PetPal Privacy Policy
Last updated: February 20, 2026 (Europe/Lisbon)
This Privacy Policy explains how PetPal collects, uses, stores, and protects personal data when you use the PetPal Android app and related Firebase services.
Data Controller: Tiago Jesus Email: tmfjs13@gmail.com
1. Scope
This Policy applies to PetPal on Android and its backend services (Firebase Authentication, Firestore, Cloud Storage, Cloud Functions, Firebase Cloud Messaging, and Crashlytics).
2. Data We Process
- Account data: email, Firebase UID, and profile fields such as name.
- Pet profile data: pet name, species, breed, birth date, weight, notes, and profile photo URL.
- Pet care records: health events (vaccination, medication, vet visits), notes, reminders, and related status data.
- Pet documents: uploaded files/photos and metadata (file name, type, upload date, optional notes).
- Notification data: Firebase Cloud Messaging token, token update timestamp, notification route metadata.
- Subscription data: Google Play product ID, subscription tier, expiry date, trial status, and subscription audit events.
- Location data (optional feature): city name and/or device latitude/longitude only when you use Safe Walk location features.
- Diagnostics: crash and stability diagnostics through Firebase Crashlytics.
3. How We Use Data (GDPR Legal Bases)
| Purpose | Data | GDPR Basis |
|---|---|---|
| Account access and authentication | Email, UID, profile basics | Contract (Art. 6(1)(b)) |
| Pet management and reminders | Pet records, events, notes, settings | Contract (Art. 6(1)(b)) |
| Document and photo storage | Uploaded files and metadata | Contract (Art. 6(1)(b)) |
| Push notifications and reminder delivery | FCM token and app routing metadata | Legitimate interests (Art. 6(1)(f)); consent/OS permission where required |
| Subscription entitlement verification | Product ID, purchase token, subscription state | Contract (Art. 6(1)(b)); legal obligations for accounting/compliance where applicable (Art. 6(1)(c)) |
| Safe Walk weather and location-based recommendations | City and/or latitude/longitude, weather responses | Consent (Art. 6(1)(a)) when using device location; contract (Art. 6(1)(b)) for requested feature |
| Security and reliability | Crash diagnostics, technical error data | Legitimate interests (Art. 6(1)(f)) |
4. Data Sharing and Processors
PetPal uses trusted processors to operate the service:
- Google Firebase: Auth, Firestore, Storage, Cloud Functions, FCM, Crashlytics.
- Google Play Billing: subscription purchase, renewal, cancellation, and payment processing.
- Google Weather/Geocoding APIs: Safe Walk weather forecast and location search.
PetPal does not store your full payment card details. Card processing is handled by Google Play.
5. Data Retention
- Account, pet, events, notes, settings, and document metadata: kept while your account is active, or until deletion is requested.
- Uploaded files in Cloud Storage: kept while linked records exist, or until deleted by user/request.
- FCM token: updated regularly and removed on logout where possible.
- Subscription audit records: retained for fraud prevention, compliance, and support for a limited business-necessary period.
- Safe Walk weather cache in backend: short-term cache (target TTL around 45 minutes).
- Crash diagnostics: retained according to Firebase Crashlytics retention controls.
6. Your Rights (GDPR)
You may request access, correction, deletion, restriction, objection, and data portability where applicable. You may also withdraw consent for location usage at any time in your device/app settings.
You can delete your account in-app at Settings -> Session -> Delete account.
To request deletion or exercise your rights, email tmfjs13@gmail.com with the subject "PetPal Privacy Request".
7. Security Measures
- Firebase Authentication for access control.
- Firestore and Storage security rules scoped by authenticated user ownership.
- App Check and token-based backend access controls for protected endpoints.
- Transport encryption (HTTPS/TLS) for network communication.
8. Children's Privacy
PetPal is not directed to children under 13. If you believe a child has provided personal data without appropriate authorization, contact us so we can remove it.
9. International Transfers
Service providers may process data in regions outside your country. We rely on provider safeguards and contractual commitments where required.
10. Changes to This Policy
We may update this Policy when product or legal requirements change. The "Last updated" date above indicates the current version.
11. Contact
Tiago Jesus
Email: tmfjs13@gmail.com