Privacy Policy

You're viewing an older, archived version of this document. View the current version

Effective 2026-07-27. This is version 1 — see the version history at the bottom of this page.

This Policy explains what personal data PetNanny collects, why, who we share it with, and what rights you have over it. It's written from a full, real inventory of what this app stores — see docs/DATA_INVENTORY.md in our public source repository if you want the underlying technical detail this Policy is drawn from.

1. Who is responsible for your data

PetNanny is the data controller for the personal data described in this Policy, processed for the purpose of operating the Platform described in our Terms of Service.

2. What we collect, and why

Account & profile. Name, email, phone number, and — if you become a Nanny — a public bio, location, and (once geocoded) an approximate service area. Why: necessary to create and operate your account and, for Nannies, to be discoverable (contract necessity / consent for the optional public bio).

Pet data. If you're an Owner: your pet's name, type, breed, age, weight, vaccination status, and an optional care profile — feeding schedule, medication, health/vaccination history, your regular vet's contact, behavioral notes, and an emergency human contact. Why: this is exactly the information a Nanny needs to safely care for your pet (contract necessity). We treat the care profile as sensitive: a Nanny can only see it once a specific booking with you has been accepted — never while it's still a pending request from a stranger.

Messages. Private conversations between an Owner and a Nanny. Why: coordinating a booking requires being able to talk to the other person (contract necessity). Only the two participants in a conversation can ever read it.

Identity verification (optional, Nannies only). A government ID photo and a selfie, if a Nanny chooses to complete identity verification. These images are never visible to anyone but an admin reviewing them — not even to the Nanny who uploaded them — and are deleted as soon as an admin makes a decision (approve, request changes, or revoke), with an hourly automated backstop that catches anything a one-off technical error left behind. Only a short note survives after that ("Identity document reviewed (approved) on [date] by [admin]") — never the image itself, never an ID number. Why: legitimate interest in offering a meaningful "Identity verified" badge, only ever completed voluntarily.

Phone verification. Your phone number and a hashed record of any SMS verification code we sent you (never the plaintext code). Why: legitimate interest in preventing fraud and throwaway accounts; a verified phone also becomes a trust signal other users can see.

Location. If you're a Nanny, your approximate home area — geocoded from the location you enter, stored as an exact coordinate for accurate distance search, but never shown to anyone in exact form. What's public is a small (~300-500m), consistently-offset approximation of your real position, plus your city district — enough for "near me" search, not enough to find your actual address. This is enforced at the database level (a technical access restriction on the exact columns, not just an app-layer promise), on top of the same restriction the app's own pages already apply. Why: legitimate interest in distance-based search, with a deliberate, proportionate mitigation given how sensitive a home address is.

Bookings, care contracts & reviews. Dates, price, cancellation history, the generated care-contract document, and any review you write or receive. Why: this is the core service (contract necessity), and, for cancellation/incident history, our legitimate interest in supporting dispute resolution between users (PetNanny is a venue, not a party to any booking — see our Terms §10).

Reports & safety. If you or someone else files a report (harassment, a fake profile, a booking incident, etc.), we keep what was reported, by whom, and how our trust & safety team resolved it. Why: legitimate interest in keeping the Platform safe.

3. Who we share your data with

We use a small number of specialist processors to run the Platform. None of them may use your data for their own purposes.

We do not sell your personal data, and we do not share it with advertisers. Other users only ever see what this Platform is designed to show them — your public profile if you're a Nanny, messages you send them directly, and the fields of a care contract relevant to a booking you share with them.

4. Cookies and tracking

Today, the only cookies set by the Platform are strictly necessary ones: your signed-in session (Supabase Auth) and your saved language preference. We do not currently log IP addresses for analytics, and we have no analytics or advertising tracking pipeline at all. A dedicated cookie consent mechanism, covering any future non-essential cookies, is planned separately (see the Cookie Policy once published) — this section will be updated the moment that or any analytics capability actually ships, not before.

5. How long we keep your data

We keep most data for as long as your account exists, or as long as it's needed for the purpose it was collected for. Some specifics:

• Identity documents (§2) — deleted right after an admin's decision, as described above. This is the one category with a genuinely enforced, short-lived retention window.
• Account deletion — deleting your account (Account Settings) removes your login, profile, pets, bookings and messages, and — if you were a Nanny — your provider profile. Reviews you wrote about other users are kept but shown as "Deleted user," so deleting your account can't quietly erase someone else's honest review history or unfairly change a provider's rating.
• Bookings, contract records, phone-verification records, and reports are, honestly, kept indefinitely today — we do not yet have an automated schedule that ages these out. Closing that gap with a real retention policy is tracked as upcoming work; we are disclosing it here rather than claiming a schedule that doesn't exist yet.

6. Your rights

Under the GDPR, you have the right to: access the personal data we hold about you; have inaccurate data corrected; request deletion; request that processing be restricted in certain cases; object to processing based on our legitimate interest; and receive a copy of your data in a portable format. Today, you can exercise deletion directly and immediately from Account Settings. For access, correction, portability, or objection requests, contact us at hello@petnanny.lt and we'll action it manually — a self-service one-click export and a fully-automated rights request flow are planned (tracked separately) but not built yet; we're not going to pretend they already exist. You also have the right to lodge a complaint with the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija, vdai.lrv.lt), Lithuania's supervisory authority.

7. International transfers

Our processors (§3) may process data on infrastructure located inside or outside the European Economic Area, depending on each processor's own regional configuration. Where data is processed outside the EEA, we rely on the safeguards each processor itself commits to in its own data processing terms (such as the EU Standard Contractual Clauses).

8. Security

We rely on our processors' platform-level security (encryption in transit and at rest, access controls) and enforce our own access rules directly in the database — for example, only an admin can ever read an identity document, and a Nanny's exact home coordinates are never selectable by an ordinary user account, enforced as a database-level restriction, not just an app-layer promise. No system is perfectly secure; if we ever become aware of a data breach affecting you, we will notify you and the supervisory authority as required by law.

9. Children

The Platform is not directed at, and accounts may not be created by, anyone under 18.

10. Changes to this Policy

The same change process described in our Terms of Service §12 applies here: a material change is emailed to affected users (and, once available, shown as an in-app notice); a non-material clarification takes effect on publication. Every past version stays available at a stable archive URL (e.g. /privacy/v1).

11. Contact

Questions about this Policy, or a request to exercise any of the rights in §6, can be sent to hello@petnanny.lt.

Version history

• Version 2 (current)
• Version 1