Privacy policy
What PurrPlay collects, why it collects it, and how to get rid of it. Written to be read, not to be survived.
Last updated 4 August 2026
Who controls your data
The data controller for PurrPlay is Djasha Tech FZE, a Free Zone Establishment registered in the United Arab Emirates. Any request about your personal data — access, correction, export or deletion — goes to Djasha Tech FZE through thesupport page.
The short version
PurrPlay stores the cat profiles you create and the reactions you log, because the app is useless without them. It does not sell data, does not run third-party advertising trackers, and does not need your contacts, photos, or location.
What we collect
| Data | Why | Kept until |
|---|---|---|
| Email address | Account sign-in and account recovery | You delete your account |
| Cat profiles (name, age, personality traits) | To attribute reactions to the right cat | You delete the profile or the account |
| Reaction logs (sound, response, timestamp) | To generate the insights that are the point of the app | You delete the profile or the account |
| Favourites | Cloud sync across your devices | You remove them or delete the account |
| Purchase status | To unlock premium features you have paid for | Retained for as long as required for billing records |
| Waitlist email (this website) | To send one launch announcement | The announcement is sent, or you ask us to remove it |
What we do not collect
- Location data of any kind.
- Contacts, photos, or microphone input.
- Advertising identifiers, and no third-party ad SDKs.
- Any recording of your own cat unless you explicitly upload one.
Who processes your data
PurrPlay uses a small set of processors to run the service. Each one receives only what it needs:
- Supabase — database and authentication. Stores your account, cat profiles and reaction logs.
- RevenueCat — subscription and purchase state. Receives a pseudonymous user identifier and purchase events, not your reaction data.
- Resend — transactional email (sign-in links, account recovery). Receives your email address.
- Cloudflare — hosting and delivery for this website and the waitlist endpoint.
Children
PurrPlay is rated for all ages, but accounts are intended for adults. We do not knowingly collect personal data from children under 13. If you believe a child has created an account, contact us and we will remove it.
Your rights
You can access, correct, export or delete your data at any time fromSettings → Account in the app, or by emailing us. Account deletion removes your profiles, reactions and favourites. Deletion is permanent and takes effect within 30 days across backups.
If you are in the EEA or UK, you have the rights granted by the GDPR, including the right to lodge a complaint with your local supervisory authority. Djasha Tech FZE is the controller for that processing. Our legal basis is performance of a contract (running the app you signed up for) and, for the waitlist, consent. Because Djasha Tech FZE is registered in theUnited Arab Emirates, data you send us is processed outside the EEA; we rely on your consent and on the contractual necessity of running the service for that transfer.
Security
Data is protected by per-user row-level security, so one account cannot read another's records. Premium audio is served through short-lived signed URLs. All traffic is encrypted in transit.
Changes
If this policy changes in a way that materially affects you, we will say so in the app before the change takes effect — not by quietly editing this page.
Contact
Questions, deletion requests, or anything else:get in touch through the support page.