Privacy Policy

This Privacy Policy explains how Petbop ("Petbop", "we", "us") collects, uses, and protects your personal data when you use the Petbop app and website (the "Service"). We handle your data in line with the EU General Data Protection Regulation (GDPR) and applicable Lithuanian law.

1. Who we are (Data Controller)

Yaklou group, MB. Company code 305216510. Registered address: Perkūnkiemio g. 13-91, LT-12114 Vilnius, Lithuania. Contact for privacy matters: privacy@petbop.app.

2. What personal data we collect

• Account data: email address, first name, last name.
• Optional profile data: city, country, home address (optional), phone number (optional).
• Pet data you add: pet name, species, breed, sex, birthday, notes, photos, care records (vaccines, treatments, grooming, vet visits, dates), special occasions and dates, and your reminder preferences.
• Consent and settings: whether you have opted in to reminder emails and to partner offers, and when you gave or withdrew that consent.
• Technical data: login/session information needed to keep you securely signed in.

We do not intentionally collect special categories of personal data; please don't enter sensitive information in free-text fields.

3. Why we use your data and our legal basis

• To create and operate your account and store your pets and records — performance of a contract (GDPR Art. 6(1)(b)).
• To send reminder emails — your consent (Art. 6(1)(a)); you opt in and can withdraw anytime.
• To send partner offers and, when you unlock an offer, to share your unique discount code and basic engagement (such as when you visit a partner through our link) with the relevant partner — your consent (Art. 6(1)(a)); separate opt-in, withdraw anytime.
• Product analytics (PostHog) to improve the Service — your consent (Art. 6(1)(a)), given via the cookie banner; withdraw anytime in Settings.
• To keep the Service secure and prevent abuse — our legitimate interests (Art. 6(1)(f)).
• To comply with legal obligations — Art. 6(1)(c).

Providing optional profile data (address, phone) is voluntary and not required to use the Service.

4. Who we share your data with

We do not sell your personal data. We share it only with service providers who help us run Petbop, under contracts requiring them to protect it: Supabase (database, authentication, photo storage — hosted in the EU region); Resend (sending emails on our behalf); Lovable (hosting the app).

• PostHog (EU) — product analytics to understand how the app is used, used only with your consent.

Partner offers. If you opt in to partner offers and unlock an offer, we generate a discount code unique to you and share it — together with basic engagement such as when you visit a partner through our link — with the relevant partner, so they can honour the discount and measure results. Partner offers are optional, off by default, and you can withdraw consent anytime in Settings.

5. International transfers

Our database and photo storage are in the EU. Some providers (e.g. our email provider) may process data outside the EEA, including the United States. Where that happens we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses and/or the EU–US Data Privacy Framework.

6. How long we keep your data

We keep your account and pet data while your account is active. If you delete your account, we delete your personal data and pet content, except limited information we must keep to comply with legal obligations or resolve disputes. Reminder send-logs are kept briefly to prevent duplicate emails.

7. Your rights

You have the right to access, rectify, erase, restrict or object to processing, data portability, and to withdraw consent at any time (reminders and offers, directly in Settings). You can do most of this in the app (edit your profile, toggle reminders/offers, delete your account). For anything else, contact privacy@petbop.app and we'll respond within one month. You may also lodge a complaint with the Lithuanian State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija, vdai.lrv.lt).

8. Cookies and analytics

Petbop uses essential cookies/local storage to keep you securely signed in and remember your preferences — always on, because the Service needs them. With your consent, we also use PostHog (hosted in the EU) for product analytics to understand how the app is used so we can improve it. Analytics runs only if you accept in our cookie-consent banner; you can decline and the app still works fully, and you can change your choice anytime. We do not use advertising or third-party tracking cookies.

9. Data security

We use industry-standard measures including encrypted connections, access controls, and row-level security so you can only access your own data. No system is perfectly secure, but we work to protect your information and to notify you and the authorities of any breach where required by law.

10. Children

Petbop is intended for adults (18+) and is not directed at children. We do not knowingly collect data from children.

11. Changes

We may update this policy and will post the new version here with an updated date. If changes are significant, we will notify you.

12. Contact

privacy@petbop.app — Yaklou group, MB, Perkūnkiemio g. 13-91, LT-12114 Vilnius.