Privacy Policy

Last updated: May 8, 2026 · Effective date: May 8, 2026

1. Introduction

This Privacy Policy describes how Peto ("we," "us," "our," or the "App") handles information in connection with your use of the App. Peto is designed to be a fully offline-first pet health tracker. We have built the App with privacy as a foundational principle.

By downloading, installing, or using Peto, you agree to this Privacy Policy. If you do not agree, please do not use the App.

2. Information stored on your device

Peto stores the following information locally on your device only. This information is not transmitted to us or to any third party unless you explicitly export and share it yourself.

• Pet profiles: name, species, breed, sex, birth date, weight, color, microchip ID, and any photo you choose to add.
• Medical records: visit dates, veterinarian and clinic names, symptoms, diagnoses, treatments, medications, health status assessments, follow-up dates, costs, and notes.
• Reminders: titles, dates, times, and descriptions for upcoming pet care events.
• App preferences: theme selection, notification toggle state, and onboarding status.
• Pet photos: any image you choose to attach to a pet profile, stored in the App's local storage.

3. Information collected by third-party services

3.1 Google AdMob (advertising)

Free users see advertisements served by Google AdMob. AdMob may collect the following automatically:

• Advertising identifier (Android Advertising ID or Apple's IDFA, if not limited)
• IP address and approximate location derived from it
• Device model, operating system version, and language
• Ad interaction events (impressions, clicks)

This data is collected and processed by Google in accordance with their privacy policy: https://policies.google.com/privacy.

How to opt out: You can limit ad personalization in your device settings (Android: Settings → Privacy → Ads → Reset/Delete advertising ID; iOS: Settings → Privacy & Security → Tracking → disable Allow Apps to Request to Track). Pro subscribers see no ads, and AdMob is not invoked at all on their devices.

3.2 Apple App Store and Google Play

When you purchase a subscription or upgrade, the transaction is processed entirely by Apple or Google. We do not see, collect, or store your payment information. Refer to their respective privacy policies for details.

4. What we do not collect

We want to be explicit. Peto does not collect any of the following:

• Your name, email address, phone number, or any other personal identifier
• Precise GPS or location data
• Your contacts, calendar, or messages
• Photos or media files outside what you explicitly attach to pet profiles (which never leave your device)
• Your browsing history
• Your health, fitness, or biometric data
• Voice recordings or microphone input

5. Photos and pet images

When you add a photo to a pet profile, the image is stored locally in the App's sandboxed storage area on your device. We do not upload, sync, transmit, or have any access to these photos. They remain entirely on your device until you delete them or uninstall the App.

6. Notifications

Peto uses local push notifications to remind you of scheduled pet care events. These notifications are scheduled and delivered entirely on your device by your operating system. No notification content is sent through any external server. You can disable notifications at any time from the App's Settings or your device settings.

7. Data export and portability

You can export all of your Peto data as a JSON file at any time from Settings → Export backup. The exported file is created locally and shared via your device's standard share sheet (email, cloud drive, messaging app, etc.). We never see this file. You retain full ownership and control of your exported data.

8. Data retention and deletion

Because all data is stored locally on your device, you have full control over its lifetime:

• To delete a single pet or record: use the delete actions within the App.
• To delete everything: uninstall Peto. Your operating system will automatically remove all locally stored App data.
• To overwrite all data: use the "Restore from backup" feature with a different JSON file.

We do not retain any of your pet data on our servers because we do not have your pet data on any server.

9. Security

Because your data lives on your device, its security is governed primarily by your device's security model — your screen lock, OS encryption, and account safeguards. We recommend enabling a device passcode or biometric lock to protect access to your data. For data transmitted to AdMob or the App Store/Google Play, those services use industry-standard encryption (TLS) in transit.

10. Children's privacy

Peto is not directed at children under the age of 13 (or 16 in jurisdictions that apply that threshold). We do not knowingly collect any data from children. If you believe a child has provided information through the App, please contact us and we will work to remove it.

11. International users

Peto is designed to operate the same way globally. Because your pet data does not leave your device, there are no cross-border data transfers initiated by the App. Data collected by AdMob or the App Store/Google Play may be processed in the United States or other countries; refer to those services' policies for specifics.

11.1 European Economic Area (GDPR)

If you are in the EEA, you have the right to access, rectify, erase, restrict processing of, and port any personal data we hold about you. Because we do not collect personal data, these rights apply primarily to data held by AdMob (free users only). You can withdraw advertising consent at any time by upgrading to Pro or by limiting ad tracking in your device settings.

11.2 California (CCPA / CPRA)

California residents have the right to know what personal information is collected, to delete it, and to opt out of its "sale" or "sharing." We do not sell your personal information. AdMob's data collection for advertising may constitute "sharing" under CPRA; you can opt out by upgrading to Pro or by enabling Limited Ad Tracking on your device.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the App, applicable law, or our practices. The "Last updated" date at the top of this page will reflect any changes. Material changes will be communicated through an in-App notice or update. Your continued use of the App after changes are posted constitutes acceptance.

13. Contact us

If you have questions, concerns, or requests regarding this Privacy Policy or your data, please contact us:

• Email: secretbaseprimary@gmail.com
• Postal mail: [Your business address]