Privacy

Photographs and optional AI features

Listening and care guides do not upload photographs. Breed ID, Mood Scan, Twin and Outfits are optional online features: when you choose a photo for one of them, that photo is sent to our backend and through our AI processing service to Google’s Gemini models to provide the result.

Your pet’s own photo stays on your phone too. You can give each pet one, or never do: without one, the app shows a drawing of a cat or a dog. The photo is cut down to a small square, which also drops any location the original carried, and kept in Telltail’s own folder on the phone. It is never uploaded and never sent to us or to anyone else, and it is left out of your phone’s iCloud or Google backups. You can change or remove it in Settings; removing the pet deletes it, and so does “Delete my data”.

Breed ID and Mood Scan return an analysis, Twin uses the photo to choose a portrait, and Outfits returns an edited picture. The photo-processing functions do not save the images to a database or photo-storage bucket. Processing by the AI service is subject to its service terms and privacy protections.

The selected photo is sent when you request one of these features, including attempts that do not produce a result. A coin is charged only when a result is returned. If you do not use these photo features, your photos are not sent for AI processing.

You can take the photograph with the camera or choose one you already have — both work the same way, and only the one photograph you pick is sent.

The picture that comes back is yours. Save puts it in your photos, and Send hands it to whatever you choose to share it with — both only when you tap them, and neither sends anything to us.

Pet profiles and local data

Your pet profiles, profile photos, saved reading history and reminder schedules are stored on your device. Your pet’s name and profile photo are not sent to analytics or advertising services. Species and selected details about a completed reading can be included in the product-analytics events described below.

“Delete my data” in Settings removes these local profiles, photos, readings and reminders. It does not cancel an Apple subscription or erase purchase records, coin transactions or analytics already held by the services below. Contact us to request access to or deletion of data held by those services.

What we do receive

The app uses these services for specific features. Requests also involve technical connection information such as an IP address; a photo or microphone permission does not give us access to your entire library or to recordings made outside the app.

Mixpanel — product analytics

Which screens you open, when a reading completes, what kind of sound it was and how confident the app was, plus your device type, app version and language. A generated device identifier ties these events together, and the profile also carries the RevenueCat app-user identifier and your tracking-permission status. No audio, pet name or photograph is sent in these events. Mixpanel processes this in the United States.

RevenueCat — subscriptions

Your app-user identifier, subscription status and the subscription and coin-purchase events Apple reports. This is how the app unlocks paid access, restores subscriptions and reconciles coin purchases. Payment itself is handled by Apple; we never see your card details.

Singular — advertising attribution

Singular receives installation, onboarding and subscription events to measure advertising performance. After the iOS tracking-permission decision, the SDK can use the advertising identifier only if you allowed access. Without that permission, the identifier is unavailable; measurement that does not require it, including Apple’s privacy-preserving attribution, can continue. These events do not contain your pet’s name, sound readings, audio or photographs.

Supabase — app services

Supabase hosts app configuration, existing-account sign-in and the backend for photo requests and coin balances. It receives the app-user identifier to check purchases with RevenueCat, and stores coin credits and debits, transaction references and which photo feature used a coin. The account sign-in flow is described below.

Google Gemini — photo processing

The photo you select for Breed ID, Mood Scan, Twin or Outfits is processed by Gemini through our backend and AI processing service. The request includes the photo, the chosen feature and, where needed, whether the animal is a cat or dog. Your microphone audio and pet profile name are not part of these requests.

Advertising and your choice

Telltail asks through iOS whether you allow tracking. If you allow it, the advertising identifier can be used to connect an install and subscription activity with an advertising campaign. Sound readings, microphone audio, pet names and photographs are not sent as advertising events.

Declining tracking does not block any app feature. iOS does not provide the advertising identifier, while analytics and advertising measurement that do not require it may continue. You can change your tracking choice in iOS Settings.

Accounts

Telltail does not create accounts. There is no sign-up, and you never need one: your subscription is tied to your Apple ID, not to an account with us.

There is a sign-in screen, for accounts that already exist — today that means accounts we create by hand, such as the one Apple’s review team uses to see the app without making a purchase. If you sign in, your email address and password go to Supabase, which hosts our authentication, and we read one flag that says whether that account has access. Nothing about your pets or your readings is sent or stored there.

Reminders and notifications

Telltail can remind you about a care routine at a time you choose, nudge you about the day’s three items, and — at most three times, ever — note that it has been a few days since your last reading. All of them are off until you turn them on, except the last, which only becomes active once you have allowed notifications for something else.

Every one of them is scheduled by your phone, on your phone. There is no server and no push service: nothing about a notification is sent anywhere, and we cannot see whether one was delivered, opened or ignored. What we do see is the same anonymous product analytics described above — that a reminder was set, and that a notification was opened — never its content and never your schedule.

A reminder time is stored on the device with everything else, and “Delete my data” removes it along with the rest. You can revoke the notification permission in iOS Settings at any time; the switches in Telltail will simply stop working, and the app says so rather than pretending they are on.

Children

Telltail is not intended for anyone under 16, and we do not knowingly collect data from children.

Your rights

You can delete the local app data described above from Settings. You can revoke the microphone or notification permission in iOS Settings at any time; the app tells you what it can no longer do rather than failing silently.

For anything else — access, correction, erasure, or a complaint — write to [email protected] and we will answer.

Changes

We update this policy when the app’s data use changes and show the update date above. The current app supports sign-in to existing accounts; it has no public sign-up flow. Sentry crash reporting is not enabled in the current production configuration.