Privacy Policy

Account information: your name, email address, and a securely hashed password (or, if you sign in with Google, your basic Google profile). We also record the policy version and time of your latest terms/privacy acknowledgment, which includes your confirmation that you are at least 18.

Private documents: original documents uploaded in the private Documents section, their titles, filenames, uploader details, and owner review status are stored in our database. Downloads require owner or medical access. Uploading here does not send the file to AI. Owners can delete these documents; their file contents are removed from the active database with the document or owning pet/account, subject to backup retention. The JSON export includes metadata and download links; download original files separately before deleting your account.

Pet information & health records: the pet profiles, photos, memories, and health records you create — including vaccinations, medications, vet visits, allergies, weight, microchip numbers, insurance details, and notes.

Family, vet & kid profiles: people you invite to a pet, verified veterinary accounts you connect, and parent-managed kid profiles (which do not have their own logins — see “Children” below).

Location: an optional home location you set for nearby lost-pet alerts, and your device location when you grant permission and use a location feature. Coordinates may be precise depending on your device settings. You may also enter locations manually. We do not track your location in the background.

Contact & communications: an optional mobile number for text alerts, and messages you send us or other users (e.g. booking messages, support requests).

Payment & order information: when you subscribe, book care, or buy merch, payments are processed by Stripe. We do not store your full card number. For merch orders we store your order details and the shipping address you provide at checkout.

Usage & device data: basic analytics about how the app is used (pages visited, performance), error reports and standard technical data such as IP address and browser type. When you enable push notifications, we store a notification endpoint or device token with your account to deliver messages to that device. Native iOS push delivery uses Firebase Cloud Messaging and Apple Push Notification service when configured.

To provide and operate PetPass; secure your account and prevent abuse; process payments, bookings, and orders; send the notifications and emails you enable (booking updates, reminders, order confirmations, and opt-in alerts); respond to support requests; understand and improve the product; and comply with legal obligations.

Service providers include Railway (application hosting), Neon (database), Stripe (payments), Printify and configured tag suppliers (fulfillment and shipping), Resend (email), Twilio (SMS), Vercel (uploaded images, analytics and performance), and Sentry (error monitoring). We share information needed to operate the relevant service.

AI features: with your explicit permission, document scanning sends the selected document image to Anthropic. The AI assistant sends your conversation and relevant pet records and booking details to Anthropic to respond. Images and messages may contain personal information. You can use manual record entry without these features. AI output may contain errors and should be reviewed before use.

People you choose to share with: family members, care providers, and verified vets you invite get access to the specific pet information you grant them. You control and can revoke this access.

Public lost-pet posters: when you report a pet lost, the details you put on the poster become publicly viewable so people can help (see below).

Affiliate links: our Shop links out to retailers (e.g. Amazon, Chewy) through affiliate programs; those retailers' own privacy policies apply when you visit them.

Legal & safety: we may disclose information if required by law or to protect the rights, safety, and security of PetPass, our users, or the public.

We do not sell your mobile phone number or SMS consent information for marketing. Optional affiliate services may process browsing or referral information as described under “Cookies & analytics.”

We do not sell, rent, or share your mobile phone number or SMS opt-in data with third parties or affiliates for their marketing or promotional purposes.

Text alerts are sent only after you explicitly opt in on your dashboard. Message frequency varies with reports of nearby lost pets and reports that your pet has been found. Message and data rates may apply. Reply STOP to any text to opt out, or HELP for help. You can also turn alerts off anytime from your account settings.

When you report a pet lost, the pet photo, last-seen location, microchip information, notes, reward, and contact details you enter become publicly viewable. A phone number or home address you put in those public fields will be visible. Your account's private alert location and SMS number are not automatically published. Marking the pet found removes its lost poster, but copies others have saved may remain.

Public cards: enabling a shareable card publishes basic pet profile details, record counts, badges, and streaks. It does not publish individual medical records or emergency contact details. Publicly shared photos and albums may be accessible to anyone with their link. Uploaded photos are stored at public image URLs; avoid uploading images containing sensitive personal information.

PetPass is intended for adults (18+). We do not knowingly collect personal information directly from children under 13. “Kid profiles” are created and controlled entirely by a parent or guardian from their own account; children do not have their own logins, and any updates a child adds are made through the parent's account. If you believe a child has provided us information directly, contact us and we will delete it.

We use essential sign-in cookies, Vercel Web Analytics and Speed Insights, and a first-party visitor identifier (“pp_vid,” stored for up to one year) to count visits and site activity. When an affiliate integration such as Skimlinks is enabled, it may process browsing, cookie, device, and referral information to attribute retailer purchases. Retailer sites have their own policies. Browser settings let you manage cookies; disabling essential cookies can prevent sign-in.

Skimlinks' affiliate tracking script is disabled in the PetPass iOS app. First-party usage analytics and operational diagnostics still help us operate and improve the app; they are not used to track you across other companies' apps or websites for advertising. If you open a retailer's website, its own policies and choices apply.

We keep account information while your account is active and as needed for service, security, and legal obligations. Account deletion removes your account and related database records. Uploaded image files, service-provider records, backups, and copies previously shared with others may persist separately; contact us to request review and removal of those copies where applicable. Payment processors may retain transaction information under their own legal obligations. We do not promise immediate erasure from every third-party system.

From your dashboard, under “Your data & account,” you can export a copy of your data at any time or permanently delete your account. You can also update your profile, manage notification and alert preferences, and revoke access you've granted to others. Depending on where you live, you may have additional rights (such as access, correction, or deletion) — contact us to exercise them.

You can also request deletion from our account deletion page, including after uninstalling the app. The dashboard export includes core account, pet, health, booking and merch data; contact us for other records associated with your account. We may verify your identity before responding.

We protect your information with industry-standard measures, including encrypted connections and hashed passwords. No system is perfectly secure, but we work to safeguard your data and encourage you to use a strong, unique password.

PetPass is operated in the United States, and your information is processed there. If you access PetPass from outside the U.S., you understand your information will be processed in the U.S., where privacy laws may differ from your own.

We may update this policy from time to time. When we make material changes, we'll update the date above and, where appropriate, notify you in the app or by email.

Questions about your privacy? Email support@chimaura.com.