Who we are
PawCare is operated by ⟦to be completed⟧ (⟦to be completed⟧, tax code ⟦to be completed⟧), the data controller under the EU General Data Protection Regulation (GDPR). Contact for anything in this policy: ⟦to be completed⟧.
Data we collect
- Account: email address, display name, optional city, and your sign-in credentials (passwords are stored hashed by our authentication provider).
- Your pets: profiles, photos, weight, vaccinations, medications, allergies, conditions, appointments and health records that you enter.
- Content you publish: community posts and comments, lost & found reports (including any address or contact detail you choose to add), adoption and shelter listings, and messages you send to other users.
- Location: your device location, only while you use a feature that needs it (map, lost & found reports, feeding stations, GPS-tracker setup). We do not track your location in the background.
- Photos and camera: images you take or choose in order to attach them to pets, reports, listings or AI requests.
- GPS tracker data: positions sent by a tracker you connect to a pet.
- AI requests: the text and photos you send to the AI features, together with the pet data needed to answer.
- Device and technical data: a push-notification token (if you allow notifications), your language and cookie choices, and diagnostic logs that keep the service running and secure.
Why we use it, and on what legal basis
- To provide the service you asked for — accounts, pet records, reminders, the map, reports, adoption, messages (contract, Art. 6(1)(b)).
- To send push notifications and to use your location, camera and photos when you allow them (consent, Art. 6(1)(a) — you can withdraw it at any time in your device settings).
- To run optional analytics, only if you accept analytics cookies (consent).
- To keep the service safe: preventing abuse and spam, handling reports of illegal or harmful content, and enforcing our Terms (legitimate interest, Art. 6(1)(f)) and complying with legal obligations, including those in the EU Digital Services Act (Art. 6(1)(c)).
Who receives your data
We use service providers who process data on our behalf:
- Lovable Cloud / Supabase — hosting, database, file storage and authentication.
- Google (Gemini models, through the Lovable AI Gateway) — to generate answers for the AI features. Photos and text you send to an AI feature are transmitted to this provider. Do not upload images you would not want processed this way.
- Google Firebase Cloud Messaging — delivery of push notifications to Android devices.
- OpenStreetMap and other map-tile providers — map images are fetched from their servers, which therefore see your IP address.
- Analytics provider — only if you accept analytics cookies.
Content you publish (posts, lost & found reports, adoption listings) is visible to other users as described in the app. We never sell your personal data.
Transfers outside the EU/EEA
Some providers above are based in, or may process data in, the United States. Where that happens we rely on the safeguards those providers offer for such transfers, such as the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.
How long we keep it
- Account, pet and content data: until you delete it or your account. Deleted content is removed from our active systems within 30 days.
- Reports about content and the decisions taken on them: for as long as needed to handle appeals and to meet legal obligations.
- Daily AI-usage counters: kept only to apply the daily limit.
Your rights
You have the right to access, rectify, erase, restrict and port your data, to object to processing based on legitimate interest, and to withdraw consent at any time. You can:
- download your data and delete your account yourself in the app (Settings → Your data);
- or write to ⟦to be completed⟧ and we will answer within one month.
You also have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the authority of your country of residence.
Children
PawCare is not intended for anyone under 16. If you believe a child has created an account, contact us and we will delete it.
Security
Data is encrypted in transit, access to it is restricted by per-user security rules, and sensitive contact details are only revealed to the people entitled to see them. No system is perfectly secure; if a breach affecting you occurs we will notify you and the authorities as the law requires.
Changes
We will update this page when our practices change and note the date at the top. Material changes will also be announced in the app.