheduled for deletion 30 days after the relevant attempt. An upload that never creates a generation is scheduled for deletion after 72 hours.

A generated portrait without a paid order is scheduled for deletion 90 days after generation. A generated portrait associated with a paid order is scheduled for deletion 365 days after fulfilment or the most appropriate completed-order timestamp available in our order system. A temporary retention hold may delay deletion for an active support or dispute case. Deletion failures are recorded and retried; they do not silently count as successful deletion.

You can request deletion of your portrait files at any time by contacting us at privacy@checkurchat.app. We may retain limited order and payment records as required by law (e.g., accounting and tax obligations).

6) Where your data is stored

We use Supabase to operate core backend functionality (database and file storage). According to our configuration, Supabase data is hosted in the EU (Frankfurt, Germany).

7) Who we share data with (processors and partners)

We share data only as necessary to provide the service:

  • Supabase (hosting/database/storage for app operations and order data)
  • Google Cloud Vertex AI (AI processing to generate the portrait)
  • Gelato (print production and shipping fulfillment). We share the minimum needed to fulfill your order (e.g., print file and shipping details).
  • Stripe (payment processing). Stripe processes payments and provides us order/payment status.
  • Vercel (website hosting, aggregate Web Analytics, and Speed Insights)
  • PostHog EU Cloud (optional product analytics, error tracking, heatmaps, and sampled privacy-masked session replay after Analytics consent)

8) International transfers

We aim to process and store data in the EU. For reliability, AI processing may be routed via Google Cloud endpoints that could involve processing outside the EU/EEA. Where required, we rely on appropriate safeguards (such as adequacy decisions or standard contractual clauses).

9) How long we keep data

We keep personal data only as long as necessary for the purposes described above, including to provide the service, support orders, and comply with legal obligations.

The image-specific periods are described in section 5. Order, payment, tax, fraud-prevention, and accounting records may be retained separately where needed; retaining those records does not require us to retain the corresponding image files for the same period. PostHog analytics and replay retention is controlled in our PostHog project configuration and is intended to be kept for a conservative, limited period.

10) Your rights

Depending on your location and applicable law, you may have rights to:

  • access your personal data,
  • correct inaccurate data,
  • request deletion,
  • restrict or object to certain processing,
  • request data portability,
  • withdraw consent (where processing is based on consent).

You also have the right to lodge a complaint with a data protection authority.

11) Contact

For privacy requests, contact: privacy@checkurchat.app

12) Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version and update the "Last updated" date above.