Privacy Policy
Effective: 2026-05-09 · Last updated: 2026-05-09
PuppyChat ("the Platform", "we", "us") is operated by SmartRich Inc. (provisional; subject to legal entity confirmation). This policy explains how we collect, use, retain, and share your personal data, and the rights you have over it.
By using the Platform you consent to this policy. If you do not agree, please stop using the Platform.
Note: The Traditional Chinese (zh-TW) version is the legal canonical. In case of conflict the zh-TW version prevails.
1. Scope
- iOS App (App Store)
- Android App (Google Play)
- Website
puppychat.smartrich.ai(may migrate topuppychat.app)
2. Data We Collect
| Category | Items | Purpose | Required |
|---|---|---|---|
| Account ID | OAuth user_id, display_name | Account creation | Yes |
| Contact | Phone, email | Verification, security alerts | Lv1 cert+ |
| Personalization | Role, voice / chat prefs | Recommendation | Optional |
| Communication | Chat messages, call duration | Service delivery | Yes |
| Cert (male only) | Lv2 voice sample, Lv3 ID + selfie | Trust + anti-fraud | Cert stages |
| Payment | Apple/Google IAP transaction_id | Coin credit | At purchase |
| Withdrawal (male) | BEP-20 USDT address | Diamond payout | At withdrawal |
| Device / Tech | Device, IP, push token | Security, push | Auto |
We do not collect: Credit card / bank numbers (handled by Apple/Google IAP); precise location; mic / camera (unless you upload); contacts.
3. Third-Party Services
- Apple Sign In · Google Sign In · Telegram Login (auth)
- Firebase Cloud Messaging (FCM) + APNS (push)
- Google AdMob (reward ads, female users only)
- Agora RTC (voice / video calls)
- Cloudflare (CDN + backend infrastructure)
- Apple App Store Server API + Google Play Developer API (IAP receipt verification)
4. Retention
- Account data: Account lifetime. Account deletion → all PII purged within 24 h
- KYC certification: 90 days post-approval (R2 lifecycle), instant on account deletion
- Communication: Counter-party deletion → "user deleted" placeholder; messages retained 90d for moderation
- Payment records: 7 years per tax law
5. Your Rights
| Right | How to exercise |
|---|---|
| Access your data | In-app "My Data" / email support |
| Correct inaccurate data | In-app "Profile Settings" |
| Erasure (right to be forgotten) | In-app "Delete Account" → handled within 24 h |
| Withdraw consent | Delete account or stop using |
| Data portability | Email support (JSON delivered within 30 days) |
6. Minors
This Platform is for users 18+ only (13+ in regions allowing, with guardian consent).
7. Security
- TLS 1.3 end-to-end transport encryption
- D1 database encryption at rest
- Lv3 KYC documents in private R2 bucket; signed URLs expire in 5 minutes
- Login anomaly detection: new device / new country triggers step-up OTP
8. Contact
| Privacy / data rights | [email protected] |
| General support | [email protected] |
Legal basis: Taiwan Personal Data Protection Act, EU GDPR, US California CCPA, Apple App Store Review Guidelines 5.1, Google Play Developer Policy.
Full version (incl. cross-border transfers / cookies / policy changes): see docs/legal/privacy-en.md. 繁體中文: 繁體中文版.