Legal
Privacy policy
This policy explains what personal information Petnubo collects on the website petnubo.com and in the Petnubo apps for Android and iOS, why it does, who it shares the information with, how long it keeps it, and how you can access, correct or delete it.
Who is responsible
Petnubo is run by Amin Khoeini, an individual in Quebec, Canada. Amin Khoeini is also the person in charge of the protection of personal information.
Privacy questions and requests: [email protected]
What we collect
When you create an account
- Email address, username and password. The password is stored only as a secure hash; nobody at Petnubo can read it.
- Your account type (for example pet owner, vet, shop or breeder), your preferred language, and when you accepted this policy.
What you choose to add
- Profile details: first and last name, profile photo, bio, phone number, address and links to your other profiles. Pet and business pages you create can hold similar details, and a business page can hold a registration number.
- Posts, photos, videos, comments, reactions, reviews, follows, listings and fundraising requests. Most of these are public: anyone can see them, including people without an account.
- Messages you send to other members (see “Private messages” below).
- Reports you send about content or accounts, and appeals of moderation decisions.
- Messages sent through the contact form: your name, email and message.
Missing-pet alerts and location
- When you post a missing-pet alert, you give an approximate location, a country, one to three photos and, if you choose, a contact phone number. The alert shows only a rounded location and the area; the exact point you chose stays private and is used only to find nearby members. A phone number you add to an alert can be seen by anyone who views it.
- You can save a private location to receive alerts about missing pets nearby. It is never shown to anyone.
- On the missing-pets page, the website and the app may ask for your device’s location to show alerts near you. This is optional; you can refuse and still browse every alert. The app asks only while you use it, never in the background, and we do not store the location used for this search.
Photos and videos on your phone
The app opens your photos and videos only when you choose a profile picture or add media to a post or alert, and it uploads only the items you pick. It does not use your camera or microphone.
Usage information
To understand which pages and content are useful, Petnubo counts visits and views with its own system. It does not use Google Analytics, advertising trackers or tracking cookies.
- What is recorded: which page you opened (without the part of the address after “?”), or which post, video, article, listing or account you viewed, and when. The app records one app open per day.
- Who it is linked to: if you are signed in, your account. If you are not signed in on the website, a code that changes every day, calculated from your IP address, your browser’s description and a random value that is deleted the next day. Your IP address is not stored, and the code cannot be linked back to it afterwards. In the app, a random install number created on your phone. It is not your phone’s advertising ID, and it is used for nothing else.
- After 13 months these records are deleted. Only daily totals, which identify nobody, are kept.
Technical information
- Our servers keep request logs for 14 days: the time, the page or action, the result, the duration and, when you are signed in, your account number. They do not record passwords, message text or form contents.
- When something breaks, an error report is sent to Sentry (see below). It holds the technical details of the error and, when you are signed in, an account number, but not your name, email, cookies or message text.
Why we use it
- To run your account and the features you use: publishing, following, messaging, missing-pet alerts, listings and fundraising requests.
- To send emails you need: email verification, password reset and notices about your account, such as a scheduled deletion or a moderation decision. We do not send marketing email.
- To keep Petnubo safe: preventing spam and abuse, reviewing reports, enforcing our rules and handling appeals.
- To fix problems and improve Petnubo, using the usage and error information above.
- To meet legal obligations.
We do not sell your personal information, rent it, or use it for advertising profiles.
Private messages
Message text is encrypted before it is stored. This is not end-to-end encryption: Petnubo’s servers can decrypt messages to show them to you and the person you are talking to. Staff do not browse messages. A message can be read by Petnubo in two cases only:
- You or the other person reports it. The reported message and up to 10 earlier messages in that conversation are kept, encrypted, as evidence for the moderators. A moderator opens them only on purpose, and every opening is recorded.
- An investigation. A specifically authorized operator may review a conversation for a stated reason and case reference, for example a serious safety or legal matter. Every review is recorded.
How long we keep it
| Information | Kept |
|---|---|
| Your account and profile | Until you delete your account |
| Your posts, comments and other content | Until you delete them or your account |
| Raw visit and view records | 13 months, then only daily totals |
| Daily random value for guest codes | Deleted the next day |
| Server logs | 14 days |
| Error reports in Sentry | Up to 90 days |
| Missing-pet alerts | They close after two months at most; deleted with your account |
| Contact form messages | Up to 2 years |
| Reports, moderation decisions and appeals | As long as needed to check decisions and handle appeals |
| Order and payment records, if any | As long as the law requires, without your name or address after your account is deleted |
| Backups | Up to 12 months, then overwritten |
Deleting a post or comment
You can delete any of your posts or comments at any time from its menu, on the website or in the app. Deletion is immediate and permanent: a post goes with its photos, videos, comments and reactions, and a comment goes with the replies to it. You can also delete comments that other people leave on your posts. Backups are overwritten within 12 months, and a copy stays with a report if someone reported the item before you deleted it.
Deleting your account
You can delete your account in the app (Profile, Delete account) or on the website (Settings, Delete account). Your account and everything you made are hidden at once, and you are signed out everywhere. For 30 days you can change your mind by signing in again. After 30 days your account is erased for good: your profile, posts, comments, reviews, listings, alerts, pets and businesses, follows and notifications.
Some things remain:
- Messages you sent stay in the other person’s conversation, shown as from a “Deleted account”.
- Order and payment records stay, without your name or address, for legal and accounting reasons.
- Reports and moderation decisions about your account stay, so decisions and appeals can still be checked.
- Backups are overwritten within 12 months.
Your rights
You can ask us to:
- tell you what personal information we hold about you and give you a copy;
- correct information that is wrong or incomplete;
- give you the information you provided in a structured, commonly used format;
- stop sharing or showing information about you where the law allows, or delete it;
- withdraw your consent to a use of your information, which may mean you can no longer use some features.
You can change your profile in your settings and delete your posts, comments or whole account yourself. For anything else, write to [email protected]. We answer within 30 days and may ask you to confirm your identity first.
If you are not satisfied with our answer, you can complain to the Commission d’accès à l’information du Québec (cai.gouv.qc.ca) or the Office of the Privacy Commissioner of Canada (priv.gc.ca).
Security
Connections use HTTPS, passwords are hashed, message text is encrypted, and only the people who run Petnubo can reach the servers. No system is perfectly secure. If a security incident creates a risk of serious harm to you, we will tell you and the authorities as the law requires.
Children
You must be at least 16 to create a Petnubo account. Anyone can read Petnubo’s public pages without an account. If you believe someone under 16 has created an account, write to [email protected] and we will delete it.
Payments
Petnubo does not take real payments yet and collects no card or bank details. This section will be updated before payments start.
Changes to this policy
When we change this policy, we update the date at the top. If a change affects how your information is used in an important way, we will tell members in the app, on the website or by email before it applies.