Privacy Policy

Draft status: the controller is [LEGAL SELLER NAME], trading as DeskPup, at [LEGAL GEOGRAPHICAL ADDRESS]. Paid checkout stays disabled until these placeholders, launch territories, legal bases, transfers, and retention commitments are verified. Contact hello@deskpup.com.

What we use and why

We use your name, email, country, currency, payment references, order and support history to take payment, fulfil the contract, prevent fraud, provide support, issue refunds, and meet legal obligations. We use pet photos, pet details, correction notes, generated images, clips, quality records, and the bundle to create, check, deliver, and recover your DeskPup. We use limited security and delivery logs to protect and diagnose the service.

The starting legal bases are performance of the contract, legal obligations, and legitimate interests in service security, reliability, and legal claims. Optional marketing uses consent and can be withdrawn at any time. These bases remain subject to review for each enabled launch territory.

Photos and generation providers

We do not sell your photos. Creating and delivering a DeskPup requires us to send source or generated assets to contracted providers, currently including Cloudflare R2, Google Gemini, and fal.ai and its disclosed model hosts. Our launch policy is not to authorize providers to train public or general models on your photos; that statement will not become a public-sale promise until the provider contracts and settings have been verified.

Other recipients and international transfers

Stripe processes payments; Vercel hosts the website and API; Supabase holds the server-only operational, customer, and installation index; Apple and Sparkle infrastructure distribute the Mac app; and a transactional-email provider will send order messages once configured. Some processing may occur outside the UK or EEA under adequacy regulations or contractual safeguards. Email us to request the applicable transfer details.

Website analytics

Our host Vercel counts page views on this website so we know which pages people read. It sets no cookies, stores nothing on your device, and builds no profile — the counts are anonymous and aggregate.

The desktop app

Kira runs locally on your Mac. She does not read your screen, files, or keystrokes — she only reacts to system events like idle and unlock.

How long we keep data

The launch schedule is to delete paid source photos, rejected portraits, unnecessary EXIF, and intermediate working files within 30 days after final delivery, unless a documented support case is active. Worker scratch files are deleted after verified publication or case handoff. Security and operational logs are kept for 90 days unless needed for an incident or legal claim. Installation identifiers and their closed event history are kept for 24 months after last activity, then deleted or irreversibly aggregated. Support correspondence is kept for 24 months after closure, with photo attachments removed earlier where possible. Required order, tax, payment, refund, and chargeback records follow the accountant-confirmed legal period.

To understand whether DeskPup installs and activates reliably, the app sends a random installation identifier, app version and build, macOS version, processor type, and a small fixed set of events such as first launch, daily activity, first interaction, and custom-pet installation. It does not send screen content, filenames, pet names, redeem codes, calendar contents, notification text, or arbitrary event data. The identifier is used for aggregate product and operational reporting, not advertising profiles.

Your first-day reel

Your uploaded pet photos may appear in the private first-day reel included with your generated pet. DeskPup does not post it automatically. When you choose Send to phone, we create a random bearer link that expires after seven days and can be revoked from your Mac. Anyone who has that link can open the reel until it expires or is revoked, so share it only with people you trust. Transfer records and coarse, content-free sharing events are removed after the operational retention window. We do not record a social account, pet name, photo data, or raw IP address in sharing analytics.

Email

Order and recovery messages are transactional. Marketing or notify-list messages require a separate signup and can be unsubscribed from without stopping essential order communication.

Your rights

Depending on the law that applies, you may ask for access, correction, deletion, restriction, objection, or portability, and may withdraw marketing consent. Email us and we will verify the request proportionately, respond within the applicable statutory period, and explain any lawful retention exception. UK customers may complain to the Information Commissioner's Office at ico.org.uk.