Your data, in plain English.

Petlys ("we," "us," "our") is a service that helps you preserve your pet's memories, milestones, and care records in one place. This policy explains what we collect, why, and what we don't do with it. Questions? melissa@petlys.com.

We only collect what the service actually needs to work:

• Account info. Your email address, a display name, and (if you choose one) an avatar.
• Your pet's story. Anything you add: photos, voice notes, memories, medical records, contacts, routines, milestones, and share links you create.
• Basic technical logs. IP address, browser, and error logs, kept briefly to keep the service secure and debuggable.
• Payment info (only if and when paid plans launch), handled by a PCI-compliant processor. We never see or store your full card number.

• We do not sell your personal information — not to advertisers, not to data brokers, not to anyone.
• We do not use your photos, voice notes, or pet stories to train AI models, ours or anyone else's.
• We do not run third-party ads on the service.
• We do not embed third-party advertising trackers or behavioral analytics pixels.

• To provide the service — showing you your pets, memories, records, and share links.
• To secure the service — detecting abuse, fraud, and unauthorized access.
• To improve the service — understanding, in aggregate, which features are useful.
• To communicate with you — service updates, security notices, and support replies. Marketing email only if you opt in.

Only vendors that help us run the service, under contract, and only with the minimum needed:

• Hosting & database. Our infrastructure providers store your data encrypted at rest and in transit.
• Email delivery. Transactional email (password resets, share notifications).
• Payment processing (when paid plans launch).
• People you share with. When you create a share link, whoever has that link can see what you shared, on the terms you set. You can revoke any share link at any time.

We do not share your data for anyone else's marketing.

As long as your account is active. If you delete a pet, memory, or record, we remove it from our live systems promptly. Encrypted backups may retain deleted content for up to 30 days before rolling off. If you delete your account, we delete your personal data — except records we're legally required to keep (for example, billing history where applicable).

Wherever you live, you can:

• Access a copy of your data.
• Correct anything that's wrong.
• Export your pet's full archive.
• Delete your account and personal data.
• Opt out of marketing email (transactional messages will continue).

Depending on where you live (EEA/UK, California, and others), you may also have the right to object to certain processing or to lodge a complaint with a data protection authority. To exercise any right, email melissa@petlys.com.

Petlys is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us data, contact us and we will delete it.

Our providers may store or process data in the United States and other countries. Where required, we rely on standard contractual clauses and equivalent safeguards.

We use HTTPS everywhere, encryption at rest, per-user database row-level security, signed and time-limited photo/voice URLs, and leaked-password checks at sign-up. No system is perfect — read more on our Trust page.

If we make material changes, we'll post the updated policy here and update the "Last updated" date. For significant changes we will also notify you by email.

Petlys · melissa@petlys.com