Privacy Policy

Updated: 2026-09-27 · Applies to the ExoPet iOS app · If this translation differs from the Chinese version, the Chinese version prevails.

ExoPet is a local-first record-keeping tool. Your pet data is stored on your device. Once an active Pro subscription has finished processing your account data, the app uploads backups automatically. The account, subscription and cloud backup sections apply to versions that offer those features and to how you actually use them; using only local features does not upload your pet data. The fonts (Plus Jakarta Sans, Manrope) and species images are bundled with the app.

1. Who we are

ExoPet is provided by Wang Longfei (王龙飞). If you have any questions about this policy, you can contact us:

2. Information we process

2.1 Information you enter in the app

When you use ExoPet to record pet profiles, feeding, weight, care events, reminders and settings, this content is saved locally on your device, including:

Local record-keeping needs no registration. You may choose to use Sign in with Apple to use subscription and cloud backup features.

2.2 Photo access

When you choose a pet avatar, the app asks for photo access so you can pick an image from your library and import it into the app's local sandbox. We do not scan or upload your photo library because of this permission.

2.3 Notification permission

When you create or turn on a reminder, the app asks for notification permission to schedule local reminders on your device. Notification content is generated and managed locally by the app and does not rely on a push server.

2.4 Information you send through support channels

If you contact us by email, you may provide contact details, a description of the problem, screenshots or other feedback. This information is handled by the email or social service you choose and is used to answer your questions, handle bug reports or improve the product.

When you start a feedback email from the app, the message body is pre-filled with the app version and system version. You can review, edit or delete this in your mail app before deciding whether to send it; the app never sends email automatically.

2.5 External source links

When you tap a source link in species information or a feeding template, the app opens the third-party website in your system browser. Whether you visit it and how your data is handled afterwards is between you and that website; ExoPet does not attach your pet records to the link.

2.6 Account and subscription

When you use Sign in with Apple, we process the account identifier, authentication result and sign-in session provided by Apple to identify your ExoPet account, protect your account data and handle account deletion. Sign-in credentials on your device are stored in the system's secure storage and are not written into backup files. The account service also processes a random device identifier for session and device recognition; it is not an advertising identifier. When you buy or restore Pro, we verify the transaction identifier, product, expiry and transaction ownership with Apple to provide subscription benefits and prevent duplicate claims. Payment is handled by the App Store; we do not receive your card details.

We receive identity events from Apple, such as authorization revocation and account deletion, to stop invalid sessions and process deletions. The server keeps the event identifier, time and result needed to avoid processing an event twice; it does not keep the original tokens in these notifications or any email address they contain.

2.7 Automatic cloud backup

Once an active Pro subscription has finished processing your account data, the app automatically backs up saved data and retries after recoverable failures. Automatic cloud backup is enabled with Pro and has no separate off switch. By default it uses Wi-Fi only; you can allow cellular data on the backup page. It covers pet profiles and avatars, all records supported by backup, feeding plans, reminders and preferences, plus the creation time, device name, item counts and checksums. Unchanged media within the same account is reused to avoid uploading it again. Cloud backups do not include sign-in credentials or unsaved drafts. Uploading does not automatically replace local data on other devices. After you sign in and confirm an active Pro subscription, or restore Pro, the app first compares local and cloud data: if local data is empty it restores automatically; if they differ, you choose local, cloud or merge, and nothing you haven't chosen is published before that.

3. How we use this information

We use the information above only to:

4. What we don't do

In the current version, we do not:

5. Storage and retention

5.1 Local data

ExoPet's core data is stored locally on your device by default and is kept until you delete records or pets, or delete the app.

5.2 System backups

Depending on your device settings, iOS may back up local data in the app's sandbox through the device backup system. These backups are provided and controlled by Apple and are not an ExoPet cloud sync service.

5.3 Support communications

If you contact us by email or another support channel, we may keep the conversation for a reasonable period to follow up on the issue and improve the service.

5.4 Cloud data

The account and cloud backup services use Tencent Cloud CloudBase, deployed in Shanghai, China. Files are stored with private access, and the server checks your account before providing transfers. This is not end-to-end encryption.

The cloud keeps only the latest valid copy of your account's data; each successful backup updates that copy. After Pro expires, existing backups are kept for 90 days, and you can download a backup that is still kept after renewing; downloading does not extend the retention period. When the retention period ends, online backups and staging files are deleted. Backup copies the provider keeps for disaster recovery may not be deleted at the same time as online data.

File transfers use short-lived authorizations limited to specific objects. Pro expiry, signing out or deleting your account stops new authorizations and the publishing of unfinished backups; authorizations already issued may remain valid for their remaining lifetime, and files already obtained cannot be recalled remotely.

When you delete your account, account access stops immediately and deletion of online backups and staging files begins. Deleting online files and clearing the provider's disaster-recovery copies may not happen at the same time; you can ask us about the status of your deletion at the email address in this policy. We keep, on a restricted basis, the minimum transaction ownership and deletion records needed to prevent duplicate transaction claims, restore subscriptions and handle disputes; we do not keep pet content for re-registration. The Apple revocation credential needed for deletion is stored encrypted on the server temporarily and is cleared once revocation is complete.

6. Sharing

We do not share your data with third parties except:

7. Your choices and control

At any time, you can:

Deleting your account does not cancel your App Store subscription. To stop renewal, use Me → ExoPet Pro → Manage subscription, or your system subscription settings. Data you have exported, shared or saved on other offline devices cannot be erased remotely; please handle those copies on the relevant device or storage location.

8. Minors

ExoPet is not designed specifically for children. We do not knowingly collect personal information from minors through the app. If you believe a minor has given us information through a support channel that should not have been collected, please contact us.

9. Changes to this policy

If the way we process data changes, we will update this privacy policy before the related feature is released and, where applicable, update the App Privacy information in App Store Connect.

10. Contact us