Privacy Policy

Effective Date: November 6, 2026

This Privacy Policy explains how Rodney M. Sánchez, an individual doing business as Pets2gether ("Pets2gether," "we," or "us"), collects, uses, stores, and shares information from users ("you") of the Pets2gether mobile application and pets2gether.com (the "Service"). It is written to align with common United States privacy practices (including notice, purpose limitation, retention limits, and consumer rights such as access and deletion under laws like the CCPA/CPRA where they apply), while the Service is operated from Costa Rica and may be used in other countries.

1. Personal Data We Collect

Depending on how you use the Service, we may collect:

• Account identity: name, email address, authentication data (via Firebase Authentication), profile photo, country, phone, and optional home address.
• Pet identity and health: pet name, species, breed, photo, microchip, date of birth, medical records (for example vaccines, deworming, medications), weight entries, symptom notes (including optional photos when the pet's owner has a paid plan), medicines kept for if needed, and related notes you enter. Medicines kept for if needed are included on the free plan. They are not a paid feature.
• Schedule and reminders: appointments, care-task reminders, occurrence history, and notification preferences.
• Sharing: Family/Caretaker invite emails and membership roles you configure.
• Location (optional): device location or home-address locality when you use nearby Services finder features, with permission where required.
• Purchase metadata: subscription or purchase status for Apple App Store paid plans. Apple processes payment; we do not store full payment card numbers.
• Device and diagnostics: device identifiers, push notification tokens, IP address as provided by our infrastructure, and crash or performance logs needed to run and secure the Service.
• Website analytics (pets2gether.com): when you visit our public marketing website, Google Analytics may collect device and usage data such as approximate location derived from IP address, browser and device type, pages viewed, referring site, and interactions with buttons (for example joining TestFlight or opening the provider waitlist). We do not use Google Analytics in the Pets2gether mobile app.

We do not operate a marketplace booking product in the current Service.

2. How We Use Data

• Provide account, pet profiles, health records, medicines kept for if needed, weight tracking, schedule, and reminders
• Send local and (when enabled) push notifications you configure
• Enable Family/Caretaker sharing you authorize
• Show nearby services when that feature is enabled and you allow location or locality context
• Process App Store subscription status when you purchase a paid plan
• Secure the Service, prevent abuse, and meet legal obligations
• Communicate about the Service (for example account or security notices)
• Measure traffic and button clicks on the public pets2gether.com marketing website so we can improve that site

3. How We Share Data

We do not sell your personal information. We share data only as follows:

• Service providers: Google Firebase (Authentication, Cloud Firestore, Cloud Storage, Cloud Functions, Cloud Messaging, and related Firebase services) as our infrastructure processor in the United States. See Section 7.
• Google Analytics: on the public pets2gether.com marketing website only, Google acts as our processor for Analytics measurement. See Google’s documentation for how Google processes Analytics data. We do not use Google Analytics in the mobile app.
• Apple: for App Store sign-in (if used) and In-App Purchase billing.
• People you authorize: Family or Caretaker members, and veterinary or other parties when you choose to share (for example by sending a Health Pass PDF).
• Legal: when required by law or to protect rights, safety, or the Service.

Veterinary records: If you share pet health information with a veterinary practice, that practice may keep copies as its own clinical records. Pets2gether cannot delete those practice-held copies when you delete your account.

4. Security

We use technical and organizational measures appropriate to the Service, including encryption in transit to Firebase, access controls, and authentication. No method of storage or transmission is completely secure.

5. Retention (US-aligned practices)

We keep personal data only as long as needed for the purposes above, then delete or de-identify it, subject to legal holds. Typical periods:

• Account, pet, health, weight, schedule, and sharing data we control: for the life of your account. When you delete your account, we delete or irreversibly remove Pets2gether-controlled copies of that data from active systems (see Section 6).
• Backups and disaster-recovery copies: typically purged on a rolling basis within about 90 days after deletion from active systems.
• Security, crash, and diagnostic logs: typically up to 90 days, unless needed longer to investigate an incident.
• Subscription or purchase metadata we store: as long as needed to provide the purchase, resolve disputes, and meet bookkeeping or tax rules that apply to us (often up to 7 years for financial records where required).
• Legal obligations and disputes: longer when we must retain information under applicable law or for establishing, exercising, or defending legal claims.

Apple may retain App Store billing records under Apple’s policies. Veterinary practices retain clinical copies under their own retention rules; those copies are outside Pets2gether’s deletion scope.

6. Your Rights and Account Deletion

Depending on where you live, you may have rights to access, correct, delete, or receive information about personal data we hold, and to appeal or opt out of certain processing where required by law (for example CCPA/CPRA rights for California residents when those laws apply). To exercise rights, use in-app controls where available or email support@pets2gether.com. We will verify requests as required and respond within the timelines required by applicable law.

Account deletion: You can delete your account from Account settings in the app. Deletion removes your Firebase Authentication account and Pets2gether-controlled data associated with that account (including owned pets and their in-app medical records, weight entries, symptom notes, symptom photos, medicines kept for if needed, reminders you own, and related profile data), subject to backup windows and legal retention above. Deletion does not remove veterinary clinical copies already held by a practice. If you were only a Family or Caretaker member, notes you logged on another owner's pet can remain on that pet. We remove your name from those notes and show Former caretaker or Former family member. The note text, photo, date, and time stay. A medicine kept for if needed that a Family member added on another owner's pet can remain on that pet after that Family member deletes their account. We remove that person's name and show Former family member.

7. International Processing and Firebase (United States)

Pets2gether uses Google Firebase. Your data is processed and stored on Firebase infrastructure located in the United States (and may be accessed by Google subprocessors as described in Google’s documentation). We are the controller (or “business”) for end-user personal data we collect in the Service; Google generally acts as our processor (or “service provider”) for Firebase services under the Firebase Data Processing and Security Terms (and, for Firebase services on Google Cloud terms, the Cloud Data Processing Addendum). Those terms include Standard Contractual Clauses and related transfer mechanisms Google provides for restricted international transfers.

We do not rely on “by using the Service you consent to US transfer” as our sole transfer basis. Operation of the Service requires processing on Firebase in the United States under our contract with Google. If you do not want your data processed in the United States, do not use the Service.

More detail: Privacy and Security in Firebase and Firebase Standard Contractual Clauses.

8. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child provided data, contact us and we will delete it.

9. Changes

We may update this Policy by posting a new version with a revised effective date. Material changes will appear in the posted Policy.

10. Contact

Privacy questions and requests: support@pets2gether.com