Privacy Policy
WooMe
Last updated: August 24, 2026 · Effective: August 24, 2026
WooMe is a private photo album for your pets. You build a profile for your cat or dog, keep photos there, and invite specific people to see specific parts of it. It is not a social network — nothing you upload is public, and there is no feed.
This policy explains exactly what we collect, where it lives, who can see it, and how long we keep it. We have tried to write it in plain language rather than legal boilerplate.
Who we are. WooMe is operated by Siyun Peng, an individual developer based in Los Angeles, California, USA. In this policy, "we" and "us" mean Siyun Peng.
How to reach us. support@woome.pet — we aim to respond within 24 hours.
1. What we collect
1.1 Your account
| What | Why | Where it lives |
|---|---|---|
| Email address | To create your account, sign you in, and send security notices | Supabase Auth |
| Password | To sign you in. Stored only as a salted hash — we never see or store your actual password | Supabase Auth |
| Display name | Shown to people you invite. Optional; defaults to the part of your email before the @ | profiles table |
| Profile photo | Optional. Shown to people you invite | Private storage bucket |
| Sign-in method | If you sign in with Apple or Google, we record which one | Supabase Auth |
If you sign in with Apple and choose Hide My Email, we receive only Apple's relay address. That works fine — we never need your real address.
1.2 Your pets
Everything in a pet profile is typed in by you: name, species (cat or dog), breed, gender, birthday, the date they joined your family, and a short description. We do not infer, enrich, or purchase any of this.
1.3 Your photos
What we store. When you add a photo, your device converts it to JPEG and resizes it (longest edge 1280 pixels), then creates a small preview (256 pixels). Both are uploaded. If you subscribe to WooMember, we additionally keep the original file so you can download it later at full quality.
What we read from the photo. Two things, both read on your device before anything is uploaded:
- The time the photo was taken, so your album can be organised by when moments happened rather than when you got around to uploading them.
- An approximate location — for a planned feature that shows where your memories happened. We deliberately round the coordinates to two decimal places before they ever leave your device. That is roughly a one‑kilometre square: enough to tell one city or neighbourhood from another, and not enough to identify a home, a street, or an address. The precise coordinates are discarded on your device and never reach our servers.
What we do not do. We never ask your device for your current location. We have no location permission and no location tracking. The only location information we ever see is the approximate value described above, taken from photos you chose to upload.
How photos are protected. Photos are kept in private storage. There is no public link to any photo. Every time a photo is displayed, the app requests a temporary signed link that expires after 24 hours.
What leaves WooMe when you share. An image you share or export out of the app is a compressed copy that carries no capture time and no location — that information stays in your account and does not travel with the picture. Your original files are returned only to you, through the export feature.
1.4 Who you share with
When you invite someone, we store the relationship: who they are, which pet they can see, which seat they hold (Family or Friend), and which permissions you have switched on for them. Invitation links expire after 7 days.
1.5 Problem reports
If you tap "Report the issue", we collect only what is needed to diagnose it: the screen you were on, the app URL, your browser/device identification string, the time, whether you were online, your screen size, and whatever you type in the description box. Nothing else is attached, and the description is limited to 500 characters.
1.6 What we never collect
- Your precise location, or your location at any time other than from a photo you uploaded
- Your contacts, or any access to your photo library beyond the specific photos you select
- Advertising identifiers, or any cross‑app or cross‑site tracking
- Payment card details — subscriptions are handled entirely by Apple, and we never see your card
We do not use third‑party analytics or advertising software in WooMe. If that ever changes, we will update this policy and Apple's privacy label before the change ships.
We do not sell your personal information, and we never have. We also do not share it for cross‑context behavioural advertising, as those terms are defined under California law.
2. Where your data lives
Your data is stored with Supabase, which hosts it on Amazon Web Services in Northern California, United States. Our website is hosted by Netlify.
This means that if you use WooMe from outside the United States, your data is transferred to and stored in the United States, which may have different data protection laws than your own country. By using WooMe you consent to that transfer.
These providers process data on our behalf and are contractually prohibited from using it for their own purposes.
3. Who can see your photos
This is the part most people care about, so here it is in full.
| Who | What they can see |
|---|---|
| You | Everything in your own pet profiles |
| Family seat | The Collection and the Gallery. You can switch either one off for any individual person |
| Friend seat | Only the Gallery — that is, only the photos you have actually placed in the display collage |
| Nobody else | Your full album ("Studio") is never visible to anyone but you |
Permissions are set per person, not per group — turning something off for one Family member does not affect the others. These rules are enforced at the database level, not just hidden in the interface.
You can change or revoke anyone's access at any time, and the change takes effect immediately.
We do not scan your photos. There is no automated content analysis of your private album, and no one at WooMe browses it. We act on reports and on actual knowledge — see Section 3 of the Terms of Service for exactly how.
Our access. We do not read your photos as a matter of course. However, we must be honest: our administrators hold credentials that can technically access stored data, and we may use them to investigate a fault, to respond to a report of abuse, or where we are legally required to. We do not use this access for any other purpose. We would rather tell you this plainly than promise something we cannot technically guarantee.
4. How long we keep things
| What | How long |
|---|---|
| Photos you delete | 30 days in "Recently Deleted", then permanently erased |
| Photos awaiting your review | 7 days, then automatically discarded |
| Invitation links | 7 days |
| Temporary photo links | 24 hours |
| Problem reports | 90 days |
| Everything, after you delete your account | 30 days, then permanently erased |
While your account is active, your pet profiles and photos are kept until you delete them.
5. Deleting your account
You can delete your account from inside the app: Settings → Account → Delete Account. You do not need to email us or ask permission.
When you confirm:
- You are signed out everywhere immediately, and people you invited lose access to your pets and photos straight away.
- For 30 days, signing in with your original email and password will offer to restore the account. This grace period exists to protect you — both from deleting by accident, and from someone who has gained access to your account deleting it maliciously.
- After 30 days, your data and files are permanently erased. This cannot be undone.
⚠️ Deleting your account does not cancel your subscription. Subscriptions are managed by Apple, and we cannot cancel or refund them on your behalf. To stop being charged, cancel separately in Settings → Apple Account → Subscriptions on your device.
6. Your rights
Wherever you live, you can:
- See what we hold about you
- Correct anything that is wrong — most of it is editable in the app
- Delete your account and everything in it, from inside the app
- Export a copy of your data
- Object to how we handle your data, or ask us to restrict it
- Complain to your local data protection authority
To exercise anything not available in the app, email support@woome.pet. We will respond within 30 days. We will not charge you, and we will not treat you differently for asking.
If you are in the European Economic Area or the United Kingdom, our legal basis for handling your data is the performance of our contract with you (providing the service you signed up for) and, for security and abuse prevention, our legitimate interests.
If you are in California, the rights above satisfy your rights to know, delete, correct, and opt out under the CCPA/CPRA. As stated above, we do not sell or share your personal information.
7. Security
Data is encrypted in transit and at rest. Photo storage is private, reachable only through short‑lived signed links. Access rules are enforced by the database itself, so a mistake in the app cannot expose photos to someone who should not see them.
No system is perfectly secure, and we will not pretend otherwise. If a breach affects your personal data, we will notify you and the relevant authorities as required by law.
8. Children
WooMe is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, email support@woome.pet and we will delete it.
9. Changes to this policy
If we make a material change, we will update the date at the top and notify you in the app or by email before it takes effect. Continuing to use WooMe after a change means you accept the updated policy.
10. Contact
support@woome.pet
Siyun Peng Los Angeles, California, USA
This policy is governed by the laws of the State of California, United States.