Account and sign-in
We process your email address, account identifier and the name you provide to create and recover your App account. If you choose Apple or Google sign-in, we receive the identity information that provider shares with your permission. An Apple private relay address can be used instead of your personal email. Your App account is separate from any PetChoice ordering account.
What is stored
Profiles, pet photos, reports, completed scans and preferences are saved privately to your PetChoice account. Delete profiles or scans from their management screens, or request account deletion in Settings.
Location during walks
GPS runs only during a walk, including while locked. When you are signed in, completed routes are saved privately to your App account and can be restored on your other signed-in devices. You can delete a saved walk or request account deletion. Maps use Apple Maps on iOS and Google Maps on Android; the map provider receives requests for the area shown.
Service providers
Supabase hosts App accounts, saved content and backend services. Resend delivers sign-in emails. Apple or Google processes sign-in when you choose that method. With your AI consent, OpenAI processes the selected pet context, text and photos. RevenueCat and your app store process subscription information as described below. These providers may process data outside your country under their own service terms and privacy policies. Walk maps use Apple Maps on iOS, Google Maps on Android and OpenStreetMap on the web. Map providers receive requests to display the map. Google Maps also collects device and request metadata, IP addresses, an SDK identifier, crash information and map interactions to maintain and improve its services.
Service operation and support
To run the service, we retain account-linked request status, feature usage, processing time, error codes and usage-limit records. If you contact support, we receive the message and any information or attachments you choose to send. Support and privacy-request emails and attachments are retained for one year after the request is resolved, then deleted. Do not include passwords or sign-in codes. Google Sign-In may also process technical identifiers, usage information and an approximate location derived from your IP address for its sign-in service, security and analytics.
Optional usage analytics
If you choose to allow it, PetChoice shares limited app usage events with Mixpanel to understand which features work well. Events use a random analytics ID. They do not include your name, email, pet health details, photos, scan text or location. You can turn this off at any time in the App’s Settings → App preferences. Turning it off stops new collection on this device, clears unsent events and requests deletion of previously shared analytics after your choice reaches the service. Mixpanel automatically deletes these events after two years. Deletion requests can take several weeks to complete.
Technical diagnostics
If you allow it, PetChoice sends limited error and performance reports to Sentry to help find problems. Reports contain error types, code stack traces, app version and timing. They exclude pet records, photos, email addresses, account identifiers, scan text and precise location. Sentry receives your connection IP address as part of the network request. This choice applies to this device across sign-ins. You can turn it off at any time in Settings → App preferences → Technical diagnostics. Turning it off stops new uploads; a request already sent may finish. Reports already sent are not automatically deleted when you turn this off.
AI-assisted features
Remote AI requires your consent. Dog background and text/photos used for the selected feature are sent for processing. Submitted scan photos and completed results are saved privately to your PetChoice account. You can delete a scan or request account deletion to remove them. Automatic readings and AI assessments may be incomplete or incorrect; you can review and correct them. Withdrawing AI consent stops new analysis but does not automatically delete saved results or photos.
Your controls
You can manage analysis consent, sign out or delete your account at any time. Withdrawing consent stops new analysis requests.
Subscriptions and billing
RevenueCat processes your App billing identifier and purchase status to manage Premium subscriptions. Pet profiles, scan photos and care records are not sent to RevenueCat. We keep the minimum subscription identifiers and access status until your App account is deleted. Any temporary purchase evidence we receive is kept for no more than 30 days. Account deletion requests removal of your RevenueCat customer record; store transaction records remain subject to the store’s policies. Deleting your App account does not cancel a store subscription. Manage or cancel it in App Store or Google Play settings.
Data retention and deletion
Temporary analysis results are kept for 7 days; request records and feedback for up to 30 days. Submitted package and label photos are saved privately with completed scan results. Saved photos and results remain until you delete them or your account. Withdrawing consent clears temporary results and feedback and stops new analyses, but does not delete saved history. An analysis already submitted may still finish. Your ordering account does not receive this information.