Privacy Policy

Who this applies to

• Owners — registered account holders who manage pet profiles, tags, and billing.
• Finders — people who scan a tag and use the relay without an account.
• Visitors — anyone who views a public pet profile.

What we collect

From owners: account email and credentials, profile details you enter (display name, phone, mailing/shipping address), pet profiles and records you create, tags and order details, and subscription status. Card details are handled by our payment processor — we do not store full card numbers.

From finders: a finder session identifier stored in a cookie, relay messages, any transcript email you provide, and tag scan context shared with the owner: scan time, approximate IP-based location when available, device/browser context, and a short scan fingerprint. Precise geolocation is optional and prompted on a found-pet ping.

Automatically: standard operational and security logs. Tag scan tokens are redacted at logging boundaries and are not retained in plaintext logs.

Analytics: if enabled, we use privacy-respecting, cookie-free product analytics to count page views and coarse conversion events such as demo views, signup completion, checkout starts, and found-pet alert completion. We do not send relay message contents, tag tokens, finder session identifiers, precise coordinates, owner contact details, pet medical notes, or uploaded records to analytics.

How we use it

To operate pet profiles, QR tag scans, and the lost-and-found relay; deliver found-pet alerts, relay messages, transcripts, transfer invitations, and fulfillment notices; process orders and subscriptions; maintain security and prevent abuse; and comply with legal obligations; and understand aggregate product usage with privacy-preserving analytics. We do not sell your personal data or use relay contents for advertising.

The private relay and contact reveal

When someone scans a tag for a lost pet, they reach the owner through a server-mediated relay. Personal contact details are not exposed to the other party unless the owner chooses to reveal them (for example, by enabling phone reveal). Finders are not shown the owner's email or address.

Scan context and geolocation

Scanning a PetPass tag creates finder access for that tag and shares scan context with the pet's owner. This can include scan time, approximate location inferred from the network request, device/browser context, and a short scan fingerprint. A finder may also be prompted to share precise current location. Precise location is optional; declining still lets the finder use the relay.

How long we keep data

• Relay conversations and messages: visible for about 30 days, retained internally up to about 1 year for audit, then hard-deleted by an automated purge job.
• Finder sessions and scan context: finder access expires after 30 days, and scan context attached to relay conversations follows the relay retention period.
• Share links: deleted after they expire.
• Account, pet, tag, order, and billing records: kept while your account is active and as needed for legal, tax, and audit purposes.

Who we share it with

We use trusted providers that process data on our behalf: Supabase (database, authentication, storage), Stripe (payments), Resend (transactional email), our hosting provider, and a privacy-respecting analytics provider if analytics is enabled. We may disclose information to comply with law or to protect rights and safety.

Your choices and rights

• Edit or remove pet profiles, photos, records, and documents from your dashboard.
• Control which profile fields are public and whether your phone number is revealed.
• Request access to, correction of, or deletion of your data by emailing privacy@petpass.griffen.codes. Depending on where you live, you may have rights under laws such as the GDPR or CCPA.
• Decline precise geolocation prompts at any time. Approximate scan context may still be shared with the pet owner when you scan a PetPass tag.

Children

PetPass is intended for adults and is not directed to children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect their personal data.

Contact

Questions or requests: privacy@petpass.griffen.codes.