Privacy policy
1. Who is responsible
Mascotly (Colombia) is the controller of your personal data. Contact for any privacy matter: biopet@mascotly.app.
2. Data we collect
Account: name, email, password (managed by Firebase Authentication; we never see it) or Google account, language and time zone.
Phone: only if you choose to add it; we verify it with a WhatsApp code.
Your pet: name, species, breed, photos, health data you record (vaccines, weight, medication, food, occurrences) and documents you upload (prescriptions, lab results, clinical history).
Location: only when you enable or share it: nearby lost-pet alerts (approximate), or where your pet went missing. A person who finds a pet may optionally share their location with the owner.
Tag scans and public page: when someone scans the tag or opens the public page we record date, IP address, browser type and, if the person allows it, their location, so we can notify you.
Messages from finders: the text and phone number the person chooses to leave.
AI assistant: the messages, photos and files you send in the chat.
Device: an identifier used to send you push notifications.
Website usage: anonymous statistics with Umami (self-hosted, cookie-free).
3. How we use it
To provide the service: identify your pet, notify you when its tag is read, publish and spread lost-pet alerts, keep its health history and send reminders.
To verify your email and phone, prevent abuse and keep things secure.
To process with AI what you ask the assistant (for example, reading a prescription). We do not use your data for advertising and we do not sell it.
4. What the public sees
Your pet’s public page shows what you decide: name, photos, basic details and a message. Your phone or email appear only if you enable the contact option. You can hide the page at any time (except while a lost alert is active, to help find the pet). A finder never sees your email.
If you share a pet with family or caregivers, they see that pet’s data according to the permission you give (view only, or view and log) and receive its alerts.
The vet summary is a link you generate and it expires after 24 hours; it does not include your contact details.
5. Who we share it with
Only with providers that process data on our behalf so the service works: Amazon Web Services (hosting and email, USA), Google/Firebase (sign-in and notifications), a WhatsApp provider to send codes and alerts, and AI providers (Anthropic, OpenAI or Google) when you use the assistant. We may disclose data if a competent authority legally requires it.
Your data may be processed outside Colombia (mainly the USA), under these providers’ contractual safeguards.
6. How long we keep it
While your account is active. If you ask us to delete your account, we delete your personal data and your pets’ data, except what the law requires us to keep. Backups are overwritten on a regular cycle.
7. Your rights
Under Law 1581 of 2012 (Colombia) and, where applicable, the LGPD (Brazil), you can access, update, correct and delete your data, withdraw your consent and file a complaint with the Superintendence of Industry and Commerce (SIC) or the ANPD. Write to biopet@mascotly.app from your account email and we will reply within 15 business days. You can edit and delete pets, photos and documents directly in the app.
8. Children
Mascotly is not directed to children under 13 and we do not knowingly collect their data.
You can delete your account and all your data at any time from the app (Profile → Delete my account) or by following these instructions.
9. Security
We use encrypted connections (HTTPS), Firebase-managed authentication and restricted access to data, and private documents only open through short-lived signed links. No system is 100% secure; if an incident affects you, we will tell you.
10. Changes
If we change this policy we will publish the new version here with its date and, if the change is significant, notify you in the app.