Privacy Policy

Last updated: August 14, 2026

1. Controller

2. In short

PetOS is an app for pet owners (AI triage, pet profiles, services, map, travel mode, community). We only collect the data the app needs to function. No tracking, no advertising, no selling of data. This website is static and sets no cookies; it only stores your theme preference (light/dark) locally in your browser.

3. Data we process

• Account: email address (sign-in via email code), optionally your name.
• Pet profiles: name, species, breed, birth date, weight, allergies, medications, microchip number, vaccinations and photos of your pets — entered by you.
• Assistant: the texts you send to the assistant (e.g. symptom descriptions), including conversation history.
• Bookings: booked services, appointments, reviews and payment status (Stripe processes payments; RevenueCat manages subscription status for Premium — each once live in the stores).
• Location: only with your explicit permission and only at the moment of use — for the map, finding nearby emergency vets and travel mode. Coordinates are sent to our backend to answer queries but are not stored permanently.
• Push token: a device token (Expo Push) so we can remind you about vaccinations and booking changes — only with your permission.
• Community: posts, replies and likes you publish.

4. Where your data lives and who processes it

Our backend runs on Convex in the EU region (AWS eu-west-1, Frankfurt). Individual features use additional services:

• OpenAI (USA): the assistant answers your requests via the OpenAI API; your inputs are transmitted to OpenAI for that purpose. We use the API without training on your data (OpenAI API data processing terms).
• Expo Push (Expo/Exponent, USA): delivery of push notifications via Expo's push service to Apple/Google.
• Stripe (USA): payment processing for marketplace bookings (once active).
• RevenueCat (USA): management of the Premium subscription (once active).

For transfers to third countries (USA) we rely on EU standard contractual clauses or the providers' EU-US Data Privacy Framework certification.

5. Legal bases

• Contract performance (Art. 6(1)(b) GDPR): account, pet profiles, bookings.
• Consent (Art. 6(1)(a) GDPR): location access, push notifications — revocable anytime in your device settings.
• Legitimate interest (Art. 6(1)(f) GDPR): operating, securing and improving the service.

6. Retention and deletion

We keep your data for as long as your account exists. On request to business@moinsen.dev we delete your account and all associated data within 30 days, unless statutory retention obligations apply.

7. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR). Consents granted can be withdrawn at any time with future effect. You also have the right to lodge a complaint with a supervisory authority — for Hamburg: Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit, Ludwig-Erhard-Str. 22, 20459 Hamburg, Germany.

8. A note on health questions

The assistant provides an initial assessment and does not replace a veterinary diagnosis. Please avoid entering personal data of third parties in assistant requests.

9. Changes

If we change this policy, we will publish the new version here and update the date above.