Privacy policy
What PurrPlay collects, why it collects it, and how to get rid of it. Written to be read, not to be survived.
Last updated 10 August 2026
Who controls your data
The data controller for PurrPlay is Djasha Tech FZE, a Free Zone Establishment registered in the United Arab Emirates. Any request about your personal data (access, correction, export or deletion) goes to Djasha Tech FZE through thesupport page.
The short version
PurrPlay stores the cat profiles you create and the reactions you log, because the app is useless without them. It does not sell data, does not run third-party advertising trackers, and does not need your contacts or location. It accesses a photo only when you choose one for a cat profile.
What we collect
| Data | Why | Kept until |
|---|---|---|
| Email address | Account sign-in and account recovery | You delete your account |
| Deletion safety marker (internal account ID and expiry time only) | To stop already in-flight requests from recreating deleted data | Expires within 24 hours, then routine cleanup removes it |
| Cat profiles (name, age, personality traits) | To attribute reactions to the right cat | You delete the profile or the account |
| Optional cat profile photo | To display the photo on the cat profile you create | You remove the photo, profile, or account |
| Optional Meow Log recording | Stored and analysed on your device; current source does not upload it | You delete the recording, sign out, delete the account, or remove the app |
| Reaction logs (sound, response, timestamp) | To generate the insights that are the point of the app | You delete the profile or the account |
| Favourites | Cloud sync across your devices | You remove them or delete the account |
| Purchase status | To unlock premium features you have paid for | Retained for as long as required for billing records |
| Support report (category, message, optional steps and reply email) | To investigate and reply to a report you choose to submit | While needed to resolve and document the request, or until you ask us to remove it |
| Optional support diagnostics (platform, app/build/update version and OS version) | To reproduce a problem; these fields are sent only after you opt in on the report form | With the related support ticket |
| Waitlist email (this website) | To send one launch announcement | The announcement is sent, or you ask us to remove it |
What we do not collect
- Location data of any kind.
- Contacts.
- Meow Log recordings from your device; current source does not upload them.
- Photos you do not explicitly select for a cat profile.
- Advertising identifiers, and no third-party ad SDKs.
- Support diagnostics unless you explicitly turn on the diagnostic option for that report.
- Any recording of your own cat unless you explicitly upload one.
Who processes your data
PurrPlay uses a small set of processors to run the service. Each one receives only what it needs:
- Supabase: database and authentication. Stores your account, cat profiles and reaction logs.
- RevenueCat: subscription and purchase state. Receives a pseudonymous user identifier and purchase events, not your reaction data.
- Expo: signed app builds and over-the-air updates. Receives the limited technical information needed to deliver a compatible update, not cat profiles or reaction logs.
- Resend: transactional email and support-ticket notifications. Receives an email address and message only when needed for the email you requested or submitted.
- Sentry: crash and performance diagnostics when enabled in a release build. PurrPlay does not deliberately attach an account identity to Sentry events.
- OpenRouter: AI-generated cat insights. When you request an AI insight, it receives the cat name, profile traits and preferences, plus a summary of reaction patterns. It does not receive your email, photos, recordings, or raw account credentials.
- Cloudflare: hosting and delivery for this website, the waitlist endpoint, and aggregate website performance analytics. Its Web Analytics service is configured without advertising identifiers and does not track people across sites.
Children
PurrPlay accounts are intended for adults. We do not knowingly collect personal data from children under 13. If you believe a child has created an account, contact us and we will remove it.
Your rights
You can access, correct, export or delete your data at any time fromSettings → Account in the app, or by using theaccount-deletion request page. Account deletion removes account-owned profiles, reactions, favourites, and uploaded profile photos, including authenticated support reports. For an account deleted in the app, the limited deletion safety marker described above remains active for no more than 24 hours. For an anonymous support report, contact us with the ticket ID and any reply email you supplied. Store purchase records may be retained by Apple, Google, or RevenueCat under their own legal obligations.
If you are in the EEA or UK, you have the rights granted by the GDPR, including the right to lodge a complaint with your local supervisory authority. Djasha Tech FZE is the controller for that processing. Our legal basis is performance of a contract (running the app you signed up for) and, for the waitlist, consent. Because Djasha Tech FZE is registered in theUnited Arab Emirates, data you send us is processed outside the EEA; we rely on your consent and on the contractual necessity of running the service for that transfer.
Security
Data is protected by per-user row-level security, so one account cannot read another's records. Premium audio is served through short-lived signed URLs. All traffic is encrypted in transit.
Changes
If this policy changes in a way that materially affects you, we will say so in the app before the change takes effect, not by quietly editing this page.
Contact
Questions, deletion requests, or anything else:get in touch through the support page.