Privacy Policy

1. Who we are

PetPaw is operated by Piotr Bahdasaran, sole proprietor (przedsiębiorca jednoosobowy) trading as PTRS Ltd, registered in Poland under NIP 9512534689, with registered address at ul. KEN 19, 02-797 Warszawa, Poland. We operate the PetPaw mobile application (the "App") and the website at petpaw.club (the "Service").

For all privacy-related questions, including data subject requests under the GDPR, contact ceo@ptrs.ltd.

By using the App or the Service, you agree to the practices described in this policy.

2. What data we collect

2.1 Account information

When you sign in with Google Sign-In we receive your email address, your name and your Google account identifier. We do not receive your Google password. The App cannot be used without signing in.

2.2 Pet profile data

Pet name, species, breed, date of birth, weight, colour and notes. Stored on your device and synchronised to our cloud so the same data is available across your devices. The pet's avatar photo itself stays on your device; only its local file reference is included in the profile sync.

2.3 Health records

Vaccinations, illnesses, symptoms, allergies, surgeries, lab results, weight measurements, medication and vitamin courses with their reminders, and any photos or PDF documents you attach to a record or a course. Records are stored on your device and synchronised to our cloud. Attached photos and documents are uploaded to our server (as JPEG or PDF files linked to your account) so they can be shown on your other devices.

2.4 Calendar events

Vet visits, grooming appointments, walks and other pet-related events you add. Stored on your device and synchronised to our cloud. Optionally written to your system calendar (for example Google Calendar) if you enable Calendar sync in Settings; that copy stays in your own calendar account.

2.5 Owner profile

Optional name, delivery address (used when you order a PetPaw device), birth date and an “about me” note. These fields are optional; whatever you fill in is synchronised to our cloud and, as described in 2.6, given to the AI assistant so it can address you and take your preferences into account.

2.6 AI assistant (PetPaw Premium)

The AI features — assistant chat, the AI-generated PDF health report, automatic titles for health records, the normal-weight estimate, the assistant’s background memory refresh and chat summaries, and proactive care tips — work by sending a prompt to a large language model.

Default route (PetPaw Premium). The App sends the request to our server at petpaw.club, which forwards it to our AI provider, DeepSeek (see Section 4), using PetPaw’s own API key, and returns the reply to the App. What is sent: your typed or dictated message; a bounded summary of your pet’s profile, health and medication records that the App builds; your upcoming calendar items; the owner-profile fields you have chosen to fill in (name, address, birth date, “about me”); and your app language. No audio, video or photos are sent to the AI. Our server does not store or log the content of prompts or replies; it records only technical metadata (a hashed account identifier, the feature that made the request, model name, response status, latency and token counts) for rate limiting and troubleshooting.

Your own API key. In Settings → AI provider you may enter your own API key for DeepSeek, OpenAI, Anthropic or a custom OpenAI-compatible endpoint. Requests then go directly from your phone to the provider you chose, under your own account and that provider’s terms; our server is not involved and no Premium subscription is needed. Your key is stored in encrypted storage on your device and is never sent to our servers.

Proactive tips. To generate care tips delivered as push notifications, the App periodically synchronises an assistant context (pet profiles, health records, medication courses, calendar items, a short list of nearby places from the map, chat history and the assistant’s memory) to our server, which uses it to build a prompt for the AI provider in the same way. Premium accounts may receive a tip daily; free accounts receive at most one tip every three days, shown as a preview.

Voice. Voice input is transcribed by your device’s Android speech recogniser (on most phones this is Google’s speech service, governed by Google’s privacy policy); PetPaw receives only the resulting text and never uploads audio. Replies are read aloud by Android’s on-device text-to-speech.

Chat history is stored on your device and synchronised to our cloud so it survives a reinstall; it is deleted together with your account.

2.7 Camera, microphone and live calls

Live video from your PetPaw device is transmitted over WebRTC, encrypted in transit (DTLS-SRTP), and relayed by our media server to your phone. We do not record or store the stream. Two-way voice calls work the same way and are not recorded. Photos and video clips you capture while watching are saved only in the App’s private storage on your phone; they are not uploaded to us. Photos taken automatically by your PetPaw device when your pet comes close to it are uploaded by the device to our server, delivered to your phone, and deleted from our server once they have been delivered.

2.8 Location

Approximate or precise location is used only for two things: the map screen, where the visible map area is sent to the OpenStreetMap Overpass API to find nearby pet-friendly places, and the weather card on the Home screen, where your coordinates are sent to the Norwegian Meteorological Institute (MET Norway) to fetch a local forecast. A short list of the nearby places found on the map (names and coordinates, not your own position) is included in the assistant context described in 2.6. We do not track your location in the background and we do not keep a location history.

2.9 Device identifiers

An install identifier generated locally, your MQTT client identifier, and your Firebase Cloud Messaging (FCM) token. The FCM token is used by Google to deliver push notifications.

2.10 Purchases (PetPaw Premium)

PetPaw Premium is a subscription sold through Google Play. Google processes the payment; we never see your card or bank details. After a purchase, and periodically afterwards, the App sends the Google Play purchase token to our server, which confirms the subscription status with Google Play (product, plan, expiry date) and stores it against your account so Premium features unlock on all your devices.

2.11 Connection metadata

Server-side at petpaw.club we record IP addresses and connection timestamps for security and abuse prevention.

We do not collect crash logs, analytics, lists of your other apps, your contacts, SMS, call history or browsing.

3. Why we use your data — lawful bases (Art. 6 GDPR)

We do not sell your personal data, and we do not use it for advertising or profiling.

4. Third-party recipients

We share the minimum data necessary with the following recipients.

We do not share data with advertisers, data brokers or any party outside the list above.

5. Where data is stored

Most user-generated data lives on your device using Android’s Jetpack DataStore. A synchronised copy is kept on our cloud servers, hosted in the European Union, so you can use multiple devices and recover after re-installs. Data is encrypted in transit (HTTPS/TLS, MQTT over TLS, WebRTC DTLS-SRTP) and at rest at the disk level.

6. International transfers

Google processes data in the United States and elsewhere under its data-processing terms and the European Commission’s Standard Contractual Clauses. Our AI provider, DeepSeek, may process the prompts it receives outside the European Economic Area, including in the People’s Republic of China, in accordance with its own terms; we send only what is described in Section 2.6, never audio, video or photos, and our server does not retain the content. If you prefer that no data reach that provider, use the free features only or configure your own AI provider in Settings. You can request further information about transfers by emailing ceo@ptrs.ltd.

7. Retention

8. Account deletion

You can delete your PetPaw account and all associated personal data at any time. Step-by-step instructions, including what is deleted and what is kept, are published at petpaw.club/delete-account.html — that page is public and needs no app installed.

There are two ways to request deletion:

• In the App: Settings → Owner Profile → Account → Delete account and data → Delete forever. This erases all PetPaw data on the device and triggers a server-side erase of your synced data.
• By email: send a deletion request to ceo@ptrs.ltd from the email address associated with your account. If you write from a different address we will ask you to confirm from the account address first.

Deletion removes your account record and sign-in identity, pet profiles and avatars, health records and their attachments, medication schedules and reminders, calendar events, your owner profile, AI assistant chat history and assistant memory, PetPaw device bindings, photos held on our servers, your push-notification token, your subscription status record, and the synchronised copy of all of it at petpaw.club.

We complete the erase within 30 days; in-app deletion is immediate on the device and normally propagates server-side within 24 hours. Encrypted backups that may still hold a copy are rotated out within 30 days. We keep only what the law requires — accounting records for 5 years under Polish tax law — plus security logs for up to 30 days as described in Section 7.

Deleting your PetPaw account does not cancel a PetPaw Premium subscription bought through Google Play and does not issue a refund. Cancel it in the Google Play Store under Payments & subscriptions.

9. Your rights (GDPR)

If you are in the European Economic Area, the United Kingdom, or another jurisdiction with comparable laws, you have the right to:

• Access — request a copy of the data we hold about you
• Rectify inaccurate data
• Erase your data (the right to be forgotten)
• Restrict or object to processing
• Portability — receive your data in a machine-readable format
• Withdraw consent at any time, where processing is based on consent
• Lodge a complaint with your local data-protection authority. In Poland this is the Urząd Ochrony Danych Osobowych (UODO).

To exercise any of these rights, email ceo@ptrs.ltd. We respond within 30 days.

10. Children

PetPaw is not directed at children under 13, and you must be at least 13 to use it. We do not knowingly collect personal data from children under 13. If you are younger than the age of digital consent in your country (16 in Poland and several other EU countries), you may use PetPaw only with the consent of a parent or guardian. If you believe a child has provided us with personal data, contact ceo@ptrs.ltd and we will delete it.

11. Security

We protect your data with TLS/HTTPS for all REST traffic, MQTT over TLS (port 8883) for device control, DTLS-SRTP for WebRTC media, at-rest disk encryption on our servers, Google Sign-In authentication (we never see your Google password) and regular dependency updates. Any AI-provider API key you enter yourself is kept in Android’s encrypted preferences on your device; PetPaw’s own AI-provider key is held only on our server and never shipped inside the App. No system is perfectly secure; if you suspect your account is compromised, contact us immediately.

12. Changes to this policy

We may update this policy when our practices change. Material changes are announced in-app and the “Last updated” date is bumped. Continued use of the App after the effective date constitutes acceptance. This version (August 15, 2026) reflects the move to a free app with an optional AI subscription, AI requests routed through our server, and the option to use your own AI provider key.

13. Contact

Piotr Bahdasaran (przedsiębiorca jednoosobowy, trading as PTRS Ltd)
ul. KEN 19, 02-797 Warszawa, Poland
NIP: 9512534689
Email: ceo@ptrs.ltd
Website: https://petpaw.club