Privacy policy

1. Who is responsible

Data controller: Pet Living (petliving.gr), Thessaloniki, Greece.

For any question or request about your data: privacy@petliving.gr.

2. What we collect

• Account: email, name (if you give one), password (stored only in hashed form), language and reminder settings.
• Pets: name, species, breed, sex, date of birth, microchip number, photo and notes you add.
• Care log: weight, vaccinations, parasite treatments, medication, vet visits, notes and dates.
• Sharing: the email addresses of people you invite and their role.
• Technical data: essential login cookies and basic logs (e.g. IP address, request time) needed for security and to run the service.

We do not use advertising or tracking cookies, and we never sell data to anyone.

3. Why we use it (legal basis)

• To provide the service you asked for: account, pet profiles, care log, sharing (performance of a contract, GDPR Art. 6(1)(b)).
• To send reminders and essential account emails (performance of a contract). You can switch reminders off in your Account.
• To keep the service secure and prevent abuse (legitimate interest, GDPR Art. 6(1)(f)).

4. Where it is stored and who helps us

We use trusted providers (processors) bound by data protection agreements:

• Supabase — database, accounts and photos. Data is stored in Frankfurt (EU).
• Vercel — hosting of the app, processing in Frankfurt (EU).
• Resend — sending email, from Ireland (EU).
• grserver.gr — hosting of the articles website (Greece).

5. Transfers outside the EU

These providers are based in, or work with partners in, the United States. Where data may be accessed from outside the EU, this is covered by the European Commission's Standard Contractual Clauses and/or the EU-U.S. Data Privacy Framework.

6. Who can see your data

Only you and the people you invite can see your pets and their care log. You can remove anyone's access at any time.

7. How long we keep it

• For as long as you have an account. If you delete it, we immediately delete your account, pets, care log and photos.
• Our provider's backups are deleted automatically within a few days.
• Invitations that are not accepted expire after 14 days.

8. Your rights

You have the right to access, correct, delete, restrict, port and object to the processing of your data. You can do most of this yourself in your Account:

• “Download my data”: get all your data as a file.
• “Delete account”: permanently delete your account and all your data.
• For anything else, email us at privacy@petliving.gr. We reply within 30 days.
• You may also complain to the Hellenic Data Protection Authority (www.dpa.gr).

9. Age

You must be at least 15 years old to create an account.

10. Security

All communication is encrypted (HTTPS). Passwords are only stored hashed, and access to each pet is enforced by the database itself.

11. Changes

If we change anything important in this policy, we will let you know by email or in the app.