Privacy Policy

App: What Cat?  |  Last updated: May 4, 2026

This Privacy Policy explains how What Cat? ("we", "our", or "the app") collects, stores, and uses your information. We designed this app with privacy in mind: you can use most features without creating an account, and your personal cat data stays on your device unless you choose to sign in.

1. What We Collect and Why

Data stored only on your device (no account required)

• Cat profiles — name, breed, age, weight history, diet, health notes, vaccinations, and other care details you enter about your cats.
• Health logs — food, water, litter, weight, medication, vomiting, grooming, play, sleep, mood, vet visit, and expense entries you create.
• Favorites and quiz results — breeds you save and your quiz answers.
• Luna AI care companion chat history — conversations with the AI care companion, stored per cat (up to 60 messages per cat).
• Luna memories — facts about your cats that the care companion remembers across sessions (up to 10 per cat).
• App preferences — onboarding completion status, premium simulation toggle (development only).

All of the above is stored in your device's local app storage (AsyncStorage). It is not transmitted to our servers unless you are signed in and using a feature that requires it (see below). Uninstalling the app permanently deletes all locally stored data.

Data stored in our cloud (only if you sign in)

Signing in is optional. If you choose to sign in with Apple or Google, the following is stored in our backend (Supabase):

• Account identity — your email address and display name from your Apple or Google account.
• Premium subscription status — whether you have an active premium subscription, so your access is restored when you reinstall or switch devices.
• AI usage counters — how many AI messages you have sent (used to enforce free-tier limits and prevent abuse).

Your cat profiles, health logs, and chat history are not uploaded to our cloud. They remain on your device.

Data transmitted when using AI features (sign-in required)

Cat Chat and the Luna care companion require you to be signed in. When you send a message in either feature, the following data is transmitted to our secure backend (a Supabase Edge Function) to generate a response:

• Cat Chat: your message text, your active cat's profile (name, breed, age, weight, conditions, medications, diet), a summary of that cat's health logs from the last 7 days, and the last 12 messages of the conversation for context.
• Luna care companion (Premium): your message text, your active cat's basic profile, and any "memories" you or Luna have noted about that cat.

Our backend performs security checks (topic filtering, emergency detection) before forwarding relevant content to OpenAI to generate a response. We do not persistently store your AI conversation content on our servers — it is used only to process the current request. OpenAI's use of this data is governed by OpenAI's Privacy Policy.

If you are not signed in, no data is transmitted to our backend or to OpenAI. The Luna companion may return a local canned response for a small set of common questions without any network call.

Data sent to Apple / Google for purchases

If you subscribe to What Cat? Premium, your purchase is processed by the App Store (Apple) or Google Play (Google). We receive a subscription status notification from RevenueCat (our subscription management platform) but we never see your payment card details. RevenueCat's privacy policy is available at revenuecat.com/privacy.

2. Data We Do Not Collect

• We do not collect precise location data.
• We do not track your activity across other apps or websites.
• We do not show third-party advertisements.
• We do not sell your data to any third party.
• We do not share your data with anyone except the service providers listed in this policy (OpenAI, RevenueCat, Supabase), and only to the minimum extent needed to provide the app's features.

3. How We Protect Your Data

• All communication between the app and our backend uses HTTPS (encrypted in transit).
• Your account is authenticated with industry-standard OAuth (Sign in with Apple / Google). We never handle your password.
• User-provided text fields are sanitized before being sent to AI services to reduce prompt injection risks.
• We do not store sensitive API keys in the app binary. AI requests are proxied through our backend.

4. Data Retention

• On-device data: retained until you uninstall the app or clear app data.
• Account data (if signed in): retained while your account is active. Deleted within 30 days of an account deletion request.
• AI usage counters: retained while your account is active and for up to 90 days after deletion for audit purposes.

5. Your Rights and Choices

• Access: All cat data and health logs are visible and editable directly in the app.
• Delete on-device data: Uninstall the app. This deletes all locally stored data permanently.
• Delete account data: To request deletion of your cloud-stored account data (email, subscription status, usage counters), email us at privacy@whatcat.app with the subject line "Delete my data". We will process your request within 30 days.
• Opt out of cloud features: Simply do not sign in. The breed encyclopedia, quiz, local cat profiles, and on-device AI features work without an account.

6. Children

What Cat? is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, please contact us and we will delete it promptly.

7. Third-Party Services

8. Changes to This Policy

We may update this policy to reflect changes in the app or applicable law. When we do, we will revise the "Last updated" date at the top of this page. Continued use of the app after changes are posted means you accept the updated policy.

9. Contact

Questions or data requests: privacy@whatcat.app