Privacy Policy

Account data: your name, email address, sign-in method and plan status.

Pet data: names, photos, species, breed, microchip numbers, medical conditions, emergency notes and documents you upload such as vaccine certificates.

Essential recovery and security telemetry: when someone opens a pet's public page we record the time and device/browser type, plus a privacy-preserving source fingerprint used to limit abuse. We derive an approximate city only when a finder explicitly shares a GPS location. If a finder chooses to send location or contact details, we record those too.

Payment data is collected and processed by Paddle, our Merchant of Record. We never see or store your full card number.

We use your data to run PetPass (contract), send reminders and lost-pet alerts you turn on (contract/consent), keep the service secure (legitimate interest), and meet legal and tax obligations (legal obligation).

If you use AI document reading, the document is sent to our AI provider solely to extract information for you. It is not used to train public models.

We never sell, lease, rent or otherwise monetize pet health data or personal location data. We do not share it with pet food, insurance, advertising or data-broker companies.

We share data only with service providers needed to run PetPass (hosting and database, email delivery, payments, AI processing), under contracts that restrict their use, or when required by law. For CPRA purposes, we do not “sell” or “share” personal information.

On a pet's public page (/p/…), a finder's GPS location is captured only when they tap to send it and their browser grants permission. It is a single transmission delivered solely to the verified owner of that pet, and is never shown publicly.

Coordinates are sent over an encrypted HTTPS connection, stored in our database with encryption at rest, and protected by row-level access rules so only the pet's owner can read them. We use them to derive an approximate city for the owner's alert and recovery inbox; they are never used for advertising or profiling.

Location sightings are kept while they are needed for recovery and can be removed when the owner deletes the pet or account. Finders can decline location sharing and still message the owner.

Owner contact details are masked on public QR scans: owner names, email addresses, home addresses and personal phone numbers are never displayed on public pet pages. Finders reach the owner through PetPass's private relay instead.

EU and UK (GDPR and UK GDPR / Data Protection Act 2018): Kushal Jain is the controller of your account data. You may access, rectify, erase, restrict, port or object to processing of your data, and withdraw consent at any time. You may complain to your supervisory authority, such as the UK Information Commissioner's Office (ICO).

California (CCPA/CPRA): you have the right to know what personal information we collect, to delete and correct it, and to opt out of sale or sharing. We do not sell or share personal information, and we do not use sensitive personal information beyond what is needed to provide the service.

Canada (PIPEDA): you can request access to and correction of your personal information and withdraw consent, subject to legal limits.

To exercise any of these rights, email jkushal4321@gmail.com. We will verify your request and respond within 30 days (or 45 days in California).

PetPass uses essential cookies and local storage to keep you signed in, remember short checkout steps, protect public recovery pages from abuse, and save your privacy choice. These functions remain active when you choose Essential Only because the service cannot securely operate without them.

Optional anonymous product analytics run only after you choose Accept All. PetPass does not currently load an optional analytics provider, and your saved choice will control one if that changes. We never use advertising or cross-site tracking cookies. Paddle may set its own necessary cookies during checkout.

We keep your data while your account is active. You can edit or delete pets and documents at any time, and export records. To permanently delete your account and all associated data, email jkushal4321@gmail.com; we complete deletions within 30 days, except records we must keep for tax or legal reasons.

Depending on where you live, you have the right to access, correct, delete, restrict or port your data, to object to processing, and to withdraw consent. You also have the right to complain to your local data protection authority. We will not discriminate against you for exercising these rights.

Data is encrypted in transit and at rest, and row-level access controls restrict each record to its owner and to people they explicitly share with. Share links can expire and be protected with a PIN.

Our providers may process data outside your country, including in the United States. Where required, transfers rely on appropriate safeguards such as Standard Contractual Clauses.

Our privacy contact can be reached at jkushal4321@gmail.com. We aim to respond within 30 days. PetPass is not directed at children under 16.