Privacy

Privacy Policy

Your trust matters. Petlyst is designed to keep your pet's records private, secure, and under your control.

Last updated July 9, 2026

We do not sell your data. We do not share your pet's information with third parties for advertising. Your records stay private unless you choose to share them, and you can revoke any share at any time.

Contents
  1. 01Information we collect
  2. 02Pet profile information
  3. 03Health records and documents
  4. 04Account information
  5. 05How we use your information
  6. 06How we protect your data
  7. 07Third-party service providers
  8. 08Device permissions
  9. 09Sharing and caregiver access
  10. 10AI Health Assistant
  11. 11Your privacy rights
  12. 12Data deletion
  13. 13Contact us

1. Information we collect

Petlyst collects information you provide directly when creating an account and building your pet's profile. We do not collect information passively beyond what is necessary to provide the service.

  • Account credentials (email address and password)
  • Pet profile details (name, species, breed, date of birth, weight, microchip number)
  • Health records (vaccines, medications, allergies, conditions)
  • Documents you upload (certificates, prescriptions, insurance files)
  • Emergency contact information you choose to add
  • Veterinarian contact details you enter

2. Pet profile information

Your pet's profile is private by default. Information from the profile is only made publicly accessible if you explicitly generate an Emergency QR link. The public passport shows a limited, non-sensitive set of fields — pet name, species, breed, age, vaccination status, and the emergency vet contact you have entered. Your pet's microchip number and any uploaded documents are never shown on the public passport.

Pet identity details — including microchip numbers, breed, and passport ID — are stored securely and are never shared with registries or third parties without your explicit action.

3. Health records and documents

Health records you create and documents you upload are stored securely, accessible only to you and anyone you explicitly grant access to (such as family members or caregivers on Plus plans).

Documents are stored encrypted at rest via our infrastructure provider. We do not scan, index, or analyze document content.

4. Account information

We collect your email address and a securely hashed version of your password. We may also collect your display name if you provide it. We do not store payment card details — all subscription payments are processed by Apple (via in-app purchase) and RevenueCat. We receive only subscription status, not card details.

5. How we use your information

We use the information you provide to:

  • Provide, maintain, and improve the Petlyst service
  • Display your pet's Emergency QR profile when accessed via a shared link
  • Send vaccine and appointment reminder notifications you have configured
  • Process your subscription and verify Plus access
  • Enable caregiver and family sharing when you initiate it
  • Respond to support requests

We do not use your data for advertising, profiling, or any purpose unrelated to delivering the Petlyst service.

6. How we protect your data

Petlyst uses industry-standard security practices including:

  • Encryption in transit (TLS) for all data communications
  • Encryption at rest for stored documents and health records
  • Hashed and salted password storage
  • Row-level security policies ensuring users can only access their own data
  • Access controls limiting which team members can reach user data

No system is perfectly secure. If you believe your account has been compromised, contact us immediately at support@petlyst.app.

7. Third-party service providers

Petlyst uses a small number of trusted third-party providers to operate the service. Each receives only the data necessary for their specific function:

  • Supabase — database, authentication, and file storage. Your pet records, health data, and uploaded documents are stored on Supabase infrastructure. Supabase is SOC 2 Type II certified. Data is stored in the US region.
  • RevenueCat — subscription management and in-app purchase validation. RevenueCat receives your app-store transaction receipt and assigns a subscription status to your account. No payment card details are shared with RevenueCat.
  • Apple (App Store) — processes all in-app purchase payments. Petlyst never receives your card number or billing address.

We do not use advertising networks, analytics trackers, or data brokers.

8. Device permissions

Petlyst requests the following device permissions on iOS:

  • Photo library / camera — to let you add a photo to your pet's profile. Photos are uploaded to secure storage and are never shared or analyzed without your action.
  • Push notifications — to send vaccine and appointment reminders you configure. You can disable notifications at any time in iOS Settings.
  • File access — to let you upload documents (PDFs, images) to your pet's health record. Files are only accessed when you explicitly choose them.

All permissions are requested at the time you use the feature that needs them. You may revoke any permission from iOS Settings without losing access to the rest of the app.

9. Sharing and caregiver access

Emergency QR profiles are accessible via a link you generate. Anyone with the link can view the limited, non-sensitive set of fields shown on that page (as described in section 2). The link can be disabled at any time, which immediately revokes public access.

On Plus plans, you may share access with family members or trusted caregivers. Family sharing allows another Petlyst user to view (but not edit) your pet's records. Caregiver links allow a non-app recipient to view records in a browser. Both types of access can be revoked at any time from your profile settings.

We do not share your data with veterinary clinics, pet registries, insurance companies, or any third party unless you initiate that sharing yourself.

10. AI Health Assistant

The AI Health Assistant (available on Plus) analyses your pet's existing records — vaccines, appointments, documents, and emergency data — entirely on-device. No pet data is sent to any external AI service or third-party API.

Health insights are generated from your records using local logic. They are informational only and do not replace veterinary advice. No data leaves your device when using this feature.

11. Your privacy rights

Depending on where you live, you may have rights over your personal data under laws such as the EU/UK General Data Protection Regulation (GDPR) or the California Consumer Privacy Act (CCPA). These include the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data (you can edit most data directly in the app)
  • Delete your account and all associated data (see section 12)
  • Export a copy of your data in a portable format
  • Object to or restrict certain processing

We do not sell personal data, so there is no sale to opt out of. To exercise any of these rights, email support@petlyst.app and we will respond within the timeframe required by applicable law.

12. Data deletion

You may delete your account and all associated data at any time from within the app settings. Deletion is permanent and irreversible. All pet profiles, health records, documents, and emergency QR configurations are removed within 30 days of account deletion.

You may also delete individual pets, records, or documents at any time without deleting your account.

13. Contact us

Questions about this Privacy Policy or how your data is handled:

  • Email: support@petlyst.app
  • Subject line: Privacy Inquiry

We aim to respond to all privacy-related inquiries within 5 business days.