Privacy Policy — Peti

Last updated: July 6th, 2026
Effective date: July 6th, 2026

---

1. Who We Are

Peti ("Peti", "we", "us", or "our") is a mobile application that provides a digital health record and reminder service for pet owners.

The app is operated by Mandala Colectivo LLP, a Limited Liability Partnership registered in India, with its registered office at Hyderabad, India (the "Operator").

This Privacy Policy explains what personal data we collect through the Peti app, how we use and share it, how long we keep it, and the rights you have. It is designed to align with India's Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable rules.

By creating an account or using Peti, you acknowledge that you have read and understood this Privacy Policy.

2. Who Can Use Peti (Age Restriction)

Peti is intended only for individuals who are 18 years of age or older. We do not knowingly collect personal data from anyone under 18. If we become aware that we have collected data from a person under 18, we will delete it. Do not use the app or provide any personal data if you are under 18.

3. The Personal Data We Collect

We collect only the data needed to run the service. This falls into the following categories.

3.1 Data you provide directly

• Account & identity: your name, mobile number (used for one-time-password sign-in), and email address (if provided). We use a one-time password (OTP) sent by SMS to verify your mobile number — we do not use passwords.
• Pet profiles: information you enter about your pets, such as name, animal type, breed, date of birth or estimated age, gender, sterilisation status, microchip number, and a photo.
• Health records: records you add to a pet's timeline — for example vaccinations, vet visits, medications, weight, deworming, allergies, grooming, and other notes — including dates, next-due dates, clinic and vet names, and any details you enter.
• Uploaded documents & images: photos of vaccination cards, vet bills, prescriptions, and similar documents you choose to scan or attach.
• Support communications: information you send us when you contact support or exercise your rights.

3.2 Data we generate or collect automatically

• Subscription & billing status: your plan, billing cycle, trial and subscription status, renewal dates, and monthly AI-scan usage count. Payment card and bank details are handled by the app stores and payment processors described in Section 5 — we do not store your card or bank-account numbers.
• Reminders & notifications: scheduled reminder dates and delivery status for push notifications.
• Device & usage data: basic technical data such as device type, operating system version, app version, language setting, and diagnostic/analytics events (see Section 5) used to keep the app running, secure, and improving.

3.3 A note on "sensitive" data

Peti stores animal health information, which relates to your pets rather than to you as a person. We still protect it with the same safeguards described in this policy.

3.4 Camera and photo-gallery access

Peti requests access to your device's camera and photo gallery/library only when you choose to add a pet's profile photo or scan a document (such as a vaccination card or vet bill). We use this access solely to let you capture a new photo or select an existing one at that moment.

• We access the camera and photos only on your action — never in the background.
• We do not scan, index, read, or upload any images other than the specific photos you deliberately capture or select.
• You can grant or revoke camera and photo permissions at any time in your device settings. If you decline, you can still use Peti and enter records manually.

4. How We Use Your Data and Our Legal Basis

Under the DPDP Act we process your personal data on the basis of the consent you give when you sign up and use features, and for certain legitimate uses permitted by law. We use your data to:

• create and manage your account and verify your mobile number by SMS OTP;
• store and display your pets' profiles, health records, and documents;
• extract information from documents you scan using AI (see Section 5.4);
• schedule and send you reminders and push notifications about upcoming due dates;
• manage your free trial, subscription, plan limits, and billing;
• provide customer support and respond to your requests;
• keep the service secure, prevent fraud and abuse, and fix problems; and
• comply with applicable legal, tax, and accounting obligations.

We do not sell your personal data.

5. Service Providers and Third Parties We Share Data With

We share personal data only with the service providers that make Peti work, and only as needed. Each processes data under its own terms and privacy policy.

5.1 Hosting, database & storage — Supabase

Your account, pet, health-record, and subscription data, and the documents and photos you upload, are stored using Supabase (managed database, authentication, and file storage). This data is protected by row-level security so that you can access only your own records.

5.2 SMS one-time passwords — MSG91

To verify your mobile number at sign-in, we send an OTP by SMS through MSG91, an SMS gateway provider. Your mobile number is shared with this provider solely to deliver the message.

5.3 Payments & subscriptions — RevenueCat, Apple, Google

Subscriptions and the free-trial autopay mandate are handled through RevenueCat, together with Apple App Store (In-App Purchase) and Google Play Billing. These providers process your purchase, manage billing, and share your subscription status with us. Your payment-instrument details (card/UPI/bank) are handled by Apple, Google, and their payment partners — we never receive or store them.

5.4 AI document scanning — Anthropic

When you choose to scan a document (such as a vaccination card or vet bill), the image is sent to Anthropic's Claude API so that the app can automatically read and suggest structured record details for you to review. The image and extracted text are processed to provide this feature. Scanning is optional — you can always enter records manually instead.

5.5 Analytics & diagnostics — Firebase / Google Analytics

We use Firebase / Google Analytics for Firebase to understand how the app is used, measure performance, and diagnose problems. This may involve device identifiers and usage events. This helps us improve stability and features.

5.6 Notifications & app delivery — Expo

We use Expo to deliver push notifications (such as reminder alerts) and to manage app updates. Expo processes the technical tokens needed to route notifications to your device.

5.7 Legal disclosures

We may disclose personal data if required by law, court order, or a lawful request from a government authority, or to protect our rights, users, or the public.

6. Data Storage Location and International Transfers

Some of the service providers listed in Section 5 may store or process data on servers located outside India. Where data is transferred internationally, we rely on the provider's contractual and security commitments to protect it, consistent with the DPDP Act and any restrictions notified by the Government of India.

7. How Long We Keep Your Data (Retention)

We keep your personal data for as long as your account is active and you use the service.

When you delete your account, we promptly erase your personal data — including your pet profiles, health records, and uploaded documents — except for a limited set of billing and transaction records that we are required to retain for legal, tax, and accounting purposes for the period required by law. Once that period ends, those records are deleted or anonymised.

We may also retain data for as long as necessary to resolve disputes, prevent fraud and abuse, or comply with our legal obligations.

8. Your Rights Under the DPDP Act

Subject to applicable law, you have the right to:

• Access — request a summary of the personal data we hold about you and how we process it;
• Correction & updates — correct or update inaccurate or incomplete data (you can edit most of your data directly in the app);
• Erasure — request deletion of your personal data, or delete your account from within the app;
• Withdraw consent — withdraw a consent you previously gave, without affecting processing already carried out;
• Grievance redressal — raise a complaint with us about how we handle your data (see Section 11); and
• Nominate — nominate another individual to exercise your rights in the event of your death or incapacity, as provided under the DPDP Act.

To exercise any right, contact us using the details in Section 11. We may need to verify your identity before acting on a request.

9. How We Protect Your Data (Security)

We use reasonable technical and organisational measures to protect your data, including encrypted transport, access controls, row-level database security so users can access only their own records, and secure storage of authentication tokens on your device. No system is perfectly secure, but we work to protect your information and to notify you and the Data Protection Board of India of a personal-data breach where the law requires.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date and, where appropriate, notify you in the app. Your continued use of Peti after an update means you accept the revised policy.

11. Contact Us and Grievance Officer

For any questions, requests, or complaints about your personal data, or to exercise your rights, contact:

Support
Email: support@petiapp.ai

We will acknowledge and respond to grievances within the timelines required under the DPDP Act and applicable rules. If you are not satisfied with our response, you may escalate your complaint to the Data Protection Board of India.

Peti is operated by Mandala Colectivo LLP. This document should be read together with our Terms & Conditions.