Legal
Privacy Policy
What we collect, why we collect it, who we share it with, and how to get it back or have it erased.
Last updated: 11 August 2026
This Privacy Policy explains how Petifly ("we", "us", "our") collects, uses, and shares personal information when you use the Petifly mobile application and related services (the "App"). By using the App you agree to the practices described here.
Data controller / contact: Petifly — support@petifly.pet. Petifly operates primarily in Cyprus and the EU; we process personal data in accordance with the EU General Data Protection Regulation (GDPR).
1. Information We Collect
We only collect information needed to provide the App's features. You provide most of it directly.
| Category | Examples | Required? |
|---|---|---|
| Account & identity | Email address and password, or Google Sign-In (authentication is handled by Firebase); first and last name | Email & password or Google required; name optional |
| Contact details | Phone number, postal/shipping address | Optional (address required for shop delivery) |
| Pet information | Pet name, species, breed, age, weight, photos, and health records you choose to add (vaccinations, medications, allergies, medical conditions, microchip ID) | Optional |
| Location | Precise (GPS) or approximate location, only when you use location-based features (nearby vendors/events, lost-pet SOS, maps) | Optional |
| Photos | Images you upload for your profile, pets, community posts, or SOS reports | Optional |
| User content & messages | Reviews, in-app chat messages, community posts, pet journal entries, and messages to the in-app pet assistant | Optional |
| Orders | Products ordered, order history, delivery address | Only if you place an order |
| Notifications | If you enable push notifications, your device's push subscription and browser user-agent string | Optional |
Payments: The App does not collect or store your card or bank details. When a paid purchase or subscription is available, payment is completed on our payment provider's secure hosted page; we receive only confirmation and order details, never your full card number.
2. How We Use Your Information
- Create and manage your account and authenticate you securely.
- Provide core features: pet health records, bookings, shop, community, events, lost & found, and the pet assistant.
- Show nearby vendors, events, and map results based on your location.
- Enable lost-pet SOS alerts and the smart pet tag reunification feature.
- Process orders and deliver items to your address.
- Send notifications you have enabled.
- Maintain safety, prevent abuse, and comply with legal obligations.
Legal basis for each purpose
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Creating your account and providing the App's features | Performance of a contract — Art. 6(1)(b) |
| Processing payments and keeping tax/accounting records | Contract and legal obligation — Art. 6(1)(b) and (c) |
| Using your location for nearby results and maps | Consent, given via the device permission prompt and withdrawable in device settings — Art. 6(1)(a) |
| Marketing emails and promotional notifications | Consent, given by the optional tick box at signup or in Profile → Privacy & data — Art. 6(1)(a) |
| Security, fraud prevention, debugging and defending legal claims | Legitimate interests — Art. 6(1)(f) |
AI features
The pet assistant, care advice, and vendor copilot send the text of your request — and, where relevant, details of the pet it concerns — to a third-party AI provider (OpenAI, Anthropic, or Google) so an answer can be generated. These providers act as our processors and are contractually barred from using your data to train their models. We store your prompts and the answers so you can see your history; you can delete them in the app and they are included in your data export. AI answers are general guidance only, are never a substitute for veterinary advice, and are not used for automated decision-making with legal or similarly significant effects (Art. 22).
3. How We Share Information
We do not sell your personal data. We share it only as needed to run the App:
| Recipient | What & why |
|---|---|
| Google Firebase Authentication | Your email and password to authenticate your account. If you choose Google Sign-In, Google shares your Google account email and basic profile with us to create or access your account. |
| Our backend servers & cloud storage | Processes and stores the data you enter, including uploaded images, on our behalf. |
| Mapping services (OpenStreetMap and map-tile providers) | When you use location search or maps, your coordinates and search queries are sent to these services to return results. |
| Payment provider (hosted checkout) | If you make a purchase, payment is processed on the provider's secure page. |
| AI providers (OpenAI, Anthropic, Google) | The content of your requests to the pet assistant, care advice, and vendor copilot, so an answer can be generated. They may not train on your data. |
| Other users (public content) | Reviews and community posts are visible to other users. If you create a smart pet tag, the contact details and pet info you add to it are shown publicly to anyone who scans the tag, to help reunite you with your pet. |
| Shelters | If you submit an adoption application, the details are shared with the relevant shelter. |
| Legal authorities | Where required by law. |
4. Transfers Outside the EEA
Some of our processors — including Google, Stripe, OpenAI, and Anthropic — process data in the United States. Those transfers rely on the European Commission's Standard Contractual Clauses, and on the EU–US Data Privacy Framework where the provider is certified under it. Contact us for a copy of the safeguards in place.
5. Data Retention
| Data | How long we keep it |
|---|---|
| Account and pet data | While your account exists; erased or anonymized normally within 30 days of deletion |
| Bookings, orders and invoices | Up to 7 years, as tax law requires — anonymized once your account is deleted |
| AI conversations | Until you delete them, or until your account is deleted |
| Consent records | Life of the account plus 3 years, so we can demonstrate the consent you gave (Art. 7(1)) |
| Security and audit logs | Up to 12 months |
6. Your Rights & Account Deletion
Under the GDPR you have the right to access your data, correct it, erase it, restrict or object to how we use it, receive it in a portable format, and withdraw any consent you have given. Withdrawing consent is as easy as giving it and does not affect processing carried out beforehand.
You can exercise most of these yourself in the app: Profile → Privacy & data lets you download a full export of your data and manage your marketing consent, and Profile → Delete account permanently removes your account — see our Delete your account page. For anything else, email support@petifly.pet; we respond within one month.
If you believe we have handled your data wrongly you can complain to your national data protection authority. In Cyprus that is the Office of the Commissioner for Personal Data Protection (dataprotection.gov.cy); if you live elsewhere in the EU you may complain to your own country's authority.
7. Cookies
The App stores a small amount of data on your device to keep you signed in and remember your preferences. These are strictly necessary for the service to work and therefore do not require consent. We do not use advertising or third-party tracking cookies, and we do not profile you across sites.
8. Security
All data is transmitted over encrypted HTTPS connections. Authentication is handled by Firebase and passwords never reach our servers. Access to production data is limited to staff who need it. If a breach ever puts your rights at risk, we will notify the supervisory authority within 72 hours and tell you directly where required.
9. Children
The App is not intended for children under 16. We do not knowingly collect data from children under that age; if you believe a child has given us data, contact us and we will delete it.
10. Changes
We may update this policy. If a change materially affects you, we will ask you to review and accept the new version the next time you open the app, and update the "Last updated" date here.
11. Contact
Questions about this policy or your data: support@petifly.pet.