Your data, in plain English.

Petlys ("we," "us," "our") is a service that helps you preserve your pet's memories, milestones, and care records in one place. This policy explains what we collect, why, and what we don't do with it. Questions? support@petlys.com.

We only collect what the service actually needs to work:

• Account info. Your email address, a display name, and (if you choose one) an avatar.
• Your pet's story. Anything you add: photos, videos, memories, medical records, contacts, routines, milestones, and share links you create.
• Basic technical logs. IP address, browser, and error logs, kept briefly to keep the service secure and debuggable.
• Payment info (only if and when paid plans launch), handled by a PCI-compliant processor. We never see or store your full card number.
• Referral metadata. If you share your personal referral link and a friend joins, we record the relationship (who invited whom) so we can credit you. To prevent abuse of the referral program, we also compare limited signals across the referrer and the invited account — payment-method fingerprint, IP address, and billing address — and may flag suspicious pairs for manual review. This data is used only to run the referral program, is never sold or shared, and is deleted with your account.

• We do not sell your personal information — not to advertisers, not to data brokers, not to anyone.
• We do not use your photos, videos, or pet stories to train AI models, ours or anyone else's.
• We do not run third-party ads on the service.
• We do not embed third-party advertising trackers or behavioral analytics pixels.

• To provide the service — showing you your pets, memories, records, and share links.
• To secure the service — detecting abuse, fraud, and unauthorized access.
• To improve the service — understanding, in aggregate, which features are useful.
• To communicate with you — service updates, security notices, and support replies. Marketing email only if you opt in.

Only vendors that help us run the service, under contract, and only with the minimum needed:

• Hosting & database. Our infrastructure providers store your data encrypted at rest and in transit.
• Email delivery. Transactional email (password resets, share notifications).
• Payment processing (when paid plans launch).
• Bot & abuse protection. We use Cloudflare Turnstile on sign-up and other public forms to tell humans from bots. Turnstile may collect limited technical signals (IP, user agent, browser characteristics) to make that decision. It does not use tracking cookies or build an advertising profile of you. See Cloudflare's privacy notice for details.
• People you share with. When you create a share link, whoever has that link can see what you shared, on the terms you set. You can revoke any share link at any time.

We do not share your data for anyone else's marketing.

As long as your account is active. If you delete a pet, memory, or record, we remove it from our live systems promptly. Encrypted backups may retain deleted content for up to 30 days before rolling off. If you delete your account, we delete your personal data — except records we're legally required to keep (for example, billing history where applicable).

Wherever you live, you can:

• Access a copy of your data.
• Correct anything that's wrong.
• Delete your account and personal data.
• Opt out of marketing email (transactional messages will continue).

Depending on where you live (EEA/UK, California, and others), you may also have the right to object to certain processing or to lodge a complaint with a data protection authority. To exercise any right, email support@petlys.com.

Petlys is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us data, contact us and we will delete it.

Our providers may store or process data in the United States and other countries. Where required, we rely on standard contractual clauses and equivalent safeguards.

We use HTTPS everywhere, encryption at rest, per-user database row-level security, signed and time-limited photo and video URLs, and leaked-password checks at sign-up. No system is perfect — read more on our Trust page.

If we make material changes, we'll post the updated policy here and update the "Last updated" date. For significant changes we will also notify you by email.

Petlys · support@petlys.com