PetPetPetPet Privacy Policy
Updated October 23, 2026
PetPet (毛孩手记, listed in the App Store as 毛孩日记PetPet) is provided by YUHAO LIN. This policy describes how the app and its website handle information.
1. Your journal and iCloud
Pet profiles, weights, photos, notes and care plans are stored on your device and in your own iCloud for recording, syncing and recovery. Content you choose to share is also downloaded to invited members' devices.
The developer operates no journal or membership backend and does not receive your private iCloud journal. The app uses Apple's services for sign-in, sync, sharing, purchases and notifications. Apple processes the account identifiers and service metadata needed to provide those services. We do not sell personal information, track you across apps, or use third-party advertising or analytics SDKs.
2. Sign in with Apple
Apple provides an app-specific user identifier and, with your permission, may provide a name and email address, including a private relay address. These are stored in the device Keychain to check sign-in status and display your account.
Personal purchases send an identifier derived from your Apple sign-in identifier to Apple to associate the purchase with your account. Family purchases use an identifier derived from the current iCloud account to bind the family purchase to that iCloud account. These are not sent to a developer-operated server.
3. Sharing with family
When you share a pet, invitees can access its profile, photos, weights and records. Invitations are issued to individuals. New members start with view-only access. Adding, editing, uploading and deleting shared content requires both the owner's permission and either a personal membership or valid family access. A membership does not override the owner's permissions. Members may see names or identifiers supplied by Apple to distinguish participants.
The owner can change permissions or stop sharing. Stopping a share revokes other members' access; their devices remove the shared pet after syncing online. The owner's own records remain. Sharing again requires new invitations. A member can leave without deleting the owner's records. Photos, screenshots and files saved outside the app cannot be remotely recalled. Invite only people you trust.
To provide short invitation codes, the app stores an encrypted invitation link, a code-derived lookup identifier and an expiry time in a CloudKit public invitation directory. The directory does not contain journal content, photos, plaintext codes or plaintext invitation links. Apple also stores creator identifiers, timestamps and related metadata. The developer may access this public invitation metadata for app functionality; private journal content remains in the user's private iCloud storage.
Codes expire after 7 days. Expiry does not remove people who already joined. Encrypted directory entries and creator metadata may remain after expiry, but an expired invitation cannot be used. Stopping sharing or deleting an account attempts to clean up owned invitation entries. Network or Apple service failures can delay cleanup; revoking the underlying share still prevents joining through it.
4. Purchases and family membership
Apple processes payments. We do not receive payment card details. The app reads Apple-verified purchase information to activate, restore and revoke access.
Family purchase receipts, entitlement status and member relationships are stored in the purchaser's iCloud. They are shared read-only to verify family access and include product, transaction, purchase environment, account association, refund and revocation information. Family members cannot edit the receipts through the app. A family includes the purchaser and up to 4 other people. Family access covers pets shared by the purchaser; members' own pets follow their personal plan.
After a refund, family access changes depend on the purchaser's app checking Apple's purchase status online and syncing it through iCloud. Revocation is not guaranteed to be immediate. A member's previously verified family access can be cached offline for up to 24 hours; an online check is then required.
5. Permissions and notifications
Camera and photo permissions are used to take or choose pictures. Photo cutouts and PDF export are processed on the device. Tapping or long-pressing Save requests permission to add an original photo or transparent cutout to your photo library.
Care reminders are scheduled locally. Shared-update notifications use Apple's iCloud and push services, with a generic message that does not include photos or journal text. You can turn shared updates off in the app and manage camera, photo and notification permissions in system Settings.
6. Deletion and leaving
At the bottom of Settings, Delete account & data clears the local journal, backups and photos, deletes your owned journal data from iCloud, and leaves joined shares and families. A family you created is also removed. Cloud deletion requires a network connection and available Apple services. Other devices update when they sync. Leaving someone else's shared pet does not delete the owner's records or copies saved outside the app.
After data deletion succeeds, the app signs you out and explains how to remove the app's Sign in with Apple authorization in iPhone Settings or at account.apple.com. The app does not retain an Apple access token, refresh token or authorization code for automatic authorization revocation.
Signing out alone does not delete journal data. Deleting an account, signing out or uninstalling the app does not cancel an Apple subscription. Cancel through Manage Subscription in the app or your Apple Account's subscription settings. Apple retains purchase transactions under its own service rules.
7. Retention, children and changes
Your journal remains on your device and in iCloud until you delete it. Public invitation retention is described above. The app is not directed at children under 13 and does not knowingly collect their personal information. Policy changes will appear on this page with an updated date.
8. Contact and requests
Developer: YUHAO LIN. Email 719347266@qq.com for technical help, privacy questions or data requests. Support emails you choose to send are used to reply and investigate your request, not for marketing. Do not send passwords, verification codes or full purchase receipts. You can request deletion of personal information in support emails, except information that must be retained by law.
9. Website
The website, privacy policy and support pages are hosted on Cloudflare Pages. They do not receive app journal or membership data and contain no advertising, analytics scripts or forms. Cloudflare may process IP addresses, browser information and request logs to provide network delivery, security and hosting under its own privacy policy. Email links use your chosen email service.