Privacy policy

Who we are

BoopBoops is run by No Fear Tech Ltd, company number 16758357, registered office 6 Mallard Way, Dereham, Norfolk, NR19 1FJ. We’re the controller of the personal data described here. Email hello@boopboops.co.uk about anything on this page.

What we collect and why

Your pet photos and creations

When you upload a photo, we use it to make what you asked for: the thought bubble, the portrait or the card. The original photo is deleted within 24 hours. The finished creation is kept so you can download it, share it or order it:

• without an account, for 30 days, then it’s deleted;
• with an account, until you delete it or close your account.

Creations are private. Nobody else can see one unless you share its link, and you can stop sharing at any time. We don’t use your photos or creations to train AI, and we won’t use them in our own marketing unless you’ve said yes first.

Our lawful basis is contract: we need the photo to make the thing you asked for.

Protected recovery copies can retain deleted account details and finished creations for up to 14 days. We don’t include original uploads in artwork backups. Recovery copies aren’t available through your account or public share links; they expire automatically. If we need to restore one, we must reapply deletion requests before making restored creations available.

Your editable creations can also keep a private, clean artwork layer as part of the finished creation. Meme layers keep the fitted photo used in the finished meme. These layers let you change captions, lettering or card framing without sending anything to an AI service again. They stay private, including when you share your finished creation, and are deleted with that creation.

You can also supply a nickname, personality, habits or an anecdote. Those details stay in your open tab until you make a creation, when we send them to Anthropic with your photo to personalise the writing. We don’t keep a separate profile of these anecdotes. Your finished creation retains private studio choices and wording so you can reopen its brief from your account; deleting the creation deletes those notes too. These notes don’t include your original photo and never appear in the public share-link details. Your anecdotes may appear in the finished artwork or words, so keep sensitive information out and check the result before sharing. Lawful basis: contract.

Your email address

If you make an account or place an order, we use your email to sign you in, send your order confirmation and delivery updates, and answer you if you write to us. We only send marketing emails if you’ve opted in, and every one has a one-click way out. Lawful basis: contract, and consent for marketing.

Orders and delivery

For printed gifts we need your name and delivery address, which we pass to our print partner so they can post your order. Card payments are handled by Stripe; we never see or store your full card number. We keep order records for six years because the law requires it for tax. Lawful basis: contract and legal obligation.

Your help-desk conversations

When you ask for help in your account, we keep your email, question, replies and any linked creation or order number together. Authorised BoopBoops staff can read the conversation and keep private notes so your question can be checked properly. Your messages and those notes aren’t sent to an AI service or published with your creations. Replies appear in your account; this service does not send an email notification.

Open conversations stay available while your question needs attention. Resolved conversations and their private notes are deleted after 90 days without another update. Replying reopens the conversation. Your payment and order records have their own retention period, explained above. Please leave passwords, card details and sensitive personal information out of your messages. Lawful basis: contract for help with your purchase or account, and legitimate interests in answering other enquiries and recording how they were handled.

Keeping BoopBoops working and fair

To stop people abusing the free creation or attacking BoopBoops, we count requests against a scrambled (hashed) version of your IP address. We never store the address itself, and the counts are deleted after 30 days. Our hosting providers keep short-lived server logs for security. Lawful basis: legitimate interests in keeping the service secure and available.

Analytics, only if you say yes

With your permission we use our own visitor statistics and Google Analytics to understand page visits, traffic sources, broad device categories and studio activity. Our statistics use random browser and session identifiers, kept separately from your account. We store no pet photos, names, messages or raw IP addresses in these reports. Private link identifiers and URL queries are removed. Our visitor records are deleted after 90 days; withdrawing consent removes our analytics identifiers from your browser and stops further collection. Google provides its own aggregate reports, including approximate countries and cities. We don’t use advertising cookies or record your screen or keystrokes. If you say no, visitor analytics does not run. You can change your mind any time from Cookie settings at the bottom of every page. Lawful basis: consent. More on the cookies page.

Who helps us

These companies process personal data for us, under contracts that only let them use it to provide their service to us:

• netcup GmbH (Germany): the servers that run our database, our creation service and the stored images.
• Vercel Inc. (USA, global network): hosts the website itself.
• Anthropic PBC (USA): uses your photo and any optional pet details to write captions and studio scripts.
• Features & Labels Inc. (fal) (USA): makes the illustrated scenes and portraits, and cuts your pet out of the photo.
• ElevenLabs Inc. (USA): makes selected spoken replies and songs, and runs live pet conversations. Live calls use your microphone audio to answer you. Your account keeps the transcript and the pet’s recorded replies; it does not keep your microphone recording.
• Stripe (UK and Ireland): takes payments.
• Prodigi Group Ltd (UK): prints and posts gifts. Receives your name, address and the creation.
• Resend Inc. (USA): sends our emails, such as sign-in links and order confirmations.
• Google Ireland Ltd: analytics, only if you’ve said yes.
• Purelymail (USA): our email inbox, so it holds anything you send us.

Where data goes to the USA, it’s protected by the UK Extension to the EU-US Data Privacy Framework or by the UK’s International Data Transfer Addendum. We never sell personal data, to anyone.

Your rights

In your account settings, you can download your saved account records, request a change of sign-in email and ask the help desk to review account closure. Your artwork and recordings have separate download buttons in your collection. A closure request leaves your account open while unfinished creations, outstanding orders, unused credits and required financial records are checked. We confirm what has been done through your private help conversation.

You can ask us to:

• give you a copy of the personal data we hold about you;
• correct anything that’s wrong;
• delete your data (we’ll keep only order records the law makes us keep);
• stop or limit how we use it, or move it to another service.

Email hello@boopboops.co.uk from the address you used with us. We’ll answer within one month. If you’re unhappy with how we’ve handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk, though we’d like the chance to fix it first.

Children

BoopBoops is for people aged 13 and over, and you need to be 18 or over to buy anything. We don’t knowingly collect data from children under 13; if you think we have, email us and we’ll delete it.

Changes

If we change how we use your data, we’ll update this page and its date. If the change is significant and we have your email, we’ll tell you before it takes effect.