Usmori Privacy Notice

Pet profiles, everyday photos, videos, voice recordings and health notes are stored in the app on your device. They are not automatically uploaded as a cloud photo library. Deleting the app may remove records that have not been backed up. Original exports and full backups may include original file metadata. Unfinished drafts are not included in saved library backups.

If you choose Sign in with Apple, Apple and Supabase process the identity information needed to authenticate you, including your Apple user identifier and the email address or Hide My Email relay address Apple supplies. Our backend records verified purchase identifiers, Pro entitlement, generation credits and job status. Netlify hosts our server functions. The dedicated Supabase database is in the US East region.

Only the reference photo you actively select and consent to use is uploaded for illustration generation. We re-encode the upload copy to remove image metadata, but people, names or other information visible in the photo may remain; crop these out before uploading. The selected photo and fixed generation instructions are sent through our backend to APINebula and its upstream image service. Your everyday photo library, recordings, videos and health notes are not included in this request.

Our reference and result files use private storage. The service attempts to remove reference copies after a completed or confirmed failed task; cleanup retries and unresolved task expiry run on a scheduled basis, with a 24 hour unresolved task threshold. This is not a guarantee of deletion at an exact time if the service is unavailable. Generated results are retained for retrieval until you delete the cloud account. APINebula and its upstream service have their own processing and retention practices; deleting the Usmori account does not itself delete records held by those providers.

Use Me → Delete cloud account to request deletion. The implemented flow revokes the saved Apple authorization, closes the account, removes its cloud image files and authentication user, and clears our saved encrypted Apple refresh credential. Local originals remain on your device. We retain minimal purchase and credit records and a server-keyed Apple identity digest so the same purchase can be restored without granting credits repeatedly. These minimal records do not currently have an automatic expiry after account deletion. Contact us about privacy requests or any deletion that did not complete. Deleting an account does not automatically refund purchases.

Photo memory pages are created locally from saved photos and notes. The export re-encodes photos without original image metadata; you choose whether names and dates appear. Visible photos and notes can still contain private information. Files you share outside Usmori cannot be remotely recalled by us.

Usmori does not integrate advertising or cross-app tracking SDKs. Apple, Supabase, Netlify and the image services may process network, account or operational data under their own policies. We do not represent that this app collects no data or that all processing occurs only on your device.

Local recording does not require an account. You control selected photo uploads, optional display of names and dates in exports, device camera and microphone permissions, local record deletion, backups and cloud account deletion. For questions or requests, email 15564412316@163.com.