At Amberpaws (“we”, “us”, “our”), privacy is not a feature — it's our foundation. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our iPhone application and services.

1. Who we are

Data Controller: Amberpaws
Contact: info@amberpaws.app
Website: www.amberpaws.app

2. Information we collect

2.1 Information you provide

Account data: name, email, password (hashed using bcrypt), profile photo.
Pet profiles: pet name, breed, age, weight, photos, medical history, vaccinations.
Verified users: government ID for identity verification only — processed in-memory and never stored after validation.
Content: messages, photos, posts, and comments you share in the community.

2.2 Information collected automatically

Location data: precise GPS location for SmartQR alerts, Community Map, and walk tracking. We request foreground access through iOS's standard location prompt and only request Always access if you explicitly enable background features. You can revoke this anytime in iOS Settings.
Device data: device model, iOS version, vendor identifier (IDFV), IP address.
Usage and diagnostics: features used, time spent, anonymized crash reports.

2.3 Information from third parties

Sign in with Apple when you choose to create an account using your Apple ID (you can use Apple's “Hide My Email” feature).
Apple Find My / AirTag when registered tags are detected by the network.

3. Tracking & Apple App Tracking Transparency

Amberpaws does not track you across other apps or websites owned by other companies. We do not use the Identifier for Advertisers (IDFA) and we do not present an App Tracking Transparency (ATT) prompt because we have no use for cross-app tracking.

Analytics are limited to first-party, non-identifying usage statistics used to improve the app.

4. How we use your data

To provide and operate the Amberpaws service.
To reunite lost pets with their owners via SmartQR alerts and the Community Map.
To personalize your experience (pet care recommendations via AmberBrain AI).
To process payments for Premium (Verified) subscriptions through Apple's App Store and our payment processor.
To communicate with you about your account, safety alerts, and service updates.
To prevent fraud, abuse, and protect community safety.
To comply with legal obligations.

5. Legal basis for processing (GDPR)

Consent: for marketing communications and optional features such as background location.
Contract: to provide the services you've signed up for.
Legitimate interest: to keep the platform safe and improve our services.
Legal obligation: when required by law.

We do not sell your data. We only share data with:

Service providers (cloud hosting, payment processing, error monitoring) under strict data processing agreements.
Community members when you choose to share a post, photo, or pet profile.
Legal authorities when required by law or to protect safety.

7. International transfers

Your data may be processed outside the European Economic Area. When this happens, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission to ensure adequate protection.

8. Data retention

Account data: kept until you delete your account.
Memorial Mode profiles: kept indefinitely at the owner's explicit request, to preserve the memory of deceased pets.
Verification IDs: processed in-memory and never persisted after verification is complete.
Logs and backups: up to 90 days.

9. Account & data deletion

Per Apple's App Store guidelines, account deletion is available directly inside the app: Settings → Account → Delete Account. Deletion is permanent and removes your personal data within 30 days, except:

Information we're legally required to retain (e.g., transaction records for tax compliance).
Anonymized analytics with no link to your identity.
Memorial Mode profiles you have chosen to preserve.

You can also request deletion by emailing info@amberpaws.app. We respond within 30 days.

10. Your rights (GDPR)

Under the GDPR and equivalent laws, you have the right to:

Access the data we hold about you.
Rectify inaccurate data.
Erase your data (“right to be forgotten”).
Restrict or object to processing.
Data portability — export your data in a machine-readable format.
Withdraw consent at any time.
Lodge a complaint with your local data protection authority.

To exercise these rights, contact us at info@amberpaws.app. We respond within 30 days.

11. Security

We use industry-standard encryption (TLS 1.3 in transit, AES-256 at rest). Verification documents are processed in-memory and never stored. Access to personal data is logged and restricted on a need-to-know basis. We promptly notify affected users of any data breach as required by law.

12. Children's privacy

Amberpaws is not intended for users under 13 (or 16 in the EU). We do not knowingly collect data from children. If you believe a child has created an account, contact us immediately at info@amberpaws.app and we will delete the account.

13. Changes to this policy

We may update this policy from time to time. When we do, we'll notify you via email or in-app notification at least 30 days before changes take effect.

14. Contact

For any privacy-related questions or requests:
Email: info@amberpaws.app

Privacy Policy