Privacy Policy

1. The Short Version

Confirm Concept LLC operates Generative Cats™ at generativecats.app. Our posture, stated plainly so you can hold us to it: we record as little as necessary for the platform to function.

• We know your email address. That is the only thing we know about you as a person.
• We set no cookies — the one exception is Google's anti-bot script, which sets its own under Google's domains. That is why there is no consent banner.
• We store no passwords — Google handles sign-in.
• We never see your payment details.
• Your prompts reach AI providers without your identity attached.
• We do not sell, rent, or trade any of it.

2. What Connects You to Your Account

For a member who has never paid, there is exactly one thread between you-the-person and you-the-star: your email address, stored on your account record and held by Firebase Authentication so you can sign back in.

If you buy a plan or a pack, there is a second. Polar, our Merchant of Record, keeps your purchase with the email you paid with and your account's internal ID, and we keep Polar's identifiers on your account and in our billing records (section 7). That link exists for payments, refunds and tax. Other members never see it: stars are anonymous to everyone else either way.

Everything else about you on this platform is generated, not given. Your star name is derived from what you create. Your bio is written by a model from your creations. Your profile picture is a crop of one of your own cats — the platform never accepts an uploaded photo, so there is no path by which your face could end up here. Nothing you make carries your name, because we do not have your name.

That design is what makes deletion meaningful: cut the thread and the connection is gone for good, including for us. The one exception is the billing record of anything you bought, which is kept for payments, refunds and tax (section 10). See Your Data & Deletion.

3. What We Record, and Why

Account

You sign in with Google. Google performs the authentication and we receive only your email address — we do not read or store the display name or profile photo Google offers. We create or store no passwords. We do not ask for your real name, phone number, postal address, date of birth, or any government identifier, and there is nowhere in the product to supply them.

Creations

We store the prompts you submit and everything generated from them: images, names, traits, and lore. This content is public within the platform and permanent — see the Terms, sections 7 and 8. It is attributed to your star, which is not your name.

Activity

Counts we need in order to run the mechanics: generations used, reactions given and received, research, connections, streaks, and subscription state. These enforce quotas and drive the prestige system. They are counters on your account record, not a behavioral profile.

Support submissions

If you send feedback, we store what you wrote, the category you chose, the page you were on, your browser's user-agent string and window size (so we can reproduce bugs), your account ID, and — only if you choose to supply it — a reply-to email address. Submissions are passed through OpenAI to classify sentiment, theme, and priority, and to draft the acknowledgment you see. Do not put personal information in a support message either.

Waitlist

If you joined our waitlist before launch, we still hold your email address plus how you arrived — the signup source, the referring URL, and any UTM parameters on the link you followed. The waitlist is closed: nobody new is added to it. We keep an entry until you ask us to delete it, or until you delete your account, which removes it with everything else. To have it deleted, write to privacy@generativecats.app. Every email we sent from that list carries an unsubscribe link, which stops any further email from it.

Free-spot notices

Free accounts are limited (see the Terms, section 11). If free spots are full when you sign in and you ask us to email you when one opens, we keep your email address, your account ID, when you asked, and whether we have emailed you yet. We use it for that one email and nothing else. You can take your address off the list on the same screen, or with the remove link in the email. We delete the request when you get an account, 30 days after we email you, or 180 days after you asked if no spot opened, whichever comes first.

4. IP Addresses

We process your IP address for one purpose: rate limiting, so a script cannot flood signups or the generation queue. It is stored in a rate-limit counter, it is never attached to your account or your creations, and a scheduled job deletes those records within 48 hours. We do not use IP addresses for analytics, profiling, or geolocation targeting.

5. Prompts and AI Providers

Images are generated by OpenAI's gpt-image-2, with Google's Gemini 3.1 image models on Vertex AI as a standby fallback. Text — names, traits, lore, bios — is generated by OpenAI's gpt-5.4-mini.

Providers never learn who you are. A request to OpenAI carries the model, the prompt, the image size, and the quality setting — nothing else. Vertex AI requests are authenticated as our service account, so Google sees the platform, not the person. There is no user ID, email, or session identifier in either call.

Your prompt text is sent to the provider exactly as you type it, so do not include personal information in a prompt. Once it arrives, retention is governed by that provider's API terms rather than by us. OpenAI states that data submitted through its API is not used to train its models by default.

6. Analytics and Error Monitoring

Analytics. We use PostHog to see which pages and features get used. It is configured to store nothing on your device — no cookie, no local storage — so there is no cross-visit identifier following you around. It honors your browser's Do Not Track setting: if you have DNT on, PostHog captures nothing. PostHog's session recording is disabled outright. PostHog is the only product analytics tool on the platform — there is no Google Analytics, no advertising pixel, and nothing that follows you across other sites.

Errors and performance. Datadog monitors every visit so we can see when something breaks or slows down, and whether one person hit a bug or a thousand did. It receives the pages you view, what you click, how long things take to load, your browser and device, an approximate location derived from your IP address, any errors, and your account ID if you are signed in — never your email address. It also keeps a replay of what the page displayed during your visit, so we can reproduce a bug; everything you type into a field is masked in your browser before the replay leaves it, but text the page itself shows is recorded. Datadog does not act on Do Not Track: it is how we find out the site is broken. Like PostHog, it stores nothing on your device, and its session ends when you close the tab.

Details of what is and is not stored on your device are on the Cookies & Local Storage page.

7. Payments

Polar.sh is our Merchant of Record. Polar holds all payment data, runs the checkout, handles tax and invoicing, and processes refunds. Card numbers, billing addresses, and tax identifiers never reach our systems. What we store on your account is two opaque identifiers — a Polar customer ID and a Polar subscription ID — which let us tell whether your subscription is active. We also keep a billing record of each purchase and refund: Polar's order, refund and subscription IDs, the amount, and the creations it added or took back. Manage or cancel through Polar's billing portal at any time.

8. Who Else Touches Your Data

The complete list. Each operates under its own privacy policy, and none of them receive data for advertising purposes.

We do not sell, rent, or trade personal data, and we do not share it with anyone outside this table except where the law requires it.

9. Where Your Data Lives

Your data is stored on Google Cloud infrastructure in the United States and transmitted over HTTPS. Firestore security rules restrict access, and every sensitive write goes through server-side code rather than the browser. Because we use Google sign-in exclusively, there are no passwords on our side to lose.

If you are outside the United States, using the Service transfers your data to the United States. Where that transfer is from the UK, the EEA, or Switzerland, it is made under the European Commission's Standard Contractual Clauses as incorporated into our processors' data-processing terms.

10. Retention and Deletion

Account data is retained while your account exists. Rate-limit records holding IP addresses are deleted within 48 hours. A request to be emailed when a free spot opens is deleted when you get an account, 30 days after we email you, or 180 days after you made it (section 3). Billing records (section 7) are kept after an account is deleted, because they are financial records we need for accounting, tax and payment disputes. What is kept: Polar order, refund and subscription IDs, amounts, dates, and the creations each purchase added or took back, stored under your account's internal ID. No name or email is kept with them. Polar, as Merchant of Record, keeps its own record of the purchase under its privacy policy, including the email you paid with and your account's internal ID. Creations are permanent by design and are removed only when the law requires it — the single carve-out described in Terms section 8.

You can ask us to delete your account at any time by writing to privacy@generativecats.app. Deleting your account ends any subscription immediately — billing stops at the same moment, and if it cannot be ended the deletion does not go ahead until it can. Deletion is permanent: your creations remain in the cosmos forever, unattributed, and if you return you begin as a new star. We fulfil deletion and access requests within 30 days. The full account of what is erased, what survives, and what it means that we cannot reverse it is on Your Data & Deletion.

11. Your Rights

You can ask for a copy of your data, ask us to correct it, ask us to delete it, or ask for it in a portable format — and, depending on where you live, object to or restrict certain processing. Write to privacy@generativecats.app; we respond within 30 days. How to exercise each right.

12. Children

Generative Cats is not directed at children under 13 and we do not knowingly collect information from them. If you believe a child under 13 has an account, write to privacy@generativecats.app and we will delete it.

13. Changes to This Policy

We update this page whenever what we record changes, and the “Last updated” date at the top moves with it. Continued use after a change constitutes acceptance.

14. Contact

Privacy questions and data requests: privacy@generativecats.app. Everything else starts at the support hub.

Generative Cats™
A product of Confirm Concept LLC