This Privacy Policy describes how PetsyPlanet (we, us, the Service) collects, uses, and protects your personal data. We operate in compliance with the EU General Data Protection Regulation (GDPR) and applicable national data protection laws.
1. Data Controller
The controller of your personal data is LowekStudio Krystian Rygiel, Polish tax ID (NIP) 9512469584. For data protection matters, contact us at: hi@petsyplanet.pl
2. What data do we collect?
2.1 Data you provide
- Account data: email address, first and last name (optional)
- Pet profile data: name, breed, date of birth, photo, microchip number
- Health data: vaccination history, vet visit records, medications, body weight
- Documents: photos of certificates and test results uploaded by you
- Website form data: email address and message content (contact form, partner inquiries, waitlist sign-up): stored in our database to handle your request
2.2 Data collected automatically
- In-app events (analytics): event and screen name, platform, app version and a random session identifier created at each app launch and never stored. No account, no device identifier and none of the content you type (pet names, medication names, notes). Can be switched off in the app: Settings → Privacy. Deleted automatically after 90 days.
- Anonymous impressions and clicks on partner offers. Without a user or device identifier, so they cannot be tied to a person.
- IP address in server logs, technically required to serve the connection; also used to rate-limit sign-in attempts to the admin panel.
3. Purpose and legal basis for processing
We process your data for the following purposes:
- Performance of contract (Art. 6(1)(b) GDPR): providing the PetsyPlanet service, account management, data export
- Legitimate interest (Art. 6(1)(f) GDPR): improving service quality, app security, analytics
- Consent (Art. 6(1)(a) GDPR): sending push notifications, marketing communications
- Legal obligation (Art. 6(1)(c) GDPR): compliance with tax and legal requirements
4. Partner content and partner notifications
The app is free of charge and funded through partner content, banners and offers from pet shops and services. Such content is labelled as sponsored.
Partners receive neither your personal data nor your pet’s data from us. We settle accounts with them using aggregate impression and click counts, recorded without any user or device identifier, they cannot be linked to an individual (see section 2.2).
We send partner notifications solely on the basis of your separate consent (Article 6(1)(a) GDPR and Article 172 of the Polish Telecommunications Act). This consent is independent of health reminders. Withholding or withdrawing it does not disable reminders about medication, vaccinations, parasite treatment or walks.
You can withdraw consent at any time in the app: Settings → Notifications. Withdrawal takes effect immediately and requires no contact with us. Processing carried out before withdrawal remains lawful. We send partner notifications no more than once every seven days per device.
For this purpose we store your device’s notification token together with a record of whether consent was given. We delete the token on sign-out and on account deletion.
5. How long do we retain data?
- Account and pet health data: for as long as the account exists. Deleting the account erases them immediately and irreversibly, we keep no copy “in case you change your mind”.
- In-app analytics events: 90 days (deleted automatically, daily).
- Website traffic statistics (Google Analytics): per Google’s settings, see the Cookie Policy. Collected only after you consent.
- Security logs and the administrator access log: 90 days (deleted automatically).
- Tax records: 5 years as required by Polish law.
6. Who do we share data with?
We never sell your personal data. We may share it with:
- Supabase Inc.. Database infrastructure provider (EU servers, GDPR-compliant DPA in place)
- Anthropic, PBC: AI assistant provider (AI query data may be processed; we do not send pet health data in AI queries without your explicit consent)
- Apple / Google, for delivering push notifications
- Public authorities, where required by law
7. Your rights
Under GDPR you have the right to:
- Access your personal data
- Rectification of inaccurate data
- Erasure (right to be forgotten)
- Restriction of processing
- Data portability (export as JSON/CSV within the app)
- Object to processing
- Withdraw consent at any time
To exercise these rights: hi@petsyplanet.pl
You also have the right to lodge a complaint with your national data protection supervisory authority.
8. Data security
We apply the following security measures:
- Encryption in transit (TLS 1.3) and at rest (AES-256)
- Row-Level Security, each user can only access their own data
- Two-factor authentication (optional)
- Regular security audits
- Restricted employee access to production data
9. Cookies
The PetsyPlanet website uses cookies. For full details, see our Cookie Policy.
10. Changes to this policy
We will notify you of material changes by email or in-app notification at least 14 days before they take effect. Continued use of the service constitutes acceptance of the updated policy.
11. Contact
Privacy enquiries: hi@petsyplanet.pl
PetsyPlanet, pre-launch project