Privacy Policy

1. Scope and controller

This Policy applies to the PetOS mobile application, public web pages, and related services. PetOS is the controller of personal information processed to provide the service. Contact our privacy team at contact@xmobico.com.

2. Information we collect

Account and profile

Name, email address, password hash, language, timezone, unit preferences, profile photo, marketing choice, privacy choices, account status, and policy acceptance.

Pet and care records

Pet identity and profile details, photos, birth date, species, breed, sex, weight, microchip and insurance information, vaccinations, preventive-care plans, medications and doses, meals, symptoms, conditions, allergies, procedures, laboratory results, veterinary visits, veterinarians and clinics, reminders, timeline entries, and notes.

Documents and user content

Files and images you upload, veterinary reports you generate, caregiver invitations, AI conversations, support communications, and metadata needed to organize and secure those items.

Device, security, and service activity

Opaque session tokens, device identifier and name, platform and app version, push-notification token, sign-in and security events, IP address, user agent, synchronization status, crash reports, performance traces, and technical logs needed for reliability, fraud prevention, and troubleshooting. Mobile diagnostics may include an internal account ID, but PetOS configures its diagnostics provider not to collect default personal information, screenshots, request bodies, authentication credentials, or URL query strings.

Location

Location is collected only when you choose a location-dependent feature, such as setting a lost pet’s last-seen position or submitting a sighting. PetOS does not continuously track background location.

Subscription information

Subscription product, entitlement, status, renewal, and transaction identifiers. Apple or Google processes payment-card and store billing information; PetOS does not receive your full payment-card number.

Advertising and consent

Free accounts may receive ads delivered through Google Mobile Ads. PetOS requests consent where required before requesting ads, uses non-personalized ad requests, and may process device identifiers, IP address, coarse location derived from IP, ad interactions, and consent signals for ad delivery, frequency control, fraud prevention, and measurement. Pet health records, documents, precise lost-pet locations, and AI conversations are not used to personalize ads.

3. How we use information

• create and secure your account, verify email, authenticate devices, and prevent abuse;
• store, synchronize, search, display, export, and share pet-care information as you direct;
• generate schedules, reminders, notifications, timelines, recommendations, and reports;
• operate caregiver collaboration, lost-pet, document, and subscription features;
• provide the AI assistant when you choose to submit a prompt;
• respond to support, security, privacy, and legal requests;
• maintain, troubleshoot, measure, and improve service reliability; and
• send product news only when you opt in, with an unsubscribe option.

4. Legal bases

Where the GDPR, UK GDPR, or similar law applies, we process information as needed to perform our contract with you, comply with legal obligations, and pursue legitimate interests such as security, fraud prevention, support, and service reliability. AI processing occurs only when you choose to use the assistant. We rely on consent for optional marketing and device permissions where consent is required. You may withdraw consent through PetOS settings or device settings without affecting earlier processing.

5. When information is shared

We disclose information only as needed for the service or as directed by you:

• Caregivers and recipients: people you invite or anyone you give an active report, document, or lost-pet link, limited to the information selected for that feature.
• Infrastructure providers: hosting, database, storage, email, security, and delivery providers processing data on our behalf.
• Notifications: Apple Push Notification service and Google Firebase Cloud Messaging receive device and delivery information needed to send notifications.
• Subscriptions: Apple, Google, and RevenueCat process purchase and entitlement information.
• Advertising: Google Mobile Ads and its consent platform process limited device, consent, and ad-interaction information for free-account ads. Ads are requested as non-personalized.
• Diagnostics: Sentry processes redacted crash reports, stack traces, internal account IDs, and sampled performance information to identify and repair application failures.
• AI: OpenAI processes the prompt and selected pet context only when you choose to use the AI assistant.
• Legal and safety: authorities or other parties when reasonably necessary to comply with law, protect rights and safety, investigate fraud, or enforce our agreements.
• Business changes: a successor involved in a merger, financing, reorganization, or sale, subject to appropriate confidentiality and notice requirements.

PetOS does not sell personal information and does not share personal information for cross-context behavioral advertising.

6. Public and shared features

Lost-pet pages and report or document links are off by default and created only when you choose to share. They may be accessible to anyone who has the link. You can revoke active links in PetOS. Avoid placing unnecessary personal information in publicly shared fields.

7. Retention and deletion

We keep account and pet-care data while your account is active and as needed to provide features you request. Verification and password-reset tokens expire automatically. Session, notification, security, audit, transaction, and backup records are retained for limited periods appropriate to their purpose, fraud prevention, legal obligations, and dispute resolution.

When you delete your account, direct account identifiers are removed or anonymized and active sessions are revoked. Information another user owns or independently controls, records needed to preserve a shared pet’s care history, legally required financial or security records, and time-limited encrypted backups may remain until their applicable retention period ends. We do not use retained information for marketing.

See account deletion instructions to delete in the app or submit a request outside the app.

8. Security

PetOS uses access controls, password hashing, opaque session tokens, encrypted network transport in production, private file storage, restricted share links, rate limits, audit records, and administrative safeguards designed to protect information. No system is completely secure, so keep your devices and credentials protected and contact contact@xmobico.com about suspected misuse.

9. International processing

Service providers may process information in countries other than where you live. Where required, we use approved transfer mechanisms and contractual safeguards, such as adequacy decisions or standard contractual clauses, and apply protections described in this Policy.

10. Your choices and rights

PetOS provides controls to update profile information, manage notifications, revoke shared links, export account data, sign out devices, and delete the account. Depending on where you live, you may also request access, correction, deletion, restriction, portability, or objection; withdraw consent; or appeal a privacy decision. You may complain to your local data-protection authority.

Send requests to contact@xmobico.com. We may verify your identity before acting. Authorized agents may submit requests where local law permits.

11. Children

PetOS is not directed to children under 18 and we do not knowingly create accounts for them. If you believe a child provided personal information, contact us so we can investigate and delete it as appropriate.

12. Policy changes

We may update this Policy when the service, providers, or legal requirements change. We will revise the date above and provide additional in-app or email notice before material changes take effect where required.

13. Contact

Privacy requests and questions: contact@xmobico.com
Security reports: contact@xmobico.com
General support: support@xmobico.com