MiniPet

Privacy Policy

Effective date: 2026-06-13 · Version 1.1 · App: MiniPet (com.orax.minipet)

1.Account (Sign in with Apple)

MiniPet uses Sign in with Apple as the only sign-in method. When you sign in, we receive and store:

• A unique Apple user identifier (apple_user_id)
• Your email address — this is Apple's private relay address unless you choose to share your real one

We use this solely to identify your account, back up your pet, sync across your devices, and manage your subscription. We do not ask for your name, phone number, or contacts.

2.What stays on your device

The following live on your iPhone (Apple UserDefaults + local files) and are the source of truth for day-to-day play:

• Your pet's name, species, level, mood, hunger, etc.
• Free-tier chat with your pet (generated on-device — see §4)
• Diary entries, mailbox letters, settings, currency balances

If you delete the app, iOS removes this local copy.

3.What we store in the cloud

When you are signed in, MiniPet backs up a snapshot of your data to our server so you never lose your pet and can restore it on a new device. This backup may include:

• Pet state (name, species, level, stats)
• Diary entries and mailbox letters
• Chat history
• Settings and currency balances
• Subscription status

This is stored on our infrastructure (see §6) and is encrypted in transit (HTTPS) and at rest.

4.AI chat — on-device vs. cloud

• Free tier — on-device. Replies are generated by Apple's on-device Foundation Models, running on your iPhone. These messages are not sent to our servers or any third party.
• Pro tier (paid) — cloud. To provide richer conversations, your messages are sent over an encrypted connection to our server and then to third-party AI language model providers, which generate the reply. We log basic usage (e.g., token counts) to operate the service. Your messages are used only to generate a response, and we do not use your conversations to train any models.

5.Safety filter & crisis support

Before any AI reply (free or Pro), your input passes through an on-device safety filter screening for self-harm, violence, substance, and sexual content across 4 languages (English, 中文, 日本語, 한국어). If crisis-related content is detected, MiniPet:

• Bypasses the AI reply entirely (no model call is made),
• Shows regional crisis hotlines (US 988, Japan 0570-064-556, Korea 1393, etc.),
• Does not store or transmit the triggering message.

6.Service providers (sub-processors)

We share data only with the providers needed to run MiniPet:

Provider	Purpose	Data
Apple	Sign in with Apple, on-device AI, in-app purchases, Live Activities	Apple user ID, email (relay), purchase receipts
Cloudflare	Hosts our API (Cloudflare Workers)	Requests pass through; standard request metadata
Supabase	Account database + backup storage	Account, backup snapshot, subscription
Third-party AI providers	Pro-tier chat replies	Pro chat messages

We do not integrate any advertising, analytics, or tracking SDKs.

7.What we do NOT do

• No ads, ever.
• No third-party tracking / analytics SDKs. We do not collect the advertising identifier (IDFA).
• We never sell or rent your personal data.
• No social features beyond invite-code neighbors — no public discovery, no stranger search.

8.Children's privacy

MiniPet is rated 12+ and is not directed at children under 13. To protect younger users who may still play:

• Kids Mode disables open AI chat entirely (scripted quick actions only).
• The safety filter and crisis flow (§5) are always on.

We do not knowingly collect personal data from children under 13 (or under the applicable age of digital consent in your region) without verifiable parental consent. If you believe a child has created an account, contact us at minipet@orax.io and we will delete it.

9.Account deletion & data retention

• In-app deletion: Settings → account → Delete Account. This permanently deletes your account and all associated cloud data (backup, subscription record, usage logs, and your sign-in identity). This cannot be undone.
• Local copy: deleting the app removes the on-device data.
• Retention: we keep your cloud data while your account is active. When you delete your account, it is removed from our active systems promptly (residual encrypted backups, if any, are purged on our backup rotation cycle).

10.Permissions MiniPet may request

Permission	When	Why
Notifications	Optional	Pet-care reminders & bedside alarm
Live Activities	Optional	Show your pet in the Dynamic Island
Camera	Optional	Scan a neighbor's visit QR code

You can change these anytime in iOS Settings → MiniPet.

11.International data transfers

We operate from, and use providers based in, various countries including the United States. If you use MiniPet from the EU/UK or elsewhere, your data may be processed in the US and other countries. Where required, transfers rely on appropriate safeguards (e.g., Standard Contractual Clauses) provided by our processors.

12.Your rights

Depending on where you live (GDPR, UK GDPR, CCPA/CPRA, APPI, PIPA, etc.), you may have the right to access, correct, delete, or export your data, and to object to or restrict certain processing.

• Delete: use in-app Delete Account (§9), or email us.
• Access / export / other requests: email minipet@orax.io.

For EU/UK users, ORAX is the data controller for the account and backup data described above. Our lawful bases are performance of our service (providing your account, backup, and chat) and your consent where applicable.

• California (CCPA/CPRA): we do not sell or share personal information for cross-context behavioral advertising.
• Japan (APPI) / Korea (PIPA): we process the account data described above to operate the service; you may request deletion at any time.

13.Changes to this policy

If we make material changes, we will update the "Effective date," notify you in-app on next launch, and note it in the App Store "What's New."

14.Contact

Privacy questions, data requests, or anything else: minipet@orax.io

MiniPet is built by ORAX.

---