PetChat Privacy Policy

Scope and contact

Cerebra Enterprises provides PetChat. This policy covers the PetChat iOS app, the petchat.si website, and PetChat support correspondence. Contact corporate@cerebraenterprises.com.

Camera frames, your words and consent

The camera preview stays on the device. After you explicitly choose “Allow cloud AI,” each time you tap to chat (or while continuous translate is on) PetChat takes one current frame (for a video you film, four frames from across the clip, combined into one image), resizes it to a small JPEG, removes image metadata, and sends it over HTTPS to a Cerebra Cloudflare Worker. The frame can include your room, other surroundings, or people in the background. With it, PetChat sends the text of what you said (transcribed on your iPhone), labels for pet sounds it heard, your pet’s name, species and chosen personality traits, the pet’s personality card if you fill one in (what your pet calls you, whether it says its own name, its own words, a short description and up to six example lines), and up to six recent lines of the conversation. Camera or microphone permission alone does not authorize an upload. Turning cloud AI off prevents new requests; a request already transmitted cannot be recalled from processing.

The Worker sends this to Cloudflare Workers AI, which hosts the configured Gemma 4 model for this service. This is not a separate Google API call. The Worker validates the result and returns a short line or an abstention. Cerebra does not save frames, transcripts or dialogue on the Worker, in Durable Objects, or in a user-media bucket, and does not enable AI Gateway content logging or caching. Cloudflare still processes connection information and the request content to answer it under its service practices.

Microphone and speech recognition

PetChat uses the microphone only while it is listening (for a few seconds after you tap, or continuously while continuous translate is on) and while you film a video. Listening audio is analyzed in memory on your iPhone and is never uploaded or saved. A video you film keeps its sound in the clip saved on your iPhone with that moment, and the sound is included when you share or save the video; PetChat never uploads it. While you film, speech recognition and the sound classifier work the same way. Apple’s on-device speech recognition turns what you say into text; if on-device recognition is not available for your language, no transcript is made. Apple’s built-in sound classifier labels pet sounds such as barking or purring. Only the resulting text and labels are sent, as described above. If you decline microphone or speech recognition permission, PetChat answers from the camera alone and you can type instead.

While the camera is open, PetChat reads your iPhone’s motion sensor only to tell which way you are holding it, so photos and clips come out upright. This stays on the device and is never saved or sent.

Voice, pets and saved moments on your device

PetChat generates speech locally using a speech model and voices bundled with the app. It does not send dialogue to a remote speech service. Pet profiles, including personality cards and custom voice settings, and a pet photo if you choose one with the system photo picker, are stored on the device. If you say a line aloud for a personality card, the audio is transcribed on your iPhone and is neither saved nor uploaded; only the text you keep becomes part of the card. When saving is on, the app stores a short camera clip or still, the generated audio, the line, what you said, a thumbnail and technical model metadata in its Application Support directory. Videos you film are always saved; you can turn off saving the other replies. Saved moments replay and export without a network connection. No account, cloud gallery, or app-managed sync is provided.

Saved moments remain until you delete them or remove the app. Ordinary operating-system backups may include them; PetChat does not claim that they are excluded. Temporary working media and export files are cleaned after use or on later app launches.

Service security and operational records

PetChat uses Apple App Attest where supported to verify an app installation; each request is signed together with its frame and context. On a device without App Attest, a restricted fallback can validate a DeviceCheck token with Apple if that service is configured; otherwise live AI is unavailable. The Worker stores a pseudonymous attested key identifier and public key, an assertion counter, short-lived one-time challenges, and usage counters. For the fallback it stores a token hash and stricter usage counters, not the raw token. It also hashes the connecting IP address with a server secret for network-level abuse control. These records do not contain the camera frame, transcript, generated line, audio, or video. Challenges and reservations expire after about one minute; daily counters after about two days; monthly counters after about 40 days; inactive attested-key records after about 90 days. Expired records are cleaned by a daily server task and may remain up to an additional day. We use request counts, latency, error category and aggregate usage to operate and protect the service. We also keep daily totals to run the service and to understand how PetChat is used: how many replies there were by outcome, mode, pet species, app version and AI prompt version, response times, requests refused by our limits, and how many installations were new or active that day. To count installations, the service notes on each day whether an App Attest key was used, but only the daily numbers are kept, never which keys. These totals are numbers only, with no camera frame, words, generated line or network address, and are kept for about 13 months. Cloudflare may separately retain connection and security logs under its platform practices; this policy does not promise immediate deletion of those records.

Ratings, reports and the update check

Rating a reply is optional. If you tap thumbs up or down under a reply or on a saved moment while cloud AI is on, PetChat sends your rating with the reply’s request ID, a one-way hash of the line, the mode, your pet’s species and voice, and the AI prompt, model and app versions. A thumbs-up, or a thumbs-down without details, includes no text. If you send a report, it also includes the reasons you pick, the pet’s line, any note you write and, only if you leave “Include what you said” on, what you said for that reply. Reports never include photos, video or audio. We use ratings and reports to review reports of inappropriate content and to improve replies. They are stored in Cloudflare D1 without your App Attest key, network address or any account, are replaced if you change your rating, and are deleted after 90 days. Because they are not linked to you, we cannot look them up by device or name. Ratings you haven’t sent yet wait on your iPhone and are discarded if you turn off cloud AI. Settings → Send feedback opens an email in your own mail app; it is handled like any support email.

While cloud AI is on, the app also sends its version number with each request and checks which versions the service still supports, so an outdated version can show an update prompt instead of failing. Ratings, reports and the daily totals can be read only by Cerebra in a private admin area protected by Cloudflare Access.

Sharing and Apple services

When you choose Share, the iOS share sheet hands a watermarked export to the service you select. “Save video” requests add-only Photos access and saves the export to your Photos library. PetChat does not request broad Photos, Contacts, Location, or tracking access. Copies shared with others or saved to Photos or an operating-system backup are outside the app and are not removed when you delete moments. Apple may process app and diagnostic information under your settings and Apple’s privacy practices.

Your choices and deletion

Decline cloud AI during setup, or switch off “Cloud AI” in Settings to stop future requests, including ratings and reports. You can still browse, replay, delete and share saved moments. Delete one moment from the gallery, choose “Delete all moments” in Settings, remove a pet in Your pets, or remove the app to remove app-owned local data. See Data Deletion. There is no Cerebra cloud media account to erase. Requests already processed and copies you shared cannot be recalled.

Website visits and support messages

Cloudflare hosts petchat.si and may process IP address, requested URL, browser details, time and security signals to deliver and protect it. The site loads no analytics, advertising or tracking scripts, and its examples and voice samples run in your browser without sending what you type. If you email support, Cerebra receives the address and message you provide, plus any attachments you choose. We use them to respond and address the request, and keep correspondence as needed for support, security, disputes or legal obligations. Avoid sending private images unless needed. To request deletion of support correspondence, email corporate@cerebraenterprises.com.

Changes

We will update this page when processing changes. A new processor or materially different data use requires an updated disclosure and new consent in the app before anything is sent there. Version 2 of PetChat added on-device listening and asks everyone for consent again. Ratings and reports, added in October 2026, are sent only when you choose to send them.