PetChat Privacy Policy

Cerebra Enterprises provides PetChat. This policy covers the PetChat iOS app, its pages at cerebraenterprises.com/petchat, and PetChat support correspondence. Contact [email protected].

The camera preview stays on the device. After you explicitly choose “Allow cloud AI” and tap Start, PetChat periodically samples a current frame, resizes it to a small JPEG, removes image metadata, and sends that image over HTTPS to a Cerebra Cloudflare Worker. The image can include your room, other surroundings, or people in the background. Camera permission alone does not authorize an upload. Tapping Stop or withdrawing consent prevents new uploads; a request already transmitted cannot be recalled from processing.

The Worker sends the image and up to three recent generated lines to Cloudflare Workers AI, which hosts the configured Gemma 4 model for this service. This is not a separate Google API call. The Worker validates the result and returns a short line or an abstention. Cerebra does not save images or dialogue on the Worker, in Durable Objects, or in a user-media bucket, and does not enable AI Gateway content logging or caching. Cloudflare still processes connection information and the image to answer the request under its service practices.

PetChat generates speech locally using bundled Kokoro model and voice assets. It does not send dialogue to a remote speech service. It does not request microphone permission or record ambient sound. When automatic saving is on, the app stores a short silent camera segment or captured still, the generated audio, caption, thumbnail, and technical model metadata in its Application Support directory. You can turn automatic saving off. Saved moments replay and export without a network connection. No account, cloud History, or app-managed sync is provided.

History remains until you delete it or remove the app. Ordinary operating-system backups may include saved moments; PetChat does not claim that they are excluded. Temporary working media and export files are cleaned after use or on later app launches.

PetChat uses Apple App Attest where supported to verify an app installation. On a device without App Attest, a restricted fallback can validate a DeviceCheck token with Apple if that service is configured; otherwise live AI is unavailable. The Worker stores a pseudonymous attested key identifier and public key, an assertion counter, short-lived one-time challenges, and usage counters. For the fallback it stores a token hash and stricter usage counters, not the raw token. It also hashes the connecting IP address with a server secret for network-level abuse control. These records do not contain the camera image, generated line, audio, or video. Challenges and reservations expire after about one minute; daily counters after about two days; monthly counters after about 40 days; inactive attested-key records after about 90 days. Expired records are cleaned by a daily server task and may remain up to an additional day. We use request counts, latency, error category and aggregate usage to operate and protect the service. Cloudflare may separately retain connection and security logs under its platform practices; this policy does not promise immediate deletion of those records.

When you choose Share, the iOS share sheet hands a watermarked export to the service you select. “Save video” requests add-only Photos access and saves the export to your Photos library. PetChat does not request broad Photos, Contacts, Location, tracking, or microphone access. Copies shared with others or saved to Photos or an operating-system backup are outside local History and are not removed when History is deleted. Apple may process app and diagnostic information under your settings and Apple’s privacy practices.

Decline cloud AI before first use, or switch off “Allow cloud AI” in Settings to stop future image uploads. You can still browse, replay, delete and share saved History. Delete one moment in History, choose “Delete all History” in Settings, or remove the app to remove app-owned local data. See Data Deletion. There is no Cerebra cloud media account to erase. Requests already processed and copies you shared cannot be recalled.

Cloudflare hosts these pages and may process IP address, requested URL, browser details, time and security signals to deliver and protect them. The website also loads Cloudflare Pages Web Analytics, which receives pageview and browser information. This website beacon is separate from the PetChat iOS app. If you email support, Cerebra receives the address and message you provide, plus any attachments you choose. We use them to respond and address the request, and keep correspondence as needed for support, security, disputes or legal obligations. Avoid sending private images unless needed. To request deletion of support correspondence, email [email protected].

We will update this page when processing changes. A new image processor or materially different data use requires an updated disclosure and appropriate new consent before images are sent there.