Effective date: 2026-09-15 · Version 1.4 · App: MiniPet (io.orax.minipet)
TL;DR
You can play without an account. In guest mode everything stays on your device and nothing is sent to our servers.
Sign in when you're ready — with Apple, Google, Kakao, or Naver — so your pet is safely backed up and can move with you to a new device.
On-device chat runs on your iPhone (Apple's on-device AI). Those messages stay on your device.
Cloud AI runs on our own servers. When you are signed in, your chat messages and pet memory summaries are sent to MiniPet's own backend, where an AI model running under our account generates the reply. No third-party AI service receives your data. You can turn Cloud AI off anytime in More → Cloud AI.
Your pet, diary, mailbox, and settings are backed up to our server so you don't lose them.
No ads. No third-party tracking. We never sell your data.
You can permanently delete your account and all of it, anytime, from inside the app (Settings → Delete Account).
1.Account (optional — sign in with Apple, Google, Kakao, or Naver)
An account is optional. You can play MiniPet in guest mode with no account at all — in that case everything stays on your device and we receive nothing.
When you choose to sign in (with Apple, Google, Kakao, or Naver), we receive and store:
A unique user identifier issued by the provider you picked
Your email address, if the provider shares one — for Apple this is Apple's private relay address unless you choose to share your real one
You can link more than one provider to the same account (Account Center in the app), and if you accidentally create two accounts you can merge them. We use this solely to identify your account, back up your pet, sync across your devices, and manage your subscription. We do not ask for your name, phone number, or contacts.
2.What stays on your device
The following live on your iPhone (Apple UserDefaults + local files) and are the source of truth for day-to-day play:
Your pet's name, species, level, mood, hunger, etc.
Free-tier chat with your pet (generated on-device — see §4)
If you delete the app, iOS removes this local copy.
3.What we store in the cloud
When you are signed in, MiniPet backs up a snapshot of your data to our server so you never lose your pet and can restore it on a new device. This backup may include:
Pet state (name, species, level, stats)
Diary entries and mailbox letters
Chat history
Pet memory summaries generated from your cloud chats (only if Cloud AI is on, see §4)
Settings and currency balances
Subscription status
This is stored on our infrastructure (see §6) and is encrypted in transit (HTTPS) and at rest.
4.AI chat — on-device vs. cloud
Guest mode — on-device. Replies are generated by Apple's on-device Foundation Models, running on your iPhone. These messages are not sent to our servers or any third party.
Signed-in — Cloud AI (on by default, off anytime). When Cloud AI is on, what is sent: the chat messages you type, your pet's memory summaries derived from those chats, your pet's name and species, and the language of the conversation. Who it is sent to: MiniPet's own backend only — our API and an AI model both run on our own account with our hosting provider, Cloudflare (see §6). No third-party AI service receives your data; if that ever changes, we will list the provider in §6, update this policy, and ask for your permission in the app before any data is sent. We log basic usage (e.g., token counts) to operate the service, with a daily per-user cap. Neither MiniPet nor our hosting provider uses your conversations to train any AI model. You can turn Cloud AI off at any time in More → Cloud AI; when off, chat runs on-device only (on devices without Apple Intelligence, cloud chat is unavailable until you turn Cloud AI back on).
5.Safety filter & crisis support
Before any AI reply (free or Pro), your input passes through an on-device safety filter screening for self-harm, violence, substance, and sexual content across 4 languages (English, 中文, 日本語, 한국어). If crisis-related content is detected, MiniPet:
Bypasses the AI reply entirely (no model call is made),
Shows regional crisis hotlines (US 988, Japan 0570-064-556, Korea 1393, etc.),
Does not store or transmit the triggering message.
6.Service providers (sub-processors)
We share data only with the providers needed to run MiniPet:
Provider
Purpose
Data
Apple
Sign in with Apple, on-device AI, in-app purchases, Live Activities
Apple user ID, email (relay), purchase receipts
Google / Kakao / Naver
Optional sign-in providers
Provider user ID, email (if shared)
Cloudflare, Inc. (United States)
Hosts our API and runs our Cloud AI model (an open-weights model deployed under our own account)
Chat messages, pet memory summaries, pet name/species, conversation language — processed to generate the reply and not stored by Cloudflare. Per Cloudflare's Workers AI data-usage terms, Cloudflare does not use customer content to train any AI model or to improve any Cloudflare or third-party service.
Supabase
Account database + backup storage
Account, backup snapshot, subscription
Fly.io
Hosts our memory service (pet memory summaries, diary, dream consolidation)
Pet memory summaries and diary entries, stored encrypted at rest
Every provider listed above processes your data only on our instructions, under a data-processing agreement, and is required to provide the same or equal protection of your data as described in this policy and as required by the App Store Review Guidelines. We do not share your data with any third-party AI service.
We do not integrate any advertising, analytics, or tracking SDKs.
7.What we do NOT do
No ads, ever.
No third-party tracking / analytics SDKs. We do not collect the advertising identifier (IDFA).
We never sell or rent your personal data.
No social features beyond invite-code neighbors — no public discovery, no stranger search.
8.Children's privacy
MiniPet is rated 16+ and is not directed at children under 13. To protect younger users who may still play:
The safety filter and crisis flow (§5) are always on, for every user and every message.
We do not knowingly collect personal data from children under 13 (or under the applicable age of digital consent in your region) without verifiable parental consent. If you believe a child has created an account, contact us at minipet@orax.io and we will delete it.
9.Account deletion & data retention
In-app deletion: Settings → account → Delete Account. This permanently deletes your account and all associated cloud data (backup, subscription record, usage logs, and your sign-in identity). This cannot be undone.
Local copy: deleting the app removes the on-device data.
Retention: we keep your cloud data while your account is active. When you delete your account, it is removed from our active systems promptly (residual encrypted backups, if any, are purged on our backup rotation cycle).
10.Permissions MiniPet may request
Permission
When
Why
Notifications
Optional
Pet-care reminders & bedside alarm
Live Activities
Optional
Show your pet in the Dynamic Island
Camera
Optional
Scan a neighbor's visit QR code
Motion & Fitness
Optional
Your pet walks along while you walk. Step counts stay on your device.
Location
Optional
Show local weather in your pet's room. Used only for weather; never stored on our servers.
Photos
Optional
Show your pet a photo. Analyzed on-device; the image itself is never uploaded.
You can change these anytime in iOS Settings → MiniPet.
11.International data transfers
We operate from, and use providers based in, various countries including the United States. If you use MiniPet from the EU/UK or elsewhere, your data may be processed in the US and other countries. Where required, transfers rely on appropriate safeguards (e.g., Standard Contractual Clauses) provided by our processors.
12.Your rights
Depending on where you live (GDPR, UK GDPR, CCPA/CPRA, APPI, PIPA, etc.), you may have the right to access, correct, delete, or export your data, and to object to or restrict certain processing.
Delete: use in-app Delete Account (§9), or email us.
Access / export / other requests: email minipet@orax.io.
For EU/UK users, ORAX is the data controller for the account and backup data described above. Our lawful bases are performance of our service (providing your account, backup, and chat) and your consent where applicable.
California (CCPA/CPRA): we do not sell or share personal information for cross-context behavioral advertising.
Japan (APPI) / Korea (PIPA): we process the account data described above to operate the service; you may request deletion at any time.
13.Changes to this policy
If we make material changes, we will update the "Effective date," notify you in-app on next launch, and note it in the App Store "What's New."
14.Contact
Privacy questions, data requests, or anything else: minipet@orax.io