Privacy Policy
Petory is a pet game made by Twenty Labs ("we", "us"). Twenty Labs is the controller of the personal data described here. This page says what the app collects, why, who else handles it, and how to delete it. We wrote it in plain words on purpose.
The short version. No email or password. Your photos are private to you. Other players only see a blurred spot near your home, and only if you choose to be on the map. You can delete your account inside the app. We do not show ads or sell your data.
Who can use Petory
Petory is for people aged 16 or older. The app asks you to confirm this before you start. We do not knowingly collect data from anyone under 16. If you think a younger person is using Petory, write to support@thetwentylabs.com and we will delete the account.
What we collect
Your account
When you tap "Start Adventure", the app creates an anonymous account with our authentication provider. It does not need your email address, phone number or password. The account is a random identifier stored in the app on your device.
Your profile and game progress
Your display name, your pet's name, your pet's species and look, its level and mood, the items in your bag and Photodex, badges, quests, trips, who you follow and who you block. Your display name, pet name and pet are visible to other players. Names are checked against a list of blocked words.
Your pet's home on the map
Petory does not read your phone's GPS location. You choose your pet's home by hand on the map, or by searching for a place. We store that point privately; no app or other player can read it.
- If your pet is set to Public, other players see a point that the server moves to a fixed, stable spot inside the same area of roughly a kilometre across (a cell about 1.2 km by 0.6 km). Someone looking at the map can tell the neighbourhood, not the address.
- If your pet is set to Private, it is not shown on the map to other players.
- You can change your pet's visibility in your profile. You can move your home at most once every 24 hours.
- Pets only appear when the map is zoomed in to a neighbourhood, so they cannot be listed across a whole city or country.
Photos you take of your pet or of objects
The camera and photo library are only used when you choose to photograph your pet or scan an object. Before your first photo is sent, the app shows a consent screen that names Anthropic. If you decline, nothing is sent.
- What we do with it. The app uploads the photo to our server. The server shrinks it, re-saves it as a plain image, and in doing so removes metadata such as location (EXIF). It then sends that image to Anthropic (the maker of Claude), an AI company, which works out what the photo shows: the colours and markings of your pet, or which kind of everyday object it is. What comes back is a short description of that appearance or object, not a drawing.
- Anthropic. Anthropic processes the image to return that description. Under Anthropic's commercial API terms, inputs sent through the API are not used to train its models.
- Checks. Photos that look unsafe, show no supported pet or object, or cannot be read are refused. Photos that are refused are not stored.
- Storage. Photos that are accepted are kept in private storage so they can belong to your account. We also keep a record of each scan (time, result, a fingerprint of the image and its cost) to enforce the daily scan limit and to prevent abuse.
- Who can see them. Only you. Other players never see your photos. They see the drawn pet and, for items, a catalog icon.
- Deletion. If you delete your account, we delete your photos within 30 days.
Reports and blocks
If you report a player, we keep the report (who, what, and any note you add) so our team can review it. After an account is deleted, its identifier is removed from reports we keep for safety. Blocking someone is stored on your account and removed when your account is deleted.
Usage analytics
We use PostHog (US cloud) to see which screens are used and how the game is doing: app opens and installs, screens viewed, taps on game actions, and outcomes such as a scan being accepted or refused. Events are linked to your random account identifier. We do not send photos, pet colours linked to you, your home location, place search text, your display name, pet name or report text. We do not use session replay and we do not collect an advertising identifier.
Technical logs
Our servers keep short operational logs (request method and path, response status, how long it took, and a request identifier) for security and fixing faults. They do not contain photos, request bodies or sign-in tokens.
Who handles data for us
| Provider | What for | What it receives |
|---|---|---|
| Supabase | Database, anonymous sign-in, private photo storage | Account identifier, profile and game data, your home point, accepted photos |
| Railway | Hosts our API server | Requests from the app, including uploads in transit, and the short logs above |
| Anthropic | Looks at a photo you choose to send | The reduced, metadata-free photo |
| PostHog | Product analytics | Events described above, linked to your random account identifier |
| Mapbox | Map tiles and place search | The area of the map you view, the text you type when searching for a place, and your device's IP address |
These providers act on our behalf and have their own privacy terms. Some are based in, or process data in, the United States, so your data may be handled outside the country where you live.
Petory does not show ads, does not sell or rent your data, and does not track you across other companies' apps or websites.
Why we use your data
- To run the game you asked for: your account, your pet, your bag, the map, your photos.
- To keep players safe: name checks, reports, blocks, scan limits and refusing unsafe photos.
- To understand and improve the game, using the analytics above.
- To meet legal obligations and protect our rights.
Deleting your data
You can delete your account in the app: Profile, then Delete account. This permanently deletes:
- your account and profile, your pet, its home location, progress, badges, follows and blocks, your items and Photodex, and your scan records;
- your photos, which we remove within 30 days;
- your analytics profile at PostHog, where we are able to request it.
We keep reports filed by or about you for safety review, with your identifier removed. Copies in provider backups can remain for a short period before they expire.
If you cannot open the app, write to support@thetwentylabs.com and we will help.
Your choices and rights
You choose whether to take photos, whether your pet is Public or Private, and whether to keep your account. Depending on where you live, you may also have the right to ask for a copy of your data, to correct it, to delete it, to object to or restrict some uses, and to complain to your local data protection authority. Email support@thetwentylabs.com and we will answer within a reasonable time. Because accounts are anonymous, we may ask you to show you control the account before we act on a request.
Security
Traffic between the app and our servers is encrypted. Photos are stored in private storage that only our server can read. The server key for the photo analysis is never in the app. No system is perfectly secure, and we cannot promise it.
Changes to this policy
If we change what we do with your data, we will update this page and its effective date, and for material changes we will tell you in the app before they apply.
Contact
Twenty Labs
support@thetwentylabs.com