PetVita Privacy Policy

Version: 2026-10-20

This Privacy Policy describes how PetVita collects, uses, shares, and protects your personal data, in compliance with Brazil's General Data Protection Law (Law No. 13,709/2018 — LGPD).

Controller

The controller of the personal data processed by PetVita is THIAGO FLOSINO FERREIRA LEITE TECNOLOGIA LTDA, registered under Brazilian company ID (CNPJ) 30.944.384/0001-61. Contact channel for exercising your rights and privacy questions: contato@petvita.tech.

Data we collect

We collect:

• your email and display name, used to identify your account;
• your phone number, when provided, stored encrypted;
• data about the pets you register: name, species, breed, sex, birth date or approximate age, weight, notes, and microchip code;
• vaccines, medications, deworming/flea treatments, food tracking, health conditions, and weight history that you register for your pets;
• photos and documents about your pet that you upload, including file metadata (type and size);
• your device's approximate or exact location, only when the Nearby Services feature is available in the app, when you use it, and only with your explicit consent, given on that screen;
• your device's push notification token (Firebase Cloud Messaging), used to send reminders;
• waitlist: the email you enter on the website, the language, the dates of sign-up and confirmation, and the version of the consent, before any account exists; we do not store your IP address;
• subscription: your account's internal identifier, the subscription status and plan, the start, renewal, and expiry dates, and the transaction records; your card details stay with Google Play and never reach PetVita;
• audit records of sensitive actions on your account (for example, a data export or a deletion request), without any personal data content beyond what is needed to identify the action taken.

The petvita.tech website does not use cookies or any third-party tracking or analytics tools.

Legal bases

We process your data based on: contract performance (LGPD art. 7, V), to provide the app features you sign up for when you create your account and for the Premium subscription; consent (art. 7, I), for Analytics, location, notifications, product recommendations, and the waitlist — each purpose with a separate, revocable opt-in; legal obligation compliance (art. 7, II), for audit records, transaction records, and the minimum retention required by law; regular exercise of rights (art. 7, VI), to keep transaction records while claims may still be raised; and legitimate interest, where applicable, for security and fraud prevention.

Purpose: Analytics

We use Firebase Analytics and Firebase Crashlytics to understand app usage and diagnose crashes. This collection is disabled by default from the moment the app starts and is only turned on if you accept the "Analytics" option during sign-up. If you decline, no usage event or crash report is collected during your session. Your choice is recorded with a date and this policy's version. To review it later, use the contact channel listed under "Contact."

Purpose: Location

When the Nearby Services feature is available in the app, we collect your location only when you open the search, and only after you explicitly authorize it in the notice shown on that screen — we do not collect location in the background. If you decline, you can still search for services by city instead of using your current position. You may revoke this consent at any time in Profile > Privacy, or by denying the operating system's location permission; the next search will stop using your position. While the feature is not available, PetVita does not collect your location.

Purpose: Notifications

We register your device's push notification token to send reminders about vaccines, medications, deworming/flea treatments, and food supply, plus notices about the processing of documents you upload. You control whether you receive notifications directly in your device's operating system notification settings — disabling that permission stops any notification from the app. Your in-app preference is also recorded in Profile > Privacy, for your consent history.

Purpose: Waitlist

If you join the waitlist on the website, we use your email only to tell you about the closed test and the launch of PetVita and to invite you to join the test through Google Play — which is why we ask for your Google account email. We do not use the list for any other purpose.

Consent for the list is separate from any other and is never pre-checked. After you sign up, we send you an email to confirm the request (double opt-in). Without confirmation, your email is deleted within 7 days. Whoever confirms stays on the list until 90 days after the launch notice or until they ask to leave, whichever comes first.

Every waitlist email carries a "Leave the list" link, which deletes your address right away. You can also ask to leave at contato@petvita.tech. We do not store your IP address and we do not share the list with anyone other than the email provider that sends the messages.

Purpose: Product recommendations

The app does not send promotional communications by email, push, or SMS to your account. The waitlist is a separate sign-up, with its own consent, described in the section "Purpose: Waitlist". When the partner suggestions feature is available, the product suggestions shown inside the app (for example, food or hygiene products) will be contextual recommendations from affiliate partners, always labeled as such — never presented as neutral or organic content — and your preference will be recorded in Profile > Privacy. If we ever start sending promotional communications outside the app, we will ask for specific consent beforehand.

Subscription data

The Premium subscription is purchased and paid for on Google Play (Google LLC), which processes the payment: PetVita does not receive your card number. RevenueCat, Inc. (USA) receives the receipt and purchase status from Google Play, tied to an internal account identifier, so that the app knows whether your subscription is active. At PetVita we keep the subscription status, plan, and dates and, for the period required by law, the transaction records.

Sharing with third parties

We share data only with processors that help us provide the service, under contract and only for the purpose described here:

• Google Firebase — Authentication (sign-in), Cloud Messaging (push notifications), Analytics, and Crashlytics (the latter two only under your consent);
• Google Play — payment and management of the Premium subscription, as described in the "Subscription data" section;
• RevenueCat — your subscription status, tied to an internal account identifier;
• an S3-compatible object storage provider, hosted in Brazil, for your photos and documents — always in a private bucket, accessible only through a short-lived signed link;
• a transactional email provider, for verification codes, account notices, and the waitlist emails;
• our server hosting provider, in Brazil.

We do not sell your personal data and do not share it with third parties for third-party advertising purposes.

International transfer

Some of these processors — Google (Firebase and Google Play) and RevenueCat, in the United States, in particular — may process data on servers outside Brazil, under contractual safeguards. Whenever available, we use infrastructure located in Brazil for the data we store directly: our database and file storage.

Security

Your files are kept in a private bucket, accessible only through a temporary signed link and only after passing antivirus scanning — they are never publicly accessible. We do not store your password: authentication is handled by Firebase. Your phone number is stored encrypted. All communication with the app uses HTTPS.

Retention and deletion

We retain your data while your account is active. To delete your account in the app, go to Profile > Privacy > Delete my account and confirm with "Yes, delete my account": your access is blocked immediately and permanent deletion of your personal data (pets, files, vaccines, medications, food tracking, weight, reviews, and affiliate clicks) is then processed.

If you do not have the app or cannot access your account, write to contato@petvita.tech from the email registered on the account; the page petvita.tech/en/delete-account explains the steps. We complete the deletion within 15 days after your identity as the data subject is confirmed.

• Backups: deleted data leaves the backups within 30 days, when old copies are discarded;
• Compliance record: we keep only a minimal record — a hash of your email, never the email itself — to prove that deletion occurred, as required by law;
• Waitlist: an unconfirmed email is deleted within 7 days; a confirmed one, within 90 days after the launch notice or when you leave the list, whichever comes first;
• Transaction records: when there is a subscription, they are kept for the period required by law.

Deleting your PetVita account does not cancel the Premium subscription on Google Play: cancel the subscription first, on Google Play itself, so you are not charged again.

Your rights

Under Article 18 of the LGPD, you have the right to confirmation of processing, access, correction, anonymization, portability, deletion of your data, and revocation of consent. Inside the app, under Profile > Privacy, you can export a copy of all your data, review and revoke consents, and request deletion of your account. For any other request regarding your data, use the contact channel below.

Children

PetVita is not directed at children. Creating an account requires legal capacity to consent to data processing under the LGPD. If we identify an account created by a child without a legal guardian's consent, it will be deleted.

Changes to this policy

We may update this policy periodically to reflect changes in the app or in applicable law. Each new version is identified by a publication date and may require you to accept it again to keep using the app; each version's consent is recorded with a date.

Contact

Questions, data subject rights requests, or consent revocation can be sent to contato@petvita.tech.