Privacy policy

pawalbum.com Privacy policy
Version: 2026-10-v4 Effective date: 2026-10-19

Protection of minors — important
This service is not intended for anyone under 16 and does not knowingly collect their personal information. Do not upload photos containing anyone under 16, including photos of adults with children. Guardian consent or uploading on a child's behalf is not an exception. If you discover such photos or information, contact ozhaoyu628@gmail.com with a work or record ID; do not send the child's photo again. After verification, we will delete the confirmed photos and related personal information and handle necessary requests for deletion by third parties.

1. Responsible operator
Yuzhao is an individual operator in Mainland China responsible for personal-information processing in pawalbum.com. Privacy contact: ozhaoyu628@gmail.com; support: ozhaoyu628@gmail.com. This policy covers this website's processing and does not replace the policies of independent third-party services.

2. Information collected
Depending on the features used, we process registration emails, password hashes and sign-in credentials, random guest identifiers, pet profiles, care records, journals and previous versions, memory photos and attachments, person and pet reference photos, styles and written instructions, generated works, questions and answers, orders and payment status, support and report information. Necessary request times, errors, usage and access-related technical information are also processed for security and troubleshooting. The website does not collect full card numbers or security codes; payment-card information is handled by Waffo Pancake or the payment provider shown at checkout.

3. Purposes and processing grounds
Information is used to provide requested storage, synchronization, AI generation, digital delivery, order verification and related support. Where applicable, this relies on performance of a contract or steps requested before a contract. Security, prevention of abuse and necessary troubleshooting may rely on legitimate interests while considering users' rights. Required retention, complaints and regulatory requirements may rely on legal obligations. Optional processing that relies on consent requires separate consent that can be withdrawn; withdrawal does not affect earlier lawful processing. Permission for necessary service notices is not treated as marketing consent.

4. Providers, sharing and international processing
The portrait feature sends selected person and pet photos, the story image and necessary text to the image service and its intermediary. Questions, answers and journal assistance send text, photos or selected passages needed for the feature. Review processes necessary content according to the capabilities actually enabled. Photo-card layouts are generally created on the device; image records are saved when added to memories or online storage. Payments, email and storage are handled by the relevant providers.
The website uses the following providers for its website, email, AI and payment features. The data each receives depends on the features used.

1. Cloudflare: website, database, images and backups
Cloudflare processes account details, user content, works, order records and access-related technical information necessary to provide the website. The database, images and backups are currently stored in western North America. Website requests may also pass through its global network; this does not mean all data is processed in only one country or region. Business data follows the retention and deletion rules in this policy. Snapshot objects in encrypted backups are cleared under a 30-day lifecycle. Cloudflare states that it does not use customer content to train large language models; that statement does not apply to other independent AI providers.
Privacy policy: https://www.cloudflare.com/privacypolicy/
Data processing addendum: https://www.cloudflare.com/cloudflare-customer-dpa/
Customer content and AI: https://www.cloudflare.com/trust-hub/responsible-ai/

2. Resend: account and necessary notification emails
Resend receives recipient emails, messages such as registration verification or password resets, and delivery information. Its published information says data is stored in the United States; a sending region is not a storage region. On Free, Pro and Scale plans, emails and logs are retained for 30 days and backups for seven days; remaining customer data is deleted within 90 days after account termination, subject to the actual plan and agreement. It states that normal Emails API content is not sent to Anthropic, while some emails may undergo trust and safety checks in facilities it operates; customer content is not used for model training or fine-tuning.
Privacy policy: https://resend.com/legal/privacy-policy
Storage and processing information: https://resend.com/security
Data processing addendum: https://resend.com/legal/dpa

3. DeepSeek: AI assistance and content review
The website uses DeepSeek's official API for AI assistance and content review, sending necessary text, context and selected photos depending on the feature. Image review sends the image being reviewed. Its public privacy policy describes processing and storage in China and arrangements for using inputs and outputs to improve services or train models. This website has not obtained a uniform retention period or a no-training guarantee applicable to the current API account. It therefore does not promise zero retention or no training, or treat a product-interface opt-out setting as proof that this website's API has opted out of training. Users may send requests concerning their submitted data to the website's privacy contact.
Privacy policy: https://cdn.deepseek.com/policies/zh-CN/deepseek-privacy-policy.html
English policy: https://cdn.deepseek.com/policies/en-US/deepseek-privacy-policy.html

4. Aimix / lk888.ai: image-generation intermediary
The website currently generates portraits using the tt-image-2 interface at api.lk888.ai. It sends the selected person and pet photos, style reference image, prompts and generation parameters, and receives the generated work. The intermediary and its actual upstream services may process these data. This website has not established the complete upstream-provider list, processing regions, retention periods or training arrangements for this route. It does not guarantee immediate deletion after generation or exclusion from training, and does not infer the upstream provider from a model name. Deleting a work on this website does not automatically delete copies providers may hold. Users may contact the website to request deletion; the website will coordinate with the relevant providers.
Provider website: https://aimix.lk888.ai

5. Waffo Pancake: checkout and payment
The website submits products, amounts, order IDs and necessary internal user identifiers to Waffo for payment and order association. Person and pet photos are not submitted as checkout parameters. Waffo processes billing, payment, tax and dispute information needed for checkout. This website receives order and payment results and does not store full card numbers or security codes. Its policy describes possible processing in the United States and other countries where providers operate. Retention depends on transactions, legal obligations and dispute handling; it is not a uniform 30-day period. Users may exercise relevant rights using the contact information in its privacy policy.
Privacy policy: https://www.waffo.ai/privacy

6. International processing and user requests
The website is operated by an individual operator in Mainland China. Administration may involve accessing providers' data from Mainland China. Depending on the features used, user information may be processed in North America, China and other regions where providers operate, whose information-protection rules may differ from those in the user's location. Providers' public data processing addenda describe their applicable arrangements; they do not establish that this website has obtained certifications or implemented every safeguard for all international processing. Users may request access, correction, export or deletion through the privacy contact. Third-party retention, backups and legally required records may not be deleted at the same time as this website's records.
Sending material to a provider is not interpreted as consent to undisclosed training uses. The website does not promise zero retention, no training or execution of specific agreements where third-party retention, training or international safeguards have not been verified. Separate consent will be sought when required for a new purpose. Necessary information may be disclosed where legally required, to protect rights, or with the user's explicit permission. This business does not earn revenue by selling personal information.

5. Cookies and local storage
Necessary session cookies maintain identity and permissions. Local storage supports language, guest credentials, journal caching and page features. Guest records may be lost when browser data is cleared. Browsers can manage cookies and local data, but removing necessary credentials may affect sign-in and recovery. If marketing or non-essential tracking is enabled separately, it will be disclosed separately with applicable choices; this policy is not advance permission for it.

6. Retention and cleanup
Information necessary for the features is retained while the account is in use. Users can manage it through editing, deletion, trash, export and account-deletion controls. Trash is not immediate permanent deletion. Guest credentials are valid for up to 90 days without renewal on later visits. A further 30 days is allowed after expiry, then unclaimed works with no order association and guest chats are cleaned in batches. Works associated with orders, held for review, claimed by an account or still being processed are excluded from this automatic cleanup.
Encrypted database and image backups are stored in a separate private bucket; backup objects expire under a 30-day lifecycle. Restores must reapply account deletions, restrictions and refunds that occurred after the backup.
Orders and payment status are recorded from order creation for digital delivery, recovery of purchases, reconciliation and transaction disputes. Account deletion does not automatically delete all transaction records. Necessary order, payment, cost and minimal deletion-processing records remain.

Support and complaint records are recorded from receipt of the request to address the problem and subsequent disputes. Their retention period depends on applicable legal obligations, payment-dispute periods and processing needs. Personal information that is no longer needed should be deleted or anonymized.

Website operational fault events have a 30-day cleanup rule; it does not apply to every transaction and audit record. Encrypted backup objects expire under a 30-day lifecycle, which does not simultaneously delete records from the business database.
There is currently no single automatic deletion period for orders, support and some audit records. The operator needs to review and handle these periodically. The Account deletion section explains deletion of other account data.

7. Account deletion
In My account → Account deletion and personal data, verify the current password and confirm the request. The account is disabled and sessions are revoked; closing the page does not withdraw the request. The system deletes associated pet profiles, journal history, uploaded images and attachments, assistant chats and portrait images, including purchased works, in batches. Download backups first. Deletion does not automatically issue a refund. Necessary transaction, dispute, cost and minimal processing records remain as described above. Temporary failures are retried; persistent failures require manual handling. A successfully submitted request does not mean every copy is immediately erased. Third-party records, backups and downloaded or externally shared copies may not be deleted simultaneously. Contact the operator with the request ID to check progress.

8. Your rights
Depending on applicable law, you may request access, correction, export or deletion, restrict or object to certain processing, withdraw consent for optional processing, and complain to a competent authority. Send requests to ozhaoyu628@gmail.com. Only information necessary to verify the request will be checked. Use the privacy contact for access, correction, export and deletion requests. Identity is verified only as necessary, and we will explain the outcome or progress within one month of receiving a request. If a request is complex or there are many requests and applicable law permits an extension, we will explain the reason and expected completion time within the original period. A shorter deadline required by applicable law takes precedence. If legally required records cannot be deleted, we will explain the reason, scope and further arrangements.

9. Security, incidents and updates
HTTPS, password hashes, permission checks, private storage and encrypted backups are used to protect information. No service can guarantee absolute security. Incidents affecting users' rights will be addressed, with notices to affected users and competent authorities as required by applicable law; no unconditional uniform notification deadline is promised. Do not submit unrelated identity documents, card details or other people's sensitive information.
Material changes will update the version and date and be communicated by website announcements or necessary account notices. Consent will be obtained again where required. Continued access does not replace legally required consent. Terms of service: https://pawalbum.com/terms .

Membership and video supplement (2026-10-19)
To provide membership, credit settlement and video generation, the site processes the selected plan, subscription status, billing periods, provider order and task IDs, credit balances, hold and settlement records, refunds and cancellations. Video generation sends compressed copies of the selected person and pet reference photos, story and shot requirements to Aimix (aimix.lk888.ai) and its actual upstream services, and receives task status and a video download address. Retention, training and international processing remain subject to the existing provider disclosures in this policy. This update does not promise zero retention, no training or new certifications. Waffo handles payment details; the site does not store full card numbers or security codes. These records follow this policy's existing business-retention, deletion and legally required record-retention rules. Active subscriptions and unconfirmed payments must be handled before account deletion to avoid unresolved transactions.