Privacy Policy

Last updated: November 7, 2026

About Papug

Papug is an independently operated bird-care service. This policy covers papug.app, the Papug application and Papug Voice at voice.papug.app. For questions, privacy requests, or information about the operator, email support@papug.app.

What we collect and why

Account details: your email, account ID, preferences, and profile details you provide. These let us manage your account and keep it secure. If you use third-party sign-in, we receive the information shared by that provider. If you tell us what you would like from Papug (for example care, taming or talking), we store your answer with your account and, while product analytics may run for your account, send it to Amplitude as a profile property; it is deleted with your account.
Your content: bird profiles, care and household information, observations, notes, photos, and videos. We store this information to provide the features you use.
AI conversations: when you use the assistant, we process messages, relevant bird records, replies, and remembered context. Voice input is sent for transcription. The transcript you send becomes part of your chat; the recording is not saved as chat history. We store a loudness summary of each recording (how much of it was silence, as a few numbers), never the audio.
Talking phrases: when you save a phrase in Training, we store its short recording (your voice or a clip of your bird) and the words you typed, privately in your account. If you choose a bird voice, your recording is changed into that voice on your device each time it plays. Only you can play it. The recording is never sent to the assistant or any AI service; the assistant sees only the words you typed. We also keep when each phrase was played, for how long, and how it ended, so playback limits can be applied. When you mark that your bird said a phrase, we keep that dated mark with the kind of phrase it was (not the recording or the words), also after the phrase is deleted. Phrases are deleted when you delete them; phrases, playback records and marks are all deleted with your account.
Quiz and support information: answers, waitlist details, feedback, and messages you send us, including messages sent in the app with technical details attached. We use these to provide results, respond to requests, and send updates you requested.
Usage and technical information: page visits, feature interactions, timestamps, device and browser details, IP addresses, approximate location, and referral information. These help us understand usage, improve Papug, measure campaigns, and protect the service.

Please avoid including unnecessary personal information about yourself or others in notes, photos, or messages.

Analytics and browser storage

We use first-party analytics and Amplitude to understand which features people use and where they run into problems. Amplitude stores Papug product analytics in the European Union. Events may be linked to an account or device ID; they are not necessarily anonymous. We do not send the content of private notes, messages, transcripts, photos, or videos as product analytics events.

Papug stores some information in your browser, such as session and analytics identifiers. Browser storage is not the same as cookies. You can clear or restrict it through your browser, although doing so may affect sign-in or other features.

So the application can open and show your information without a connection, it keeps on your device a copy of the application itself and of the information you have already viewed in it, such as your birds' records. This copy stays in that browser only, is used only to show you your own information while you are offline, and is removed when you sign out. Clearing the browser's data for Papug also removes it.

Where enabled on the marketing website, Meta and TikTok tools measure advertising visits and conversions. These tools may use cookies and receive identifiers, page visits, conversion events, and hashed contact information for matching. Hashed email addresses are not anonymous. Advertising providers may combine this information with data they already hold.

Opening the Papug application records the page, campaign labels, and referrer the same way the website records a visit. On the sign-in screen the application also records which steps were taken (a code requested, Google sign-in started, the account opened) and how long the screen was open, never your email address or the code; when an account is created, these records are linked to it. When you create an account, the campaign labels and the referring website of the first visit in that browser are saved on the account. While you use the application, it records your sessions on our own servers: when each session starts, how many minutes you were actively using it, and the device type, model where your browser reports one, operating system, browser, language, time zone, screen size class, country, and application version. We also keep a log of when you add, change or remove something in your account and of what kind it was (for example a weight entry or a photo), without its content, so we can see that the service is in use. When an action fails in the application, such as a save that did not go through, we record which feature failed, the kind of error, and the application version, never what you were saving. By accepting our Terms when you create an account, you agree to product analytics of how you use the application. For marketing tools on the website, we ask for consent where required. Email us for help with tracking choices or an applicable advertising opt-out request. Some advertising disclosures may count as a sale or sharing under privacy laws even when no money changes hands. Papug does not currently respond to the legacy browser "Do Not Track" setting.

To protect accounts and the service from abuse, such as several accounts created to repeat a free period, we keep for each account a list of the networks (IP address and country), devices and browsers it has been used from, with when each was first and last seen. To recognise the same browser, the application keeps a random identifier stored in that browser. To spot several accounts of one mailbox, we compare email addresses after removing +tags and, for Gmail, dots. This list is used only for that purpose, is visible only to Papug administrators, and is not product analytics.

Papug Voice

Papug Voice at voice.papug.app plays a phrase you record in a bird's pitch. It works like this:

Microphone and camera: the page asks for the microphone to record your phrase and for the camera when you choose to film. Your recordings, the processed sounds and the videos you film are made and kept on your device. We do not upload or store them. When you share a video, it goes to the app you choose, under that app's terms.
Before you sign in: the page sends us anonymous counts of what happens on it (for example a phrase recorded, a voice played, which voice and what you answered about your bird's reaction, a video made). These counts carry no identifier: no device ID, no cookie ID and no IP address are stored with them, so they cannot be linked to you. The free plays are counted only in your browser's storage.
Purchase: Papug Voice is sold by a merchant of record, a payment company that sells it to you on our behalf and handles payment, tax and refunds. It shares with us your email, the amount, the currency, the country and the order status. It does not share your card details with us.
Account: to use a purchase you sign in with a code sent to your email. A Papug Voice account is not a Papug application account; it holds your email, your purchase and the Terms version you accepted. After you sign in, the same events as above are linked to your account, together with failures the page shows you, so we can fix problems.
Waiting list for a species: if you leave your email to hear when a voice for your bird's species exists, we keep the email and the species until we tell you or you ask us to remove it.

To delete a Papug Voice account, email support@papug.app. We remove the account and its events; the purchase record stays without your email for as long as accounting law requires, and the merchant of record keeps its own copy under its own policy.

Who processes information

We use Supabase for accounts, database services, and file storage; Cloudflare for hosting, delivery, and security; and Amplitude for product analytics (not used by Papug Voice). We also use providers to deliver service emails. Papug Voice purchases are handled by a merchant of record named at checkout.

If you choose AI features, providers such as OpenAI, Anthropic, and Google process the content needed for your request. A fallback provider may be used if another fails. By accepting our Terms when you create an account, you agree to this processing for the AI features you use. Marketing tools are described above.

Your private records and conversations are not public posts. We may disclose information when required by law or reasonably necessary to prevent abuse or protect people and the service. If ownership of Papug changes, information may transfer with the service, subject to applicable law and notice.

Keeping and deleting your data

We keep your account and saved content while your account is active, including bird records, media, and assistant history and memory. Support messages are kept as needed to handle requests; technical and analytics data are kept as needed for security and product improvement. A network, device or browser in an account's protection list is removed 12 months after it was last seen, and the whole list is removed when the account is deleted. When an account is deleted, its session, activity log, and error records stay without any link to the account or to the browser it was used in, keeping only times, kinds of action, and for sessions the country, device type, and application version. Amplitude keeps product analytics for the retention period of the plan we use. That period is the plan's own limit. We do not set a shorter one.

To delete your account and associated personal data, email support@papug.app. You can also ask from inside the app while you are signed in. Sending that message does not delete your account or your information. We may need to verify that the account belongs to you. We handle deletion requests within the time required by applicable law, including relevant requests to our service providers. Deleting the Papug account does not by itself delete product analytics held by Amplitude. When we delete the account, we also ask Amplitude to delete analytics linked to that account ID. Signing out or uninstalling the app does not delete your account.

Limited information may remain where needed to comply with law, resolve disputes, or prevent abuse. Backup copies are removed through the backup cycle and are not used for ordinary product purposes. We may retain data that can no longer identify you. We cannot remove copies that other people have independently made of content you shared.

Your choices

Email us to request access, correction, deletion, or a copy of your personal information, to stop product analytics or AI processing for your account, or to stop marketing emails. Stopping product analytics stops session records and analytics events for your account. The log of what kind of changes you made continues. The protection list of networks, devices and browsers continues, because it protects the service, and errors the application shows you are still recorded without any link to your account. Necessary account and security messages are separate from marketing.

Depending on applicable law, you may also be able to object to or restrict processing, withdraw consent, opt out of certain advertising disclosures, appeal our response, or complain to a privacy authority. We may verify your identity and will explain any limits on your request. We do not penalize you for exercising applicable privacy rights.

Where a legal basis is required, we rely on providing the service you requested, legitimate interests such as security and improvement balanced against your rights, legal obligations, or consent. Withdrawing consent does not undo processing already carried out lawfully.

Security and international processing

We use access restrictions and secure connections to help protect information, but no online service can guarantee absolute security. Our providers may process data outside your country. Where required, transfers need safeguards recognized by applicable law; contact us for details.

Children and updates

Papug is not designed for children. Contact us if you believe a child has provided information we should not hold.

We will update the date above when this policy changes and give additional notice or request consent where required. Contact: support@papug.app.