Privacy Policy

Last updated: 8 October 2026

1. Controller

The controller responsible for data processing in connection with the Petuvo app is:


Zur hohen Straße 4
35796 Weinbach/Fürfurt
Germany
Phone: +49 4171 – 7888759
Email:

2. General Information on Data Processing

Personal data is processed only to the extent necessary to provide a functional app and the related content and services. Processing is carried out in accordance with the applicable data protection laws.

3. Categories of Data Processed

3.1 Account Data

When creating and using an account through Firebase Authentication, the following data is processed in particular:

  • email address
  • unique user ID (UID)

Password management is handled through Firebase Authentication, and there is no access to your plain-text password. In addition, a display name is automatically generated from the prefix of your email address. A profile image field is technically provided for but is not currently actively used. According to Google's Firebase documentation, Firebase Authentication also processes authentication-related data such as email addresses, passwords, phone numbers, user agents, and IP addresses in order to provide sign-in functionality and abuse prevention. For more information: firebase.google.com/support/privacy

3.2 Pet Profile Data

For each pet profile created, the following data may in particular be stored:

  • name
  • pet type
  • breed
  • age
  • weight
  • microchip number
  • date of birth
  • sex
  • optional pet photo
  • name, phone number, and address of a veterinarian
  • name, phone number, and address of an emergency veterinarian

3.3 Diary Data

For diary entries, the following data may in particular be stored:

  • date
  • mood
  • free-text entry
  • pet weight
  • optional photo

3.4 Appointment and Routine Data

For appointments, the following data is processed in particular:

  • title
  • date
  • time
  • appointment type
  • notes
  • reminder settings

For routines, the following data is processed in particular:

  • title
  • time
  • completion status
  • reminder settings

3.5 Photo Data

Optional pet photos and optional diary photos are automatically compressed on the device before being uploaded and stored.

3.6 Data for the 'Care for a pet together' Feature

If a pet profile is entrusted to another person, the related sharing code as well as the UID and chosen display name of the person it is entrusted to are processed.

3.7 Pro / Trial Status

The system stores whether an account is in free status, trial status, or Pro status, as well as the start time of a trial period and, where applicable, a purchase date.

When the Pro version is purchased, the app sends proof of purchase to a Petuvo server (Cloud Functions in Europe, region europe-west1), which verifies the purchase. On Android, the Google Play purchase token is checked against the Google Play API; on iOS, the App Store transaction ID is checked against Apple's App Store Server API. The account's user document stores the Pro status, the purchase time, the purchase platform, and the proof of purchase (purchase token or transaction ID). For iOS, the original transaction ID is additionally linked to one account so that a purchase cannot be transferred to multiple accounts.

The purpose of this processing is to unlock and restore Pro. The legal basis is performance of a contract (Art. 6(1)(b) GDPR). Petuvo does not process payment data (e.g. card or bank details); Google or Apple handle payment processing as independent controllers.

3.8 Local Device Data

Certain information remains exclusively on the device and is not synchronized with servers. This includes in particular:

  • notification settings
  • information about which pet was last selected as active

4. Purposes of Processing

The above data is processed in particular for the following purposes:

  • setting up, managing, and securing the user account
  • synchronizing data across devices when signing in with the same account
  • providing pet management, diary, appointment, routine, and emergency contact features
  • enabling the 'Care for a pet together' feature for pet profiles
  • triggering local reminders and notifications on the device
  • generating a PDF export of the diary on the device
  • enabling and managing Pro features

5. Legal Bases for Processing

Where applicable, personal data is processed on the following legal bases:

  • Article 6(1)(b) GDPR for steps prior to entering into a contract and for performance of the user relationship, in particular for registration, sign-in, account management, and provision of the app's core functions
  • Article 6(1)(a) GDPR where consent is given, for example for optional features or certain device permissions
  • Article 6(1)(f) GDPR on the basis of legitimate interests in providing a secure, stable, and functional app

6. Recipients and Processors

Firebase by Google is used for authentication, database services, and file storage. The following services are used in particular:

  • Firebase Authentication
  • Cloud Firestore
  • Firebase Storage

Google describes Firebase customers generally as controllers and Google generally as a processor or service provider in connection with Firebase usage. For more information: firebase.google.com/support/privacy

No additional active analytics, advertising, or crash-reporting services are currently used in Petuvo.

7. Processing Locations and Third-Country Transfers

Data processing is carried out via Google Firebase infrastructure.

For Cloud Firestore, the selected location for the project is Europe (eur3). According to Google's documentation, this multi-region includes europe-west1 (Belgium) and europe-west4 (Netherlands), with europe-north1 (Finland) listed as the witness region. For more information: cloud.google.com/firestore/native/docs/locations

For Firebase Authentication, Google's official Firebase documentation states that this service is operated only from US data centers, and authentication data is therefore processed exclusively in the United States. For more information: firebase.google.com/support/privacy

To the extent personal data is transferred to the United States in connection with Firebase Authentication, this constitutes a transfer to a third country under data protection law. Google refers to its privacy and contractual mechanisms for international data transfers, including information about the EU-U.S. Data Privacy Framework. For more information: firebase.google.com/support/privacy

8. Advertising, Tracking, and Analytics

Petuvo currently does not display advertising and does not collect advertising-related identifiers. No advertising SDK is actively integrated.

A Google Analytics identifier may exist at project level; however, the service is not currently initialized or actively used in the app. Accordingly, no analytics or tracking data is currently processed through Google Analytics.

A crash-reporting service such as Crashlytics or a comparable service is not currently active.

9. Access to Device Functions

9.1 Calendar

If an appointment is manually exported to the device calendar, the app transfers the title, start and end date, a description, and, where applicable, a reminder time to the native device calendar. This only happens at the user's active request. No data is read from the calendar.

9.2 Notifications

Reminders for appointments and routines are created locally on the device. No transmission to a central push server takes place for this purpose.

9.3 PDF Export

The PDF export of the diary is generated exclusively on the device and stored or shared there. It is not stored on servers.

10. Storage Period and Deletion

The account can be deleted directly within the app. In addition, a webpage with information and contact regarding account deletion is available at petuvo-app.com/konto-loeschen. Google Play requires apps with user accounts to provide an additional web-based deletion option or a webpage for submitting a deletion request. For more information: support.google.com/googleplay

In particular, the following data is removed when an account is deleted:

  • pet profiles, including related sharing and access data
  • related routines, appointments, and diary entries
  • the user account document
  • the Firebase Authentication account

Google states for Firebase Authentication that other authentication information remains stored until deletion of the associated user is initiated, after which the data is removed from live and backup systems within up to 180 days; logged IP addresses are retained for a few weeks. For more information: firebase.google.com/support/privacy

Note on photos: According to the current technical implementation, when an account is deleted, the related database entries are removed. Pet and diary photos stored in file storage are not currently deleted automatically.

Note on entrusted pets: If the owner of a pet deletes the account, the entrusted pet profile is also deleted. The accounts of the persons it was entrusted to remain unaffected.

11. Data Subject Rights

Subject to the applicable legal requirements, data subjects have the following rights in particular:

  • right of access
  • right to rectification
  • right to erasure
  • right to restriction of processing
  • right to data portability
  • right to object to certain processing activities
  • right to withdraw consent with effect for the future
  • right to lodge a complaint with a competent supervisory authority

12. Changes to This Privacy Policy

This Privacy Policy may be amended if data processing in Petuvo changes or if legal or regulatory requirements make this necessary. The current version will be published in the app or on the associated website.