1. Introduction
This Privacy Policy applies to all users of our Services and describes our practices regarding personal information. By using the Services, you consent to the collection and use of information as described herein.
2. Information We Collect
A. Information You Provide
- Account: Email address and credentials. Passwords are securely hashed and never stored in plain text.
- Pet Profile: Pet names, species, breeds, age, weight, and photos.
- Health Data: Supplement schedules, administration logs, condition notes, effectiveness feedback and ratings.
- Location (Optional): ZIP code for local event and recall alerts.
- Purchases: Subscription tier and status. Payment processing is handled by Apple or Google; we do not receive or store payment card details.
- Support: Information you provide in communications with us.
B. Information Collected Automatically
- Device: Device type, operating system, app version, language settings, device identifiers.
- Usage: Features accessed, screens viewed, interaction patterns, session duration.
- Logs: Crash reports, errors, performance data.
- Network: IP address (used for approximate, coarse location only; we do not collect precise geolocation).
C. Push Notifications
Push notification tokens to deliver reminders and alerts you have enabled.
D. Advertising Data (Contextual Ads Only)
If we display ads:
- Ad impressions, clicks, and frequency
- Basic device and app attributes for delivery and fraud prevention
We do not track your activity across other apps or websites for personalized advertising.
E. Affiliate Links
When you click affiliate links to retailers (e.g., Amazon, Chewy, Walmart), we may collect:
- Click timestamps and link identifiers
- Whether a purchase was completed (no purchase details)
This data helps us measure affiliate program effectiveness and is governed by our affiliate partners' privacy policies.
3. How We Use Your Information
We use collected information to:
- Provide and maintain the Services
- Manage accounts and send enabled notifications
- Display recalls and local pet health events
- Improve performance and features
- Develop and train AI/ML models (subject to Section 4 opt-out)
- Respond to support inquiries
- Analyze usage patterns
- Ensure security, prevent fraud, and comply with law
- Create aggregated, de-identified insights about supplement effectiveness trends, which we may commercialize as described in Section 5A
For ads: Deliver and measure contextual ads and prevent fraud.
4. AI/ML Training & Improvement
We may use AI/ML to enhance features such as reminders, insights, and categorization.
To operate, develop, and improve the Services, we may use usage data and User Content to train and evaluate AI/ML models. Where feasible, we use de-identified or aggregated data and apply privacy safeguards.
Opt-Out: You may opt out of using your User Content for AI/ML training by emailing hello@petthrive.app or using in-app settings (if available). Opting out may limit certain AI-driven features.
We may still process data as necessary to provide the Services, ensure security, or comply with legal requirements.
5. Data Sharing
We do not sell personal information that directly identifies you.
We do not share personal information for cross-context behavioral advertising.
We may share information with:
- Service Providers (under strict contractual obligations): AWS (storage/hosting), Railway (backend), Expo (push notifications), and analytics/error monitoring tools.
- Advertising Partners: Limited data for contextual ad delivery, measurement, and fraud prevention only.
- Affiliate Partners: Click and conversion data as described in Section 2E.
- Legal: When required by law or to protect rights, safety, or property.
- Business Transfers: In connection with a merger, acquisition, or sale of assets.
- Aggregated/De-identified Data: As described in Section 5A below.
5A. Aggregated Insights and Research
Important: We create aggregated, de-identified datasets from supplement tracking data, effectiveness feedback, and usage patterns. These insights are stripped of all personal identifiers and cannot reasonably be used to identify individual users or pets.
These de-identified insights may include trends such as:
- Supplement effectiveness by breed category, species, or size class
- Usage patterns by pet age range or weight class
- Condition improvement trends (aggregated across many users)
- Supplement combination effectiveness
We may use, license, or sell these de-identified insights to:
- Supplement manufacturers (to improve products)
- Pet health researchers (for studies and publications)
- Veterinary organizations (for health recommendations)
- Industry analysts (for market research)
Data minimization safeguards:
- Minimum group sizes before reporting (no insights for categories with small sample sizes)
- Removal of unique combinations that could enable re-identification
- Regular review of de-identification effectiveness
- No inclusion of pet names, photos, user emails, or device identifiers in shared insights
6. Advertising, Tracking, and Choices
- We serve contextual ads only — no cross-app/website tracking for personalized advertising.
- We do not request iOS App Tracking Transparency permission.
- Use device settings (e.g., Android Advertising ID reset) for platform-level controls.
7. Data Security
We implement industry-standard security measures including:
- Encryption of data in transit (TLS/HTTPS)
- Secure password hashing (bcrypt)
- Access controls and authentication
- Regular security monitoring
No system is fully secure. We will notify affected users of security breaches where required by law.
8. Data Retention
| Data Type | Retention Period |
|---|---|
| Active account data | While account is active |
| Inactive accounts | Deleted after 24 months of inactivity |
| Deleted account data | Deleted or de-identified; backups retained up to 90 days |
| Aggregated insights | Retained indefinitely (no personal identifiers) |
We may retain data longer for security, fraud prevention, or legal compliance.
9. Your Rights and Choices
Depending on your location, you may have rights to:
- Access: Request a copy of your personal data
- Correct: Request correction of inaccurate data
- Delete: Request deletion of your data
- Export: Request a portable copy of your data
- Object: Object to certain processing activities
- Withdraw Consent: Withdraw previously given consents
Submit requests to hello@petthrive.app. We verify identity and respond within 45 days (or sooner where required by law).
Note: Requests to delete personal data do not affect previously created de-identified insights, which contain no personal identifiers.
10. Children's Privacy
The Services are intended for users 13 and older. Users under 18 may only use the Services with parental consent as described in our Terms of Service.
We do not knowingly collect personal information from children under 13. If we discover we have collected data from a child under 13, we will delete it promptly.
Parents/Guardians: Contact us at hello@petthrive.app to review or request deletion of your child's information.
11. California Residents (CCPA/CPRA)
If you are a California resident, you have rights to:
- Know what personal information is collected and how it's used
- Delete your personal information
- Correct inaccurate personal information
- Opt-out of "sales" or "sharing" of personal information
- Non-discrimination for exercising your rights
We do not "sell" personal information as defined by CCPA.
We do not "share" personal information for cross-context behavioral advertising.
De-identified data (as described in Section 5A) is not "personal information" under CCPA and may be commercialized.
Submit requests via email to hello@petthrive.app.
12. European Residents (GDPR)
If you are in the European Economic Area (EEA), UK, or Switzerland, you have additional rights under GDPR:
- Access, rectification, erasure, restriction, portability, and objection
- Withdraw consent at any time
- Lodge a complaint with your local data protection authority
Legal bases for processing:
- Contract performance: To provide the Services you requested
- Legitimate interests: To improve Services, prevent fraud, ensure security
- Consent: For optional features like marketing communications
- Legal obligations: To comply with applicable laws
Data transfers: Data transferred outside the EEA is protected by Standard Contractual Clauses and other appropriate safeguards.
Anonymized data: Aggregated insights described in Section 5A are anonymized and fall outside the scope of GDPR personal data.
13. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be notified via in-app notice or email at least 30 days before taking effect.
Continued use of the Services after the effective date constitutes acceptance of the updated policy.
14. Contact Us
Questions about this Privacy Policy or our data practices?
- Email: hello@petthrive.app
- Website: petthrive.app