Privacy notice
Effective 16 October 2026.
Adam Tomasz Swider33 Atlas Street, Ashton-under-Lyne, OL7 9BB, United Kingdom
transad.haulage@gmail.com
Document version: 2026-10-16-v1
Online service and providers
Cats GO uses Cloudflare Workers and Durable Objects for accounts and progress, a private R2 bucket for images, Cloudflare Images for image processing and Workers AI for server-side cat detection. Cloudflare therefore processes uploaded photos and connection data. Request diagnostics are sampled; photos, passwords and API keys are not intentionally included in application logs. OpenAI processes a cat image only after a separate request for an AI portrait. Apple App Store and Google Play process supported mobile purchases. Resend receives your email address and a private password-reset link valid for 30 minutes only when you request password recovery. Service capacity or the separate AI spending limit can temporarily queue or pause generation; a failed or queued request does not consume a purchased Paw. iPhone and iPad purchases use Apple In-App Purchase. TestFlight uses the Apple sandbox; no real charge is made. Signed transaction records and an account token are verified by the game server to deliver and restore purchases.
Who operates Cats GO?
The operator and data controller is identified below. Contact us about access, correction, export, deletion, restrictions, objections or withdrawal of an optional sharing choice. You may also complain to the competent data protection authority, including the UK ICO where applicable.
A private album on your device
The private album stores photos and progress on this device. Optional walking uses GPS locally, without publishing your position. No online account is needed. Export before clearing app data or uninstalling; device backups follow your system settings. External links use internet.
Online accounts and photos
An online account stores your email, nickname, a salted password hash, progress, cat collection, settings and account sessions. An optional profile picture is stored privately on your account, included in your data export and removed when you delete it or your account. Selected photos are uploaded for cat verification, processing and storage. Photo metadata is removed from stored derivatives. The camera preview is processed locally; a selected photo is sent when you add it online. We do not require microphone, contacts or access to your whole photo library. Use photographs you are entitled to use; avoid people, house numbers and identifying documents in the background.
What other players see
New online profiles and reviewed cats are public by default. You can turn this off in Privacy and each cat’s settings. New cats have original-photo sharing enabled by default; you can disable it before adding a cat or later. Locations need separate permission. Sharing is optional. Reviewed portraits you publish may appear with your nickname and statistics in profiles and rankings. Home sharing is a separate choice. Other people can save screenshots; withdrawing sharing cannot remove copies they already made. Blocking hides the relevant profiles, pins and ranking entries between the affected players. Real photo sharing can be disabled separately for each cat. Full photos, after metadata removal and moderation, become visible to other logged-in players only when you publish the cat and enable photo sharing. Turn it off to revoke access. Avoid people and identifying information in the background. Other players see only the Purrrfect count, not voter identities. The server stores the voter account to enforce one vote per cat; this is not anonymous to the operator. Existing screenshots cannot be recalled.
Location and maps
Permission to access location and permission to publish it are separate choices. Walking uses recent coordinates to calculate distance. Player profiles never have location pins. Before adding an online cat, choose its encounter location: the camera can use GPS, while gallery photos require a manually selected place. Without GPS you can select the place manually too. Saved cats appear automatically to signed-in players according to sharing choices after automated cat and name verification. No manual approval is required. Reports, blocking and operator removal remain available. You can correct the cat's place from its details: open the map, select the cat, choose Adjust cat location, move the map beneath the crosshair and save. Corrections award no walking XP. Existing private choices are kept; a cat pin can be hidden or removed in the cat's details. A saved cat encounter can include exact coordinates and persists until edited or deleted. Do not publish your home, a child's location or another person's private location. A map tile provider receives network information such as your IP address and requested map area when a map loads. The default map uses OpenFreeMap (Hyperknot Software Kft., Hungary), with OpenMapTiles/OpenStreetMap data. OpenStreetMap raster tiles are an optional fallback. See https://openfreemap.org/privacy/.
Optional AI portraits and purchases
Only when you request a personal AI portrait is a processed cat image sent through our server to OpenAI. The image is not a biometric identity check. Generated results can differ from your cat. OpenAI does not use API data for model training by default. Its abuse-monitoring logs may retain request content for up to 30 days under its service terms and account settings. The app does not collect card details. Store purchase tokens, product identifiers and transaction status are processed to grant and restore purchases and prevent duplicate use.
Purpose and legal basis
Account operation and requested game features use performance of the service contract. Optional public location and optional sharing use your separate, revocable choice. Security, fraud prevention and moderation use the operator's legitimate interests in protecting players and the service. Statutory accounting records use applicable legal obligations. Camera permission is not blanket consent to every use. No advertising SDK or behavioural-advertising profile is included.
Retention and security
Active account data is kept until account or item deletion. Sessions expire after 30 days; reset links after 30 minutes. Account deletion removes the active account, collection, media and related sessions. Detached purchase and transaction records are retained for up to seven years for accounting, fraud prevention and duplicate-purchase handling. AI cost records, resolved reports and moderation logs are retained for up to two years. Cloudflare request logs are retained according to the service plan, currently up to seven days. Deleted database records may remain in protected recovery history for up to 30 days and are not used by the active service. Access controls, hashed passwords, HTTPS and session protection are used.
Providers and international transfers
Cloudflare provides hosting, image storage and processing; OpenAI provides optional AI image generation; Resend delivers requested password-recovery email; OpenFreeMap and OpenStreetMap provide map data; Apple App Store and Google Play process supported store transactions. These providers may process data outside your country under their applicable terms and transfer safeguards. Google/Apple social sign-in is not enabled.
Younger players
The app is not directed to children. Online registration and sharing are available only to adults aged 18 or over. Players aged 13–17 may use the private local album with an adult's guidance and without an online account. Verified parental consent and child online accounts are not offered. Do not upload a child's personal information or location.