Privacy Policy
Effective Date: January 30, 2026
This Privacy Policy describes how Aifoxin Technologies LLC ("we," "us," or "our"), operating the PawAI Lab platform at www.aifoxin.com, collects, uses, and protects your personal information. By using PawAI Lab, you agree to the practices described in this policy.
1. Company Information
Legal Entity: Aifoxin Technologies LLC
Brand Name: PawAI Lab
Registered Address: 30 N Gould St, STE R, Sheridan, WY 82801, USA
State of Incorporation: Wyoming, USA
Support Email: support@pawailab.com
Data Protection Officer (DPO): support@pawailab.com
2. Information We Collect
We collect the following categories of personal information when you use PawAI Lab:
2.1 Account Registration Data
When you create an account, we collect your email address (via Google OAuth or email/password registration) and a system-generated user ID provided by our authentication provider, Supabase Auth.
2.2 Pet Profile Data
Information you voluntarily provide about your pets, including: pet name, species (dog, cat, parrot), breed, age, weight, gender, known allergens, medical conditions, and optional avatar images.
2.3 Health & Activity Data
Records generated through your use of our AI features, including stool analysis results, symptom check results, meal plans, food safety scan results, training recommendations, and AI-generated pet names. This data is stored in our activity logs database.
2.4 Payment & Billing Data
We collect your Stripe customer ID, subscription ID, subscription status, and billing period information. We do not store your credit card numbers or full payment card details — all payment card data is handled exclusively by Stripe, Inc.
2.5 Usage & Telemetry Data
We track internal usage metrics including feature usage counts, AI photo scan quota used and remaining, and AI token consumption. This data is stored in our own database and is not shared with third-party analytics providers.
2.6 User-Uploaded Images
Pet photos you upload for AI analysis (e.g., Stool Analyzer, Food Safety Scanner). These images are transmitted to Google's Gemini AI API for processing. Images are processed ephemerally and are not permanently stored on our servers after analysis is complete.
2.7 Device & Technical Data
Session data managed through Supabase Auth cookies. IP addresses may appear in server-side request logs but are not stored in our application database.
2.8 Cookies & Tracking Technologies
We use essential cookies only — specifically, Supabase authentication session cookies required for you to remain logged in. We do not use third-party analytics cookies, advertising cookies, or any tracking technologies beyond what is strictly necessary for authentication.
2.9 Third-Party Login Data
If you sign in using Google OAuth, we receive your email address and basic profile information from Google. We do not receive or store your Google password.
3. How We Use Your Information
We use the information we collect for the following purposes:
- Providing AI-Powered Pet Health Features: To operate and deliver the core functionality of PawAI Lab, including all AI analysis tools.
- Processing Payments & Managing Subscriptions: To handle billing, subscription upgrades, downgrades, and cancellations via Stripe.
- Sending Transactional Emails: To send account-related communications such as registration confirmations, password resets, and billing notifications via our email service provider, Resend.
- Product Analytics & Improvement: To understand how features are used and improve the service. We use only internal database tracking — no third-party analytics tools.
- Fraud Prevention & Security: To detect and prevent unauthorized access, abuse of our credit system, and other fraudulent activity.
- Legal Compliance: To comply with applicable laws, regulations, and legal processes.
We do not send marketing or promotional emails. We do not use your data for advertising purposes.
4. How We Share Your Information
We do not sell, rent, or share your personal information with third parties for advertising or marketing purposes. We share data only with the following service providers who process it on our behalf:
| Third Party | Category | Data Shared |
|---|---|---|
| Supabase | Database & Authentication | All user and pet data, authentication tokens |
| Stripe, Inc. | Payment Processing | Email address, subscription data; card data stays with Stripe |
| Google (Gemini API) | AI Processing | Prompt text and pet images submitted for AI analysis |
| Vercel | Hosting & Infrastructure | Server request logs and technical data |
| Resend | Transactional Email | Email addresses for account and billing notifications |
We may also disclose your information if required by law, court order, or governmental authority, or to protect the rights, property, or safety of Aifoxin Technologies LLC, our users, or the public.
5. Data Retention
We retain your data for the following periods:
- Account Data: Retained for the lifetime of your account, plus 30 days following account deletion to allow for recovery requests.
- Pet Health & Activity Logs: Retained for the lifetime of your account.
- Payment Records: Retained for 7 years in compliance with financial recordkeeping requirements.
- Deleted Account Data: Purged within 30 days of a verified deletion request, except where retention is required by law.
- Database Backups: Retained for up to 90 days before being permanently deleted.
6. Your Rights & Controls
Depending on your location, you may have the following rights regarding your personal data:
6.1 Right to Access
You may request a copy of the personal data we hold about you by emailing support@pawailab.com.
6.2 Right to Deletion
You may request deletion of your account and associated personal data by emailing support@pawailab.com. We will process your request within 30 days, subject to legal retention obligations.
6.3 Right to Correction
You may correct inaccurate personal data directly through your dashboard by editing your account profile and pet profiles.
6.4 Right to Data Portability
You may request an export of your personal data in JSON format by emailing support@pawailab.com.
6.5 CCPA Rights (California Residents)
California residents have the right to know what personal information is collected, the right to delete personal information, and the right to opt out of the sale of personal information. PawAI Lab does not sell or share personal information with third parties for advertising or commercial purposes. To exercise your CCPA rights, contact us at support@pawailab.com.
6.6 GDPR Rights (EU/UK Residents)
If you are located in the European Union or United Kingdom, you have rights under the GDPR and UK GDPR, including the right to access, rectification, erasure, restriction of processing, data portability, and the right to object to processing. You also have the right to lodge a complaint with your local supervisory authority. Our Data Protection Officer can be reached at support@pawailab.com.
Lawful Basis for Processing: We process your data on the basis of (a) contract performance — to provide the services you have requested; (b) legitimate interests — for fraud prevention and service improvement; and (c) legal obligation — where required by applicable law.
7. International Data Transfers
Your data may be processed in countries outside your country of residence, including the United States. Specifically, Supabase and Google (Gemini API) may process data in multiple geographic regions.
For transfers of personal data from the European Economic Area (EEA) or United Kingdom to the United States, we rely on Standard Contractual Clauses (SCCs) as provided through our agreements with Supabase and Google Cloud Platform, which comply with applicable EU and UK data transfer requirements.
8. Data Security
We implement industry-standard technical and organizational measures to protect your personal information, including:
- Row-Level Security (RLS): Our database enforces row-level security policies through Supabase, ensuring that each user can only access their own data.
- Encrypted Connections: All data transmitted between your browser and our servers is encrypted using TLS/HTTPS.
- Authentication Security: We use Supabase Auth for secure session management. Passwords are hashed and never stored in plain text.
- Payment Security: Payment card data is handled exclusively by Stripe, which is PCI DSS Level 1 certified.
While we take reasonable precautions, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.
9. Children's Privacy
PawAI Lab is intended for users who are 18 years of age or older. We do not knowingly collect personal information from children under 13 (or under 16 in the EU). If you believe we have inadvertently collected information from a minor, please contact us immediately at support@pawailab.com and we will promptly delete such information.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. For material changes, we will notify you by email to your registered email address at least 30 days before the changes take effect. The updated policy will also be posted on this page with a revised effective date. Your continued use of PawAI Lab after the effective date constitutes your acceptance of the updated policy.
11. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Aifoxin Technologies LLC
Attn: Privacy / Data Protection Officer
30 N Gould St, STE R, Sheridan, WY 82801, USA