Privacy Policy

Effective 19 October 2026 · Version 1.5

The short version

The game never asks for personal details: no name, e-mail, phone number or location.
Almost everything stays on your device: your pets, your progress, your in-game photos and your recorded commands.
Only if you choose to link another device (for example a phone and a tablet) is a copy of your saved game kept on our server, so both devices raise the same pets. No personal details are needed, and you can delete the copy at any time.
Only if you choose to use “Friends” do we store an anonymous account and your pets' cards (pet name, breed and look) on our server, so that friends you approved can see your pets at the park.
No ads, no tracking, and we never sell data. The device's advertising identifier is not used.
Payments go through Apple or Google only. Your payment details never reach us.
You can delete everything: your Friends data and the cloud save from inside the game at any time, and all the rest by deleting the app.

1.Who we are

TruePets (the “Game”) is a virtual pet game operated by Doron Cohen (“we”, “us”). We are responsible for the information described in this policy (the database owner under Israeli law, and the “controller” under European data protection law).

“You” means the person using the Game. Where the user is a child, this policy also speaks to their parent or guardian.

2.What this policy covers

This policy covers the TruePets app for iPhone, iPad and Android devices, the browser versions of the Game and its information pages. It explains what information is processed, why, where it is kept, for how long, and which rights you have. It forms part of our Terms of Use.

3.Our principles

As little as possible: the Game is designed to be fully playable without giving any identifying detail.
Device first: whatever can be kept on your device is kept only there.
Your choice: features that need a server, such as “Friends” and linking another device, start only when you choose them, and you can delete their data at any time.
No ads, no tracking: the Game contains no advertising, no analytics and no third-party tracking code.

4.Information kept only on your device

The following is created as you play and stored only in your device's local storage. It is not sent to us and we have no access to it, unless you choose to link another device: then a copy of your saved game is also kept on the server (section 5).

Your saved game: the pets you adopted (name, breed, coat, age, personality), their needs, training progress, your inventory and purchased items, settings and journal.
In-game photos: pictures taken in photo mode are kept in the album inside the Game. They are not added to your device's photo library unless you choose to save or share them (see section 8).
Voice commands: when you record a command (for example “sit”), the Game keeps numeric sound features, not the recording itself, used only to recognise the command when you say it again. They do not identify you and never leave the device.
Technical settings: for example the graphics quality that suits your device.
A local copy of your friends list (if you use “Friends”), so that the page opens quickly even offline.

Deleting the app deletes all of this information (a cloud save, if you have one, stays until you delete it; see section 18). Depending on your device's backup settings, your saved game may be included in your iCloud or Google device backup, which is under your and Apple's or Google's control, not ours. On Android, the in-game album and the voice commands you recorded are not included in Google's cloud backup.

5.Cloud save and linked devices

“Another device” (Settings → Another device) is an optional feature that lets you raise the same pets on several devices, for example a phone and a tablet, and carry them on to a new device. Until you ask for a code or type one in, none of this information is sent to the server.

When you ask for a code, an anonymous account is created (no name, e-mail or password) and a copy of your saved game is stored on the server. A device that enters the code joins, and from then on the devices take turns playing the same save: what happens on one is updated on the server and reaches the other. The server keeps:

What	Details	Who can see it
Saved game	The whole save, as it is on the device: your pets (name, breed, coat, age, personality), their needs, their bond with you and their health, the tricks they learned, your inventory, purchased items and a record of each purchase (a scrambled form of the transaction identifier and when it was delivered), the journal (which may include the names of pets of friends you approved), when you cared for and played with your pets (for example when you fed them, played or went to the park), and the settings (language, parental controls and the state of the grown-up check).	Only the linked devices
List of devices	For each device: a random identifier, the kind of device only (for example “iPhone” or “iPad”, with no model, serial number or hardware identifier), when it joined and last played, and which device is playing now.	Only the linked devices
Link code	8 digits, valid for 10 minutes and for one use only.	Whoever you show it to
Code attempts	To prevent code guessing; kept for about an hour.	No other user

What is not sent to the server: album photos, the voice commands you recorded, and the graphics quality. They stay on each device separately. Sound and camera settings go up with the save, but each device keeps using its own.

If you also use “Friends”, your friends belong to all the linked devices: the same friend code and the same friends on each. A device that joins while it has pets of its own is warned first, because its pets will be replaced by the pets from the other device. A device that joins a home with no friends yet brings its own friends, and they become the friends of all the linked devices. When the device where Friends was first used unlinks itself, or is unlinked by a device that has been linked for more than two weeks (for example, a lost phone), the friends and the friend code pass to the next linked device, and Friends starts afresh on the device that was unlinked. If either of the two devices joined in the last two weeks, the friends and the friend code stay on the unlinked device, so that someone who saw the code cannot take them (unless the unlinked device has not been opened for 30 days). If the unlinked device then goes unused for 30 days (for example, a lost phone), the friends come back to the linked devices automatically.

There is no account with a password or e-mail, so the save cannot be recovered if every linked device is lost. Another linked device also serves as a backup.

6.Information on our server: “Friends”

“Friends” is an optional feature. It lets friends you approve see your pets at the dog park, send canned reactions and visit. Until you open the Friends page, nothing is sent to our server.

When you first open it, an anonymous account is created and the following is stored on the server:

What	Details	Who can see it
Account identifier	A random identifier created automatically. It is not linked to your name, phone number, e-mail or Apple/Google account.	Friends you approved (their game uses it to send you reactions and to meet at the park). It is not shown on screen.
Friend code	An 8-digit number used to add friends. You can replace it at any time (“New code”).	Whoever you show it to
Pet cards	For each pet: the name you gave it (up to 12 characters), species, breed, coat, in-game birth date, personality traits, the clothes it wears and the toys it takes to the park.	Friends you approved, and anyone you sent a friend request to (so they know who it's from), until they answer
Friendships and blocks	Who asked whom, who accepted, and who was blocked. With a block we also keep the names of the blocked player's pets, so you can see whom you blocked and undo it.	Both sides (a block is seen only by the blocker)
Reactions and visits	A reaction from a fixed list (❤️ ⭐ 🎾 🦴 🐾 🐶) and a note that “your pet visited a friend's park”.	The recipient. Deleted from the server as soon as their game reads it.
At the park now	A marker that you are currently at the park in the Game, so a friend can offer to join.	Friends you approved
Technical times	When the account was created and last active, and friend-code attempts (to prevent code guessing; kept for about an hour).	No other user

If you linked another device (section 5), the account and friends are shared by all the linked devices.

There is no free chat, no user search and no personal profile. Players recognise each other only by their pets' names and breed pictures. Please do not put personal details, such as a full name or phone number, in a pet's name.

As with any online service, the server also receives your device's IP address and basic technical data when it connects, kept briefly in our infrastructure provider's server logs for security and operations. In addition, our infrastructure provider's sign-in system keeps, for each sign-in of the anonymous account, the IP address and the type of browser or device, for as long as the account exists. We do not use the IP address to identify you or to locate you.

7.Meeting live at the park

If you and a friend you approved are at the park at the same time and both agree, you can meet live. During a meeting the two devices exchange your pets' positions and movements, animations and sounds, toy actions and touches on each other's pets.

Direct connection: for a smooth meeting the devices try to connect to each other directly (WebRTC). Each device then receives the other device's IP address. To find a direct route, the devices briefly contact public STUN servers run by Google and Cloudflare, which receive the IP address only. Data sent over the direct connection is encrypted.
Through our server: if a direct connection is not possible, the meeting runs over a private channel on our server that only the two participants can use. Messages are not kept after delivery.
On an iPhone, when both devices are on the same Wi-Fi network, the device may ask for “Local Network” permission. It is used only for this direct connection.
A meeting carries no voice, video or free text, and is not recorded.

8.Device permissions

All permissions are optional. The Game asks for them only when you use a feature that needs them, and you can withdraw them at any time in your device settings. The Game keeps working without them.

Permission	Why	What happens to the information
Microphone	Voice commands, whistling and calling your pet.	Sound is processed in real time on the device only. It is not recorded, stored as audio or sent. Only the numeric features of commands you recorded are kept (section 4).
Camera	Scanning a friend's QR code, or the code of a device you are linking to.	The image is processed on the device only to read the code. It is not stored or sent.
Sharing / saving photos	When you choose to share or save a picture from the album.	The picture goes only to the destination you pick in your device's share sheet.
Local network (iPhone)	A direct connection to a friend on the same Wi-Fi during a live meeting (section 7).	Used only to connect with your friend's device.
Vibration	In the web version only, on phones that allow it: a short buzz, for example in tug-of-war or when you pick up your pet. The app does not vibrate.	No information involved and no permission needed.
Phone calls (iPhone)	So the Game's sounds pause during a call and come back after it.	The app only notices that a call started or ended. It does not know who called, cannot hear the call, and stores or sends nothing. No permission is needed.

9.Purchases

The Game is free. Digital items (treats, toys, clothes, the pet hotel and more) can be bought only through the App Store or Google Play in-app purchase systems. Billing, payment methods and receipts are handled by Apple or Google under their privacy policies. Your card and account payment details never reach us.

From the store we receive only what is needed to deliver the item and restore purchases: confirmation of the product bought, a transaction identifier and its date. The check is made on your device; purchase details are not sent to our server. If we ever verify purchases through our server, we will update this policy first.

So that no purchase is delivered twice or lost, the Game keeps a record of each purchase delivered: a scrambled form of the transaction identifier (not the identifier itself) and when it was delivered. The record is part of the saved game, so it also goes up with the cloud save if you linked another device (section 5). The device itself also keeps a purchase log for up to 60 days.

In Settings → Parents, a grown-up check can be switched on before every purchase. The stores also require their own confirmation (such as Face ID or a password) and let parents approve purchases in advance (Apple's “Ask to Buy”, Google's Family Link).

10.What we do not collect

The player's name, e-mail, phone number, address or date of birth (unless you write to us yourself, see section 20).
Precise or approximate (GPS) location.
Contacts, photos from your library, files or data from other apps.
Advertising identifiers (IDFA / Advertising ID), or tracking across other companies' apps and websites.
Voice or video recordings, or the content of conversations.
Analytics or crash reports. If we ever add such a tool, we will update this policy first.

11.Purposes and legal bases

We use information only to:

Run the Game and the features you ask for: saving progress, the cloud save and syncing between devices you linked, showing your pets to friends, visits, reactions and live meetings. Basis: performing our agreement with you (the Terms of Use).
Deliver purchased items and restore purchases. Basis: performing our agreement with you.
Keep the service safe and prevent abuse, for example limiting code guessing (friend codes and link codes) and blocking users. Basis: our and your legitimate interest in a safe service.
Use device permissions. Basis: your consent, given and withdrawn in your device settings.
Answer your messages to support. Basis: your request and our legitimate interest in helping you.
Comply with the law and legal processes, where required.

We do not use information for advertising, profiling, or automated decisions with legal effects on you.

We do not sell, rent or trade information, and we do not share it for advertising. Information is shared only with:

Friends you approved: your pet cards, park presence, reactions and visits, as described in sections 6–7.
Infrastructure providers acting on our behalf and only on our instructions:
- Supabase: hosting of the Friends server, the cloud save and list of devices, and the private live-meeting channels.
- Cloudflare: hosting of the Game's web pages, forwarding e-mail sent to [email protected], and a STUN server for direct connections.
- Google: a public STUN server for direct connections (IP address only, at the moment of connecting), and the mailbox (Gmail) where we receive your messages.
Apple and Google as app stores and payment processors, under their own policies.
Authorities, only where the law requires and to the minimum extent necessary.
A successor that acquires or continues the Game, only subject to this policy or one at least as protective.

13.Where information is stored

The server for Friends and the cloud save is hosted by Supabase in Frankfurt, Germany (in the European Union), a jurisdiction recognised by Israel as providing adequate data protection. Our infrastructure providers may access data from other countries, including the United States, solely for support and operations, under contractual data protection commitments (such as the EU Standard Contractual Clauses). Public STUN servers may operate from anywhere in the world.

14.How long we keep it

Information	Kept
On your device (save, album, commands)	Until you delete it or the app.
Friends account, pet cards, friendships	Until you delete them in the Game. We reserve the right to delete an account inactive for 24 months (this is not done automatically at present).
Cloud save and list of devices	Until you delete them in the Game, or until every device is unlinked (the last device to leave closes the cloud save). A save that no device has opened for 24 months is deleted automatically.
An anonymous account with nothing left in it (no cloud save and no friends)	Deleted at once when the device unlinks itself or deletes the cloud save. Such an account left behind in another way (for example, a device unlinked from another device) is deleted automatically after 30 days without use.
Device link code	Up to 10 minutes, or until used.
Reactions and visit notes	Until the recipient's game reads them, then deleted. If never read: 30 days.
Code attempts (friend or device)	About an hour.
At the park now	While you are at the park, refreshed every half minute. If the Game is closed while you are at the park, the marker is deleted within a day (friends see it only for a minute and a half after its last refresh).
Live-meeting messages through the server	Not kept after delivery.
E-mail messages to us	As long as needed to handle the request and keep a reasonable record of it.
Technical server logs at infrastructure providers	A short period, under the provider's policy, for security and operations.

15.Security

We take reasonable, industry-standard measures to protect information:

All communication with the server is encrypted (HTTPS/TLS), and so is the direct live-meeting connection.
Every server table has row-level security rules: a user can read only their own information and that of friends they approved.
All writes go through controlled server functions that check every action.
Guessing friend codes is rate-limited, and users can be blocked.
The cloud-save tables cannot be accessed directly at all: every read and write goes through functions that check the device belongs to that save. Only the device playing now can update it.
Device link codes: 8 digits, valid for 10 minutes, deleted after one use, and at most 10 attempts an hour per device.
A device that is unlinked loses access to the cloud save at once. If a linked device is lost or stolen, you can unlink it from any other linked device (Settings → Another device → “Unlink”). Unlinking cannot be used to take another device's friends and friend code when either of the two joined in the last two weeks (section 5).
The server's administrative keys are never in the app.

No method is completely secure. If a serious security incident affects your information, we will act as the law requires, including notifying the relevant authority where required.

16.Children and parents

The Game is suitable for all ages and was designed from the start to be safe for children:

No ads, no links to outside websites inside the Game, and no free chat.
No personal detail is ever required, including for “Friends” or linking another device.
Friendships are mutual only: a code shared in person and both sides' approval. There is no searching for strangers.
In Settings → Parents, a grown-up check can be required before every purchase, purchases can be switched off completely, and a parent's approval can be required for each new friend, and only a grown-up can undo these protections.

We do not knowingly collect personal information that identifies a child, in particular from children under 13 (or the age set by law in their country). If we learn that such information was collected, for example a full name typed as a pet's name, we will delete it. Parents may contact us (section 20) to review or delete their child's information, or delete it directly in Settings → Parents → “Delete friends and code”.

17.Your rights

Under the Israeli Protection of Privacy Law, 5741–1981, and where they apply to you, the EU/UK GDPR and similar laws, you have the right to:

Access: know what information about you we hold and receive a copy.
Correction: correct inaccurate information (you can rename a pet yourself on the main menu).
Deletion: have your information deleted (see section 18).
Restriction and objection: restrict or object to certain processing.
Portability: receive information you provided in a common format.
Withdraw consent: withdraw device permissions at any time.
Complain: lodge a complaint with Israel's Privacy Protection Authority (Ministry of Justice) or your local data protection authority. California residents have similar rights under the CCPA/CPRA; we do not sell or share personal information as those laws define it.

To exercise your rights, contact us (section 20). Accounts are anonymous, so to find your information we will ask for your friend code, shown on the Friends page. You can delete the cloud save yourself at any time (section 18). We will reply within 30 days.

18.How to delete your information

Friends data on the server: Settings → Parents → “Delete friends and code”. This immediately deletes the anonymous account (if you linked devices: the friends of all the linked devices, which stay linked), pet cards, friendships, reactions and visits. Your pets on the device are not affected.
The cloud save: Settings → Another device → “Delete the cloud save”. This immediately deletes the save and the list of devices from the server and, if no friends of this device are left on the server, its anonymous account too. Your pets stay on each device as they are.
One device: Settings → Another device → “Unlink this device” (if no friends of this device are left on the server, its anonymous account is deleted at once too), or “Unlink” next to another device.
Everything on the server: “Delete friends and code” and “Delete the cloud save”, in either order. After both, nothing of the device is left on the server, including the anonymous account.
One friend: remove or block them on the Friends page.
Everything on the device: delete the app.
By contacting us: we will delete all information linked to the friend code you give us.

19.Changes to this policy

We may update this policy, for example when we add a feature. The current version is always available in the Game (Settings → About) and on this page, with its effective date. We will announce material changes, especially any that expand the information collected, in the Game before they take effect, and ask for your consent where the law requires.

20.Contact us

For questions, requests and exercising your rights:

When you write to us, we receive your e-mail address and what you wrote, and use them only to reply. The Game's “Contact us” button (Settings → Help) adds technical details that help us: the Game's version, the operating system and its version, the device model (on Android), the screen size, the language and, if you opened the Friends page, your friend code. The message opens in your own mail app, and you can delete any of it before sending.

Doron Cohen

E-mail: [email protected]

Address: Dizengoff 295, Apt 3, Tel Aviv 6311814, Israel