Privacy Policy
Version effective from 2026-09-24 · Data controller: PetPal s.r.o.
The data controller is PetPal s.r.o., company ID (IČO) 30044090, VAT ID (DIČ) CZ30044090, with its registered office at Korunní 2569/108, Vinohrady, 101 00 Praha 10, Czech Republic, entered in the Commercial Register maintained by the Municipal Court in Prague, file no. C 455867, data box ID (ISDS) q5rtpmg. Contact: [email protected].
On 24 September 2026 the controller changed from the founder as an individual to PetPal s.r.o.; existing accounts continue under the same terms.
What personal data we process
| Data category | Legal basis | Retention |
|---|---|---|
| Account data (email, name, date of birth) | Art. 6(1)(b) GDPR — performance of a contract | Duration of the account + 14 days |
| Pet profile data (name, species, photo) | Art. 6(1)(b) GDPR | Duration of the account |
| Health records (vaccinations, visits) | Art. 6(1)(b) GDPR | Pseudonymised after account deletion |
| Push tokens and device settings | Art. 6(1)(b) GDPR | Duration of the account |
| Analytics data (PostHog — no PII) | Art. 6(1)(f) GDPR | 24 months |
Data processors
We share your data solely with the following processors:
- Supabase — database, authentication, storage (EU, Ireland, AWS)
- Cloudflare — network protection and CDN (EU/global, Standard Contractual Clauses)
- Hetzner — website and CMS hosting (EU, Germany)
- Resend — transactional emails (USA, EU Standard Contractual Clauses)
- Loops — lifecycle and marketing emails (USA, EU Standard Contractual Clauses)
- PostHog — product analytics (EU Cloud)
- Sentry — error monitoring (USA, EU Standard Contractual Clauses)
- RevenueCat — in-app subscription management (USA, EU Standard Contractual Clauses)
- Stripe — web payments (USA/EU, EU Standard Contractual Clauses)
- Apple, Google — app distribution and store payments (under their own terms)
Your rights
Under the GDPR you have the right of access, rectification, erasure, portability and restriction of processing.
Send requests to: [email protected]
Supervisory authority: Office for Personal Data Protection (ÚOOÚ), Prague; users in Slovakia may contact the Office for Personal Data Protection of the Slovak Republic (ÚOOÚ SR), Bratislava.