— Trust & privacy
Your pet's memories belong to you. Nothing about that is negotiable.
This page is written by Petlys — plainly, in the language we'd want to read. It's not a legal certification. It describes the practices and controls actually in place today.
— The things we don't do
We don't sell your data.
Not to advertisers. Not to data brokers. Not to anyone. Your memories are not our product.
We don't train AI on your pets.
Your photos, videos, and stories are never used to train machine learning models — ours or anyone else's.
We don't run ads.
No ad networks. No tracking pixels. No third-party analytics watching you scroll.
— What we protect, and how
Quiet, boring, thorough security.
Encrypted in transit and at rest.
Every request runs over HTTPS. Your photos, videos, and records are stored encrypted at rest by our infrastructure providers.
Row-level security on every table.
The database enforces, row by row, that only you can read or change your pets' data. Not a check we run in code — a rule the database itself refuses to break.
Signed, time-limited photo links.
Photo and video URLs are private by default. When you share a memory, the link is signed and expires — no guessable public URLs.
Leaked-password protection.
When you set a password, we check it against a public database of known-compromised passwords and reject matches, so a breach elsewhere can't reach your Petlys account.
Sharing you control.
Share links to a vet or family member are opt-in, revocable, and audited. You can turn any of them off from your dashboard.
Delete on request, always.
If you ever want to leave, close your account and we delete our copy. Your pet's story lives here with you — quiet, private, and never sold on.
— Where your money goes
Membership pays for the app — and the people who show up.
Because we don't run ads or sell data, memberships are how we keep the lights on. A fixed $0.50 per pet, every month — 100% of it — is pooled and turned into bags of food for the volunteer-run rescues that feed shelter pets. Every bag we ship is posted publicly on the impact page.
— How we prove it
Verifiable, without exposing dollars or rescue paperwork.
Proof shouldn't require us to publish invoices, revenue math, or anything a rescue would rather keep off the internet. So we publish the parts that are safe to share — and make them easy to independently verify.
What we publish for every shipment.
Date, number of bags, and the name of the volunteer-run rescue that received them. Enough for anyone to see the pattern, dated in real time.
What we don't publish — on purpose.
No order paperwork, no invoice totals, no aggregate dollars spent, no member counts. Those turn a good-faith program into a spreadsheet other people can back-solve for revenue, and they expose paperwork that belongs to us and our rescues — not the public internet.
Verify us directly with the rescue.
Every entry names the rescue. If you want to confirm a shipment actually arrived, call or email them and ask. We won't be offended — that kind of check is exactly why we name them.
Extra shares work the same way.
When members add extra $0.50 shares to the rescue food fund, those dollars pool into the same shipments — logged the same way, with the same public entry when a bag ships.
— Reach us
Found something? Tell us first.
Questions about your data, or a security issue you'd like to report? Please email us and give us a reasonable window to respond before public disclosure. We'll write back.
support@petlys.com