Privacy Policy

Last Updated: October 10, 2026

Welcome to Dog to Human! This Privacy Policy explains how we handle the information you provide when using our iOS application ("App"). Your privacy is important to us.

Information We Process

When you request a transformation, we process the photo you select, your selected transformation options, and the generated image and biography. Photos can contain people or other personal information. Upload only photos you have permission to use.

We also process an anonymous RevenueCat customer identifier to verify subscription access, Apple App Attest verification records to help prevent unauthorized use, and temporary request and job identifiers to recover interrupted generations. Network services receive your IP address, which our backend uses for short-lived abuse prevention. You do not need to create a Dog to Human account.

How Transformations Work

  1. Secure upload: The app resizes your selected photo and sends it over HTTPS to our backend hosted by Render.
  2. Access verification: Our backend verifies the app installation with Apple App Attest and checks your subscription through RevenueCat.
  3. Image generation: The backend sends the photo and selected options to OpenAI to create the transformation.
  4. Biography generation: The generated image is sent to OpenAI to create a fictional character biography.
  5. Recovery: The app can retrieve the result for up to one hour from the time the job was accepted, including after a temporary connection loss.

We use this information to provide transformations, verify paid access, recover interrupted requests, and protect the service from abuse.

Storage and Retention

Photos and generated biographies are encrypted while temporarily stored in our backend database. The input photo is removed from active storage once its generated image has been saved. Access to remaining photo and biography data expires one hour after job creation; cleanup runs every 30 seconds while the service is running and when it starts. Cancelling a job removes its photo and biography payloads from active storage.

Limited records without photos or biographies are retained for up to 24 hours to prevent duplicate paid processing when requests are retried. App verification keys, anonymous customer bindings, and anti-replay counters remain while needed to recognize the installation and secure future requests. Short-lived challenges and abuse-limit records are cleaned up automatically.

Encrypted photo and biography payloads may remain in database backups and hosting disk snapshots beyond the one-hour access window. Our backend retains a latest daily database backup, and Render disk snapshots are retained for at least seven days and may include older backup data. Expired jobs remain inaccessible through the app, and our recovery procedure clears restored temporary jobs. We do not promise deletion from all backup copies within one hour.

The app keeps protected local recovery information while a job is pending. Results you choose to save to Photos or share are controlled by you and the services you share them with. OpenAI, Apple, RevenueCat, and Render may retain data under their own service policies.

Service Providers

Render hosts our backend and database. OpenAI processes the input and generated images and creates the biography. RevenueCat verifies purchase and subscription information; Apple processes App Store purchases. Apple App Attest helps verify that requests come from a legitimate app installation.

For details about provider practices, see Render's privacy policy, OpenAI's privacy policy, RevenueCat's privacy policy, and Apple's privacy policy.

Data Security

We use HTTPS, server-side secret storage, encrypted temporary payloads, subscription verification, and request verification to protect the service. Application logs exclude photos, biographies, API keys, and attestation payloads. No system can guarantee absolute security.

Children's Privacy

Our App is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will take steps to delete such information.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

Contact Us

If you have any questions about this Privacy Policy, please contact us.