Privacy Policy

1. Data controller

[PENDING: company name], with tax ID [PENDING: tax ID] and registered address at [PENDING: registered address] (“Petxam”), is the controller of the personal data described in this policy. For any privacy question you can write to contact@petxamapp.com.

2. Scope

This policy applies to the Petxam app for Android and iOS, its web version at app.petxamapp.com, the website petxamapp.com (including its blog) and the help center help.petxamapp.com. It explains what data we process, why, who we share it with, how long we keep it and how you can exercise your rights.

3. Data we process

• Account: email, password (handled by our authentication provider; we never see it) or Google or Apple sign-in, date of birth, gender (optional), phone number (optional), country, and language, time zone and notification preferences.
• Profiles: display name, username, photo, bio and presentation images, and whether the profile is public or private.
• Pets: name, species, breed, date of birth, photos and any other details you add; their veterinary medical history and attached documents; and, if you use photo identification or the breed scanner, the photos you send for it and the result of the analysis.
• Location: the location you choose when adding one to a post or event; your current location only if you grant the permission and use it on the map; and, if you pair a GPS tracker, the positions the collar sends.
• Community and chat: posts, comments, groups, events, followers and chat messages.
• Businesses and professionals: business or organization details, professional credentials you provide for verification, services, bookings and appointments, and the client and pet details the business records.
• Payments: history of purchases, subscriptions, donations and bookings. Card or bank details are entered directly with Stripe, Apple or Google: Petxam does not receive them.
• Support: the messages and files you send us and the technical details that come with them (app version, platform and device).
• Device: an installation identifier and notification token, the platform and the app version.
• Usage measurement: a closed set of actions (for example, adding a pet or posting), never with your location; and, only if you accept it, Google Analytics (see section 5).
• Crash reports: technical information about app errors, with no personal data, screenshots or visited addresses.
• Website forms: the details you leave to receive news (name, email, optional phone number, business or organization and message).
• Cookies: see the Cookies Policy.

4. Why we use it and on what legal basis

• Providing the service you request when you create an account and use the app: profiles, pets, community, chat, maps, tracker, bookings, payments, donations and support (legal basis: performance of the contract, Art. 6(1)(b) GDPR).
• Keeping the platform secure: checking that requests come from our genuine app, limiting abuse, moderating content and handling reports (legal basis: legitimate interest, Art. 6(1)(f) GDPR).
• Measuring usage with our own tools to decide what to improve (legal basis: legitimate interest; you can object in Settings, under Data access and sharing).
• Measuring with Google Analytics in the app and on the website, including where installs come from (legal basis: your consent, Art. 6(1)(a) GDPR, which you can withdraw at any time).
• Sending you service communications, such as verifications, security notices or changes to these terms (legal basis: performance of the contract).
• Answering people who leave their details on the website and letting them know about the launch (legal basis: consent).
• Meeting legal obligations, such as accounting and tax obligations for payments (legal basis: legal obligation, Art. 6(1)(c) GDPR).

5. Google Analytics

Only if you accept it, in the app (Settings, under Data access and sharing) or in the website's cookie notice, Google Analytics receives usage actions and, in the app, where the install came from. It does not receive your account identifier, your location or your pets' health data, and we have turned off ad personalization and advertising identifiers. If you withdraw your consent, we stop sending it.

6. Other people's data

If you record someone else's data, for example as a business adding a client or when inviting someone to care for your pet, you must be entitled to do so and let them know that Petxam will process that data under this policy.

7. Who we share data with

What you publish is seen by others according to the visibility you choose, and your pet's details are seen by the professionals and people you choose to share them with. In addition, these providers process data on Petxam's behalf under data processing agreements:

• Google (Firebase, in the Belgium region wherever the service allows it): authentication, database, file storage, server functions, notifications and app verification; Google Maps for maps and place search; and Google Analytics, only with your consent.
• Hetzner (servers in the European Union): our API and the AI photo analysis, which runs on our own servers.
• Sentry (European Union region): app crash reports.
• Grafana Labs: technical logs and metrics from our servers.
• Stripe: payments, web subscriptions, donations and business payouts.
• Apple and Google: purchases and subscriptions within their stores.
• Brevo: sending some emails.

8. International transfers

Some of these providers or their sub-processors may process data outside the European Economic Area, in particular in the United States or the United Kingdom. In those cases the safeguards provided for by the GDPR apply: the EU-U.S. Data Privacy Framework for participating companies, the European Commission's adequacy decisions or its Standard Contractual Clauses.

9. Health and artificial intelligence

We do not ask for health data about you. The medical history recorded in Petxam belongs to your pets, which is not special category data about a person, although we protect it with stronger measures and only those you authorize can access it. Photo identification and the breed scanner analyze pet photos to give an estimate; they make no decisions with legal effects on you.

10. How long we keep it

• While your account is active, we keep the data needed to provide the service.
• Chat messages are deleted automatically after 90 days.
• Our own usage measurements are kept for up to 25 months.
• If you delete your account, we delete your data except what the law requires us to keep or what also belongs to other people: payments, donations, subscriptions and bookings for the periods required by accounting and tax law; clinical records created by a veterinary clinic, which the clinic keeps under healthcare regulations; and support conversations and reports, for as long as needed to resolve them.
• Website form details, until you withdraw your consent or, at the latest, until Petxam's commercial launch.

11. Minimum age

Petxam is intended for people aged 18 or over. If we find that an account belongs to someone under that age, we will delete it.

12. Security

All data is encrypted in transit. Access is restricted by account and permissions, requests to our servers are checked to confirm they come from the genuine app, and Petxam staff access to personal data is logged.

13. Your rights

You can exercise your rights of access, rectification, erasure, restriction, objection and portability, and withdraw your consent at any time. In the app you can request a copy of your data, deactivate or delete your account and change your measurement preferences in Settings; for anything else, write to contact@petxamapp.com. You can also lodge a complaint with the Spanish Data Protection Agency (aepd.es).

14. Changes to this policy

When this policy changes in a meaningful way, we will tell you in the app before the new version applies to your account. The version in force is always the one published on this page, and earlier versions remain available at their own address.