← Mewbi

Privacy Policy

Updated · 23 October 2026

Operator: xuejian zhang, 29 PASIR RIS GROVE, Singapore
Privacy contact: buddy@lingo-bear.com

Desktop companion and optional screen search

Mewbi for Mac stores its preferences, name and relationship records on your Mac. Accessibility and local visual checks support window-edge behavior; local perception does not upload screenshots. Only an explicit finder-glasses scan, after consent, sends the selected window or screen snapshot and query through our service to TypeSafe for analysis. Our proxy does not store or log screenshots, queries or answers; minimal request and usage counters support rate limits and cost controls. An optional personal provider key is encrypted with the operating system’s secure storage. Cloud features can be unavailable without affecting local companionship.

1. Free browser use

You can use the free cat without an account. Its name, relationship memories, site display preferences and interaction counts are stored in your browser. The extension uses page layout, visibility, motion and pointer position to place and animate the cat. It does not send page text, form contents, image pixels or browsing history to our commerce service.

2. Account, purchases and restoration

The browser extension no longer offers new item purchases. Desktop email accounts are separate from the retired extension accounts. New desktop purchases remain closed. It verifies email codes in the app, uses Resend to deliver them and Stripe to process checkout, and stores email, hashed sessions, order and refund records and up to three opaque device activation IDs in Cloudflare D1. Codes are stored as short-lived keyed digests. We also store session client/device associations, activation and last-sync times, and security/support events without raw IP addresses. Email delivery records use keyed recipient digests and provider message IDs; permanent bounces and complaints can suppress further sends. Desktop session tokens last 90 days and can be rotated within a 180-day absolute lifetime; website sessions last two hours; expired sessions have a seven-day cleanup buffer. Delivery details normally expire after 30 days, aggregate sign-in counters after 90 days, and security events after 180 days through bounded cleanup. Suppression records remain until reviewed or no longer needed. The app encrypts its session with macOS secure storage and keeps a device-bound signed offline license; purchase recovery does not upload your relationship memories. The following provider-account details describe restoration of existing browser grants.

If you choose to buy or restore an item, Google or Apple provides an account identifier and, when available, an email address. We store the provider, identifier, email, hashed session token, order records and item entitlements in Cloudflare D1. We use these records to authenticate you, fulfill purchases, prevent duplicate delivery, restore items and handle support, refunds and fraud. Google and Apple accounts are kept separate even if they use the same email.

3. Payments and service providers

Stripe hosts checkout and processes payment details. We do not receive or store full card numbers. Stripe sends us payment and refund status so we can grant or remove item access. Cloudflare hosts the website, API and database; Google and Apple handle sign-in. These providers may process data outside Singapore under their own terms and safeguards.

4. Optional usage statistics

Interaction counts with a random installation ID can be sent only after you turn on “Help improve” and only when an analytics endpoint is configured. This setting is off by default. You may turn it off at any time; queued statistics are cleared. The extension does not include page content or website addresses in those events.

5. Retention and your choices

Local data can be removed through your browser or by uninstalling the extension. For desktop, signing out removes the online session while preserving an existing permanent offline license. Releasing this Mac removes its matching local license. Account deletion removes email and online recovery access; historical payment records remain linked to a non-login account identifier. Other offline copies cannot be removed remotely. Changing email requires fresh proof of the current email and verification of the new email, and signs out all sessions. The legacy extension retains its existing sign-out behavior. We retain account, order and entitlement records while needed to provide purchased items, resolve disputes or meet legal obligations; expired sign-in states and sessions may be removed. Contact us to request access, correction or deletion of personal data. Deleting an account can affect access to purchased items, subject to applicable rights.

6. Security and updates

We use HTTPS, restrict access to the commerce database and store session tokens as hashes on the server. Our use of information received from Google APIs adheres to the Chrome Web Store User Data Policy, including its Limited Use requirements. No system is perfectly secure. We may update this policy when the product changes and will post the new effective date here. For privacy questions or complaints, email buddy@lingo-bear.com.