Privacy Policy.

01Who is the data controller

The controller of personal data processed by Petline is:

• Legal name: LAYSON EDUARDO VIEIRA
• Brazilian Tax ID (CNPJ): 46.110.023/0001-50
• Data Protection Officer (DPO) / privacy contact: [email protected]

For any question, request, or to exercise your rights under this Policy, please email [email protected].

02Quick glossary

• Personal data: any information relating to an identified or identifiable natural person.
• Processing: any operation performed on personal data (collection, use, storage, sharing, erasure, etc.).
• Data subject: you, the natural person to whom the data refers.
• Controller: the party that decides the purposes and means of processing — in this case, LAYSON EDUARDO VIEIRA.
• Processor / sub-processor: third parties that process data on our behalf (e.g., Cloudflare, RevenueCat).

03What data we collect

3.1 Data you provide directly

3.2 Data collected automatically

3.3 OS-level permissions

Petline asks for permission to access:

• Camera and photo library — only when you choose to add a photo.
• Notifications — to deliver local reminders for vaccines, medications, etc.
• Exact alarms (Android) — to ensure reminders fire at the correct time.

These permissions can be revoked at any time in your device settings.

On Android, the app also declares the advertising ID permission: it is read by the subscriptions SDK (RevenueCat) to identify the device and is not used for advertising. You can reset or delete this identifier in your Android settings.

3.4 Data we DO NOT collect

• We do not collect precise location (GPS).
• We do not access your contacts, calendar, microphone, or social networks.
• We do not purchase or enrich data from third parties.
• We do not use third-party analytics, advertising or crash-reporting SDKs.
• We do not build profiles for behavioral advertising and we do not sell your personal data.

04Why we process your data

Purposes and legal bases that justify each processing activity:

05Data sharing and sub-processors

We do not sell your data. We only share with sub-processors strictly necessary for the app to operate:

We may also share data:

• When legally required — by court order, competent authority, or to defend the controller's rights.
• In a corporate reorganization — in case of merger, acquisition, or sale of assets, with prior notice and preserving the guarantees of this Policy.

06International data transfers

Some sub-processors are located outside Brazil (mainly in the USA). We rely on the following safeguards:

• Standard Contractual Clauses (SCCs) from the European Commission, where applicable.
• ANPD standard clauses or another adequate guarantee under LGPD (art. 33).
• Selection of providers with recognized security certifications (SOC 2, ISO 27001, etc.).

07How long we keep your data

You can delete individual records at any time on the timeline: they disappear from the app immediately, and permanent removal of the data and photos happens on account deletion or upon request to [email protected]. To delete your entire account, use Settings → Delete account.

08Information security

We adopt technical and organizational measures to protect your data, including:

• Encrypted communication (HTTPS/TLS) between the app and the backend.
• Passwords stored as a salted hash (PBKDF2), never in plain text.
• Authentication tokens kept in the OS's secure storage (Keychain on iOS, Keystore on Android).
• Short-lived access tokens (15 minutes); refresh tokens are stored on the server only as a hash.
• Stored photos are accessed by the app through temporary signed URLs (10 minutes).
• Session data and language and theme preferences are kept in the OS's secure storage; notification preferences are kept in the app's local storage. Health history records are held in memory and reloaded from the server each session; what remains on the device are the scheduled reminders, a cache of photos already displayed and the temporary files of any exports you generate (ID card and report).
• Principle of least privilege for internal system access.
• Authorized administrators can access account data (including pets, records, photos and conversations) for support and security; administrative actions, such as account deletion and subscription changes, are recorded in an audit log.
• Continuous incident monitoring and response plan.

No system is 100% secure. In the event of an incident that may create a relevant risk to data subjects, we will notify the ANPD and the affected individuals within the deadlines set by LGPD (art. 48) and GDPR (art. 33–34).

09Your rights as a data subject

9.1 LGPD (Brazil) — art. 18

You have the right to:

1. Confirm the existence of processing;
2. Access your data;
3. Correct incomplete, inaccurate, or outdated data;
4. Anonymize, block, or erase unnecessary data or data processed in non-compliance;
5. Port your data to another provider;
6. Erase data processed based on consent;
7. Be informed of the entities with which we share your data;
8. Be informed about the option not to consent and its consequences;
9. Withdraw consent.

9.2 GDPR (EU/EEA)

In addition, residents of the European Union/EEA have the right to:

• Restriction of processing (art. 18);
• Object to processing based on legitimate interest (art. 21);
• Not be subject to solely automated decisions with significant effects (art. 22);
• Lodge a complaint with the data protection authority of your country.

9.3 CCPA / CPRA (California, USA)

California residents have the right to:

• Know which categories of personal data we collect and for what purposes;
• Delete personal data we have collected;
• Correct inaccurate data;
• Limit the use of sensitive personal information;
• Not be discriminated against for exercising these rights.

9.4 How to exercise your rights

Send an email to [email protected] including:

• The email registered to your account;
• The right you wish to exercise;
• Any details that help us locate the request.

We will respond within 15 days (LGPD) or 30 days (GDPR/CCPA), which may be extended when complexity requires, always with prior notice.

10Artificial Intelligence and automated decisions

The "I need help" feature sends the photo and description you provide to our backend, which forwards them, together with the area you flag and the pet's profile data (name, species, breed, sex, whether neutered, date of birth or estimated age, and weight), to a third-party AI provider — Google Gemini API or, as an alternative provider, OpenAI API. The model classifies urgency (emergency, today, schedule soon, observe) and generates a general recommendation.

The AI chat (Petline Assistant) sends the conversation messages and a summary of your pets' profiles (name, species, breed, age, sex, whether neutered, and weight) to the same provider. Conversations are saved to your account until the account is deleted.

• The analysis is automated but advisory in nature and does not replace veterinary evaluation.
• You may request human review or further explanation by email.
• Photos submitted for analysis are stored linked to the timeline entry. When you delete a record, it disappears from the app immediately; permanent removal follows the data retention section.
• We do not use your photos to train third-party models without your explicit consent.

11Notifications

Petline reminders (vaccines, medications, follow-ups) are scheduled locally on your device. The backend stores your preferences (which categories are active, lead time) and a record of the actions you take on reminders (e.g. mark taken, snooze). You can turn everything off at:

• In the app: Settings → Notifications;
• System: iOS/Android Settings → Petline → Notifications.

12Premium subscriptions

Payments and charges for Petline Premium are processed by the App Store (Apple) or Google Play (Google) — we never see your card number. Receipts and subscription status are validated by RevenueCat, under its own policies; for this, RevenueCat receives your Petline account ID, your email, display name and device identifiers.

When you start a free trial, we store on our backend the trial start and end dates, the store, the chosen plan, the price shown on the screen and the app language. We use this data only to email you the reminder before the first charge. The record is erased when the trial becomes a paid subscription, within 7 days after the trial ends, or when you delete your account. The notification reminder is scheduled on the device itself, with no data sent.

To cancel:

• iOS: Settings → your name → Subscriptions;
• Android: Google Play → Payments & subscriptions → Subscriptions.

13Children and minors

Petline is not directed to children under 13 years old (or the local minimum age, e.g., 16 years in some EU countries). We do not knowingly collect data from children. If you are the guardian of a child who used the app, please email [email protected] and we will remove the data.

14Cookies and similar technologies

The app does not use cookies. The RevenueCat SDK uses device identifiers (including the advertising ID on Android, which can be reset in system settings) to manage subscriptions. The website loads fonts from Google Fonts.

15Changes to this Policy

We may update this Policy to reflect legal, regulatory, or operational changes. When the change is material, we will notify you in the app or by email with at least 15 days notice. The "Last updated" date at the top will always indicate the current version.

16Contact

• Email: [email protected]
• Controller: LAYSON EDUARDO VIEIRA — CNPJ 46.110.023/0001-50

You may also lodge a complaint with the competent authority:

• Brazil — ANPD: gov.br/anpd
• EU/EEA: the data protection authority of your country of residence
• California, USA: oag.ca.gov/privacy

This Policy was originally written in Portuguese. In case of any discrepancy between the Portuguese version and this English translation, the Portuguese version prevails.