Privacy Policy

Version 2.6 · Last updated 21 October 2026 · Effective 21 October 2026

PEITE (配特) is a dating app built around pets. This Policy explains what Beans & Crystal, the developer of PEITE (“we” or “us”), collects through the PEITE app, the peite.app website, and related services (together, the “Service”), what it is used for, who sees it, where it is kept and for how long, and how you can get a copy of it or have it deleted. The Service’s features change over time, so this Policy describes the kinds of data and the principles we follow; any feature it mentions is only an example.

1. Data we collect

• Account. The first time you use the app, an account identifier is created for you automatically, with no username or password. If you link or sign in with Apple or Google, we also receive the identifying data that provider shares, usually an email address (Apple may give a private relay address).
• Profile. What you enter about yourself, such as your name, birthday, the area you live in, what you are looking for, which pet households you want to meet, how you keep pets, and the introduction and answers you write.
• Pet details. What you enter or choose for your pets, such as name, species, breed, sex, age, whether it is neutered, answers to the personality questionnaire, its introduction and its pixel look, and the game content we generate from these (see section 3).
• Photos. Photos you take or pick from your library: the ones used to draw your pet’s pixel version, and the photos of your pet and of yourself that you choose to share. Before upload, the app removes location and similar metadata from each photo. Photos used to draw your pet are first checked on your phone for an animal; a photo with no animal in it is not uploaded. The photos used to draw your pet and the AI service’s answer are kept on our servers for 14 days so that we can check drawings that came out wrong, and are then deleted.
• Messages. The text, photos, stickers, and interactions between you and a match, and read status.
• Interactions. A record of what you do in the Service, such as your likes and passes on cards, matches, results in the game, blocks, reports (who and why), and whether you opened the app on a given day.
• Purchases and points. The transaction records Apple or Google give us when you buy something in the app (see “In-app purchases” in section 3), and your points balance in the Service with what you earned and spent.
• Invitations. Whose invite link or invite code you joined with, and how many people have joined with your invite link.
• What you send us. Emails you write to us, what you leave through the contact form on our website (your name, email address and message), feedback and problem reports you send from the app (with the app’s version and language), and what you fill in when you apply to join on the website: your email address, your district, your reason, the photos of your pet and one photo of yourself. Only the people who review applications see those photos, and we delete them within 90 days of the review.
• Notifications. A push token, if you allow notifications, and your setting for each kind of notification.
• Security and technical data. Signals that confirm requests come from the genuine app (Firebase App Check, via Apple App Attest on iOS and Google Play Integrity on Android), daily usage counts, server connection logs (such as IP address and time), crash and error reports sent by an error-reporting tool (device model, OS and app version, the error, and the few steps before it, such as which screen was open, which button was pressed and how a connection went; never your messages, photos or what you wrote), and a record of problems the app ran into (for example a scan that failed or took too long, how long it took, and the app version). Crash reports and problem records carry your account identifier, so we can find the person affected and help them.

Kept only on your phone: part of your game progress, the app’s settings, and when you ticked your agreement to the Terms of Use and this Policy. None of this is sent to our servers.

We do not collect: precise location, contacts, microphone, or advertising identifiers, and we do not track you across apps or websites.

How location is used: the app uses your phone’s location only after you allow it, and only on your phone, to find the district you are in, such as the one you live in or the one you are visiting. We keep only districts; the position itself never reaches our servers. In countries or regions where the app has no place names of its own, it sends your position to Apple’s map service once, when you ask, to name the area.

If you do not provide data: your birthday is required, to confirm you are 18 or older; without it you cannot use the Service. To receive cards picked for you, the basics of your profile must be filled in, such as your name, the area you live in, and what you are looking for. You can receive cards without a pet, but other people only see you in their cards once you have at least one pet. Photos are entirely optional, and a pet can be made without any. You can use the app without linking Apple or Google, but then you cannot get back to the account on a new phone. If you delete and reinstall the app, an account not linked to Apple or Google is deleted with its data; a linked account comes back whole when you sign in with the same Apple or Google account. Notifications are optional.

2. Purposes

• Providing the Service: creating your account, drawing your pets, picking cards for you, matching, the game, chat, notifications, and delivering what you buy and your points. When picking cards, the system looks at where you live, the species both sides want to meet, what you are looking for, age, and which cards you have already seen.
• Generating game content: see section 3.
• Safety: handling reports and blocks; checking the words on cards and in messages for possible scams or objectionable content, and if there are any, pausing that card or warning you in the conversation; confirming requests come from the genuine app; limiting usage; and fixing crashes.
• Telling you things: news that concerns you, such as matches and messages, and the Service’s events and news. You can turn off any notification you do not want in the app.
• Answering you: replying to your emails, feedback and problem reports, and sending you an invitation when it is your turn.
• Understanding use: counting overall numbers from usage records, such as how many people use the Service. We look at totals only and build no behavioural profile of anyone.
• Legal obligations: complying with the law and lawful requests from authorities.

We do not sell data, show ads, or track you, and we do not make decisions with legal or similarly significant effects on you by automated means.

3. AI processing

The Service uses an AI service to draw your pet’s pixel version, to write its game lines, and to translate those lines into other languages. The app does not connect to it directly; requests go to our own server, which forwards them. The provider we use is listed in section 4, and we update this Policy first if it changes. Only the following is sent:

• Drawing your pet’s pixel version: the pet photos you choose (location data removed), the pet’s species, and a fixed instruction. The photos carry no name, location, or account details, and are sent only when you ask the app to draw your pet from photos; if you would rather not send any, a pet can be made without photos.
• Generating game lines: your pet’s details (such as name, species, breed, sex, age, looks, questionnaire answers and trait tags), the area you live in, and how you keep pets and which pets you want to meet from your profile. Your name, birthday, and photos are not sent.
• Translation: the generated Chinese lines are sent once more to be translated into other languages.

The generated lines are stored with the pet and placed on its card, so that people matched with your pet can play them in the game. They are game content, not a description of any real animal’s personality or behaviour.

We do not use your data to train any model, and we have not used any photo to improve recognition; if we ever start, we will update this Policy first and ask for your consent separately.

The photos and answers used to draw your pet are kept for 14 days (see section 7); apart from those, our server’s logs do not record photos, instructions, or generated text — only account identifiers, usage counts, and token counts used for accounting. So that the same content is not generated twice, generated lines are also kept for a while in a store that links them to no account (see section 7). The AI provider processes the content above as our processor under its terms and does not use it to train models.

Sharing publicly

When you choose to share a picture of your pet outside the Service (such as its ID card), we put that picture on our server and create a public web page for it. Anyone with the link can see what is on the picture, such as the pet’s name, pixel drawing, breed, sex, age, traits and your district. If the picture carries a photo, that photo is public too. The preview before you share is exactly what others will see. The link carries no account data and is not indexed by search engines. You can take it down at any time; deleting the pet or your account removes it too.

In-app purchases

When you buy something in the app, Apple (iOS) or Google Play (Android) handles the payment; we never see your card. We keep only the transaction id the store gives us, the product, the time and the refund state, to deliver what you bought, avoid handling it twice and process refunds. Points you buy or earn in the Service, and what you get with them, are recorded under your account too. Only you and we can see these records.

4. Who sees your data

• Other users. Once you have a pet and a complete profile, the Service publishes a pet card automatically, which any signed-in user may see. It carries the parts of your profile meant for others, such as your name, age (not your birthday), the area you live in, what you are looking for, which pet households you want to meet, how you keep pets and your introduction, along with your pet’s details, pixel look, and game lines (the lines may mention the area you live in). The card is withdrawn when your profile is incomplete or you have no pet.
• Shared photos. Our servers serve the photos of your pet and of yourself that you choose to share only to you and to people who have met your pet in the game; nobody else can open them, even with the card. The one exception is the photo on a picture you share outside the Service (see “Sharing publicly” in section 3). You can take any of them down at any time.
• Your matches. The messages between you, and what you do in that match, such as the result of the game or a gift for their pet. Your like on someone is used to tell whether you have matched.
• Never shown to other users: your birthday, the photos used to draw your pet, your raw questionnaire answers, reports, push tokens, your email address, and your purchase and points records.
• Processors. Companies that run the Service for us and may process data only on our instructions and as needed to provide it:
  • Google (Firebase Authentication, Cloud Firestore, Cloud Storage, Cloud Run, Cloud Scheduler, Secret Manager, Firebase Cloud Messaging, Firebase App Check, Google Play Integrity, Firebase Hosting, and the Gemini API);
  • Sentry (Functional Software, Inc.; error reporting: crash and error reports from the app and our servers);
  • Apple (Sign in with Apple, push notifications, App Attest);
  • Apple iCloud Mail (receiving and sending mail for support@peite.app) and Cloudflare (the domain’s DNS).
• As required by law, or where necessary to protect the rights and safety of us, our users, or the public.
• With your consent in any other case — for example, when you tap share, the picture or link goes to the app you choose.

5. Where data is kept, and international transfers

Your profile, pet details, photos, matches, and messages are stored in Google Cloud’s data centre in Taiwan (asia-east1), and our server runs in the same region. Sign-in, push notifications, App Check, and the Gemini API are Google’s global services, as are the Apple and Cloudflare services above, and this data may be processed in the United States or other countries. Crash and error reports are stored in Sentry’s data centre in the European Union (Germany): we chose the EU because data there is protected by the GDPR. We make international transfers in accordance with Taiwan’s Personal Data Protection Act and any restrictions set by the competent authority.

6. Third-party content: shelter animals

Cards marked as shelter cards in the Service come from the Ministry of Agriculture’s “Animal Adoption” open data (農業部 動物認領養), used under the Open Government Data License:

農業部 2026 動物認領養
This open data is released to the public under the Open Government Data License (政府資料開放授權條款); users may use it provided they comply with the terms of that licence.
Open Government Data License: https://data.gov.tw/license

• We keep these animals’ public data, such as species, sex, coat colour, size, the shelter’s name and contact details, the original listing’s address, and the shelter’s own notes. Trait tags on a card come only from the shelter’s text; the animal’s personality, game lines, and placeholder name are game content we generate.
• We keep a small copy of the photo the shelter published, to show it on the card, and the AI service looks at it to work out the coat for the pixel drawing. Until our copy is ready, your phone loads the photo directly from the source website, pet.gov.tw, which therefore receives your IP address and similar connection data and handles it under its own website policy.
• Liking a shelter card is recorded under your account so that the animal appears in your matches; we do not tell the shelter, and we send the shelter none of your data. Whether and how to contact the shelter is up to you.
• 180 days after an animal is adopted or removed from the open data, its card and photo copy are deleted. If any user still keeps it among their likes, it is kept until nobody does.

7. Retention

• While your account exists: we keep your account, profile, pet details, photos, matches, messages, interactions, and points. We keep no separate database backups; deleted means deleted.
• Deleting a photo or a pet: a pet photo or shared photo you delete or replace in the app is deleted from our storage. Deleting a pet deletes its details and photos (including the shared ones) together; the photos used to draw it are kept for 14 days as described below, and there are no other copies. A photo you take back in a conversation can no longer be seen by the other person, but the file is kept until you delete your account, so that we can look at it if someone reports it.
• Deleting your account: you can delete your account in the app, and the steps are on the Deleting your account page. We then immediately delete your photos, pets, profile, pet card, the pictures you shared, points, push tokens, usage counts, the account itself, and the other records that belong only to your account, and clear the data on your phone.
• Matches and messages: when you delete your account, each of your matches ends for the other person and disappears from their Matches list. We clear those matches, the messages and game records in them, and the likes you sent from our database within 30 days of the deletion. After that, system records may still hold your expired account identifier (a random string), which no longer links to any data.
• Kept after you delete your account: reports, feedback and problem reports are addressed to us and are kept until they have been dealt with and any related dispute is over; they are not deleted with the account. Apple’s transaction records are kept until refunds no longer need handling. One record holding only the expired account identifier notes that the account used an invite code or invite link, so that the same account cannot use one twice.
• Your emails, and the address you left to wait for an invitation: kept until we have handled your request, or no longer need to send you an invitation. You can ask us to delete them at any time.
• Mailing lists: we sometimes write to testers and partners. An address on such a list is kept until you reply asking us to stop, or until we no longer send that kind of mail. An address that asked us to stop is kept only so that we don’t write to it again.
• Stored generated content: linked to no account, about 30 days, extended if it is used again in that time.
• Pictures in notifications: a picture composed for a notification is kept for one hour.
• Server connection logs: about 30 days, Google Cloud’s default.
• Crash and error reports: about 90 days, Sentry’s default.
• Problem records: 30 days, unless you delete your account first.
• Photos and answers used to draw your pet: kept for 14 days so that we can check drawings that came out wrong, then deleted; if you delete your account first, they go with it.
• Shelter cards: see section 6.

8. Your rights

Under Taiwan’s Personal Data Protection Act you may ask to check or review your personal data, get a copy, have it supplemented or corrected, have its collection, processing, or use stopped, and have it deleted.

• In the app: edit your profile (except your birthday), edit or delete pets, take down shared photos and pictures, block, turn off notifications, and delete your account.
• By email: for a copy of your data, a birthday correction, or any other request, write to support@peite.app. We answer requests to check, review, or copy within 15 days, and act on correction, stopping use, and deletion within 30 days; if we need longer, we tell you why first and extend at most once by the same period. We may need to confirm the account is yours.

9. Age

The Service is only for people aged 18 or older, and the app checks age the first time it opens. We do not knowingly collect data from anyone under 18; if we learn that we have, we delete the account and its data. How we work against child sexual exploitation is in our Child safety standards.

10. Security

Data is encrypted in transit and encrypted at rest by Google; access rules let only you read your private data; our server checks that requests come from a signed-in account and the genuine app; server keys are kept in Google’s Secret Manager; and location data is removed from photos before upload. No method of transmission or storage is completely secure. If a personal data breach occurs, we will investigate and notify you as the law requires.

11. Changes

We may revise this Policy. Revisions are posted on this page with an updated date; we will tell you about material changes in the app or by other reasonable means. Continued use after a revision takes effect means you accept the revised Policy.

12. Governing law

This Policy is governed by the laws of Taiwan (R.O.C.), including the Personal Data Protection Act.

13. Contact

For questions about this Policy or your personal data, write to support@peite.app or use the contact form on our website. The Service is operated by Beans & Crystal.

14. Hong Kong

This section last updated 21 October 2026

This section is the Personal Information Collection Statement for people who use the Service in Hong Kong. We handle your personal data in line with Hong Kong’s Personal Data (Privacy) Ordinance (Cap. 486); this section adds to the sections above and does not replace them.

• Purposes: those in section 2 — providing the Service, generating game content, safety, telling you things, answering you, understanding use, and legal obligations. We use your data only for these purposes or purposes directly related to them; for any other purpose we ask for your consent first.
• What you must provide: your birthday is required, to confirm you are 18 or older; without it you cannot use the Service. The basics of your profile are needed to receive cards picked for you, and at least one pet is needed for other people to see you in theirs (see “If you do not provide data” in section 1); without them the rest of the app works. Everything else is voluntary: photos, linking Apple or Google, and notifications.
• Who may receive your data:
  • other users: what is on your pet’s card, the messages between you and a match, and your shared photos for people who have met your pet (section 4);
  • the processors that run the Service for us: Google (Firebase and Google Cloud store and process data; the Gemini API looks at photos to draw your pet’s pixel version and writes and translates its game lines), Sentry (crash and error reports), Apple (Sign in with Apple, push notifications, App Attest), Apple iCloud Mail (receiving and sending mail for support@peite.app), and Cloudflare (the domain’s DNS);
  • Apple and Google, for in-app purchases: Apple (iOS) or Google Play (Android) takes the payment and handles the payment details under its own privacy policy; we never see your card (section 3);
  • authorities entitled by law to ask, or where necessary to protect the rights and safety of us, our users, or the public;
  • anyone else with your consent, such as the app you pick when you tap share.
• Transfers outside Hong Kong: your data leaves Hong Kong. Your profile, pet details, photos, matches, and messages are stored in Google Cloud’s data centre in Taiwan (asia-east1) and processed by us in Taiwan; sign-in, notifications, App Check, and the Gemini API are Google’s global services, as are the Apple and Cloudflare services, and this data may be processed in the United States or other countries; crash and error reports are stored in Sentry’s data centre in Germany (section 5). These companies process it under their terms with us. Photos on shelter cards are usually served by our server in Taiwan, and sometimes loaded by your phone directly from pet.gov.tw in Taiwan (section 6).
• Direct marketing: we do not provide or sell your personal data to anyone for direct marketing. The app’s events and news notifications (the Service’s events, new features, holiday cards, and possibly a partner shop’s offer) do not carry your name and are sometimes sent only to people who live in one district; you can turn them off at any time in the app’s notification settings.
• Access and correction: you have the right to ask for access to the personal data we hold about you, for a copy of it, and for its correction. Much of this you can do in the app (section 8); for anything else, write to our Data Protection Officer at support@peite.app (Beans & Crystal). We act within the periods in section 8; if we need longer, we tell you why in writing within 40 days of receiving your request. We may need to confirm the account is yours.
• Retention: see section 7. Data we no longer need is deleted.
• Complaints: please write to us first; you may also complain to the Office of the Privacy Commissioner for Personal Data, Hong Kong (www.pcpd.org.hk).

15. Singapore

This section last updated 16 October 2026

This section is for people who use the Service in Singapore and is written under Singapore’s Personal Data Protection Act 2012 (the “PDPA”); it adds to the sections above and does not replace them.

• Data Protection Officer (DPO): Beans & Crystal’s Data Protection Officer, support@peite.app. Questions, requests, and complaints about your personal data, this Policy, or how we handle data all go here.
• Purposes: we collect, use, and disclose your personal data only for the purposes in section 2. Before using it for a purpose we have not told you about, we tell you and ask for your consent, unless the law allows it without consent.
• Consent and withdrawal: when you tick your agreement to this Policy the first time you open the app, you consent to us handling your data as this Policy describes. You may withdraw all or part of that consent at any time: in the app, delete photos or pets, take down shared photos, turn off notifications, or delete your account; or write to our Data Protection Officer. When we receive it, we tell you the likely consequences and stop collecting, using, and disclosing the data concerned within a reasonable time. For example: withdraw consent for your pet’s photos and we cannot draw it from photos, though it can still be made without them; withdraw it for the data that picking cards needs and no cards are picked for you; withdraw it for data the Service cannot run without, such as your birthday, and you can no longer use the Service, and we delete your account (section 7). Withdrawing consent does not affect data the law requires or allows us to keep, such as reports (section 7).
• Access and correction: you may ask for the personal data we hold about you and for how it has been or may have been used or disclosed in the year before your request, and ask us to correct an error or omission. Write to our Data Protection Officer. We act within the periods in section 8; if we cannot answer within 30 days, we tell you in writing within those 30 days when we will.
• Transfers outside Singapore: your data is transferred out of Singapore: it is stored in Taiwan (Google Cloud, asia-east1) and processed by us there, and some services process it in the United States or other countries (sections 4 and 5). When we transfer it, we make sure, as the PDPA requires, that the recipient is bound by legally enforceable obligations to give it a standard of protection at least comparable to the PDPA’s: Google, which stores and processes most of your data, does so under its data processing terms with us. Some transfers are needed to give you the Service you asked for, such as delivering your message to your match’s phone.
• Data breaches: if we find a possible data breach, we assess it promptly. If it is notifiable — likely to cause you significant harm, or affecting 500 or more people — we notify Singapore’s Personal Data Protection Commission (PDPC) as soon as practicable and no later than 3 calendar days after deciding so, and we notify you too where it is likely to cause you significant harm.
• Reporting online harm: how to report and what we do with a report is in section 19 of the Terms of Use.
• Complaints: please write to our Data Protection Officer first; you may also complain to the PDPC (www.pdpc.gov.sg).