At Amberpaws (“we”, “us”, “our”), privacy is not a feature — it's our foundation. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our mobile application and services.

1. Who we are

Data Controller: Amberpaws
Contact: privacy@amberpaws.app
Website: www.amberpaws.app

2. Information we collect

2.1 Information you provide

Account data: name, email, password (hashed), profile photo.
Pet profiles: pet name, breed, age, weight, photos, medical history, vaccinations.
Verified users: government ID (for identity verification only — never stored after validation).
Content: messages, photos, posts, and comments you share in the community.

2.2 Information collected automatically

Location data: GPS location for SmartQR alerts, Community Map, and walk tracking. Only collected when the app is in use or with explicit consent for background tracking.
Device data: device model, OS version, unique identifiers, IP address.
Usage data: features used, time spent, crash reports.

2.3 Information from third parties

Apple and Google when you sign in with their accounts.
AirTag and SmartQR partners when tags are scanned.

3. How we use your data

To provide and operate the Amberpaws service.
To reunite lost pets with their owners via SmartQR and community alerts.
To personalize your experience (pet care recommendations via AmberBrain AI).
To process payments for Premium (Verified) subscriptions via Stripe.
To communicate with you about your account, safety alerts, and service updates.
To prevent fraud, abuse, and ensure community safety.
To comply with legal obligations.

4. Legal basis for processing (GDPR)

Consent: for marketing communications and optional features.
Contract: to provide the services you've signed up for.
Legitimate interest: to keep the platform safe and improve our services.
Legal obligation: when required by law.

5. Data sharing

We do not sell your data. We only share data with:

Service providers (hosting, payment processing, analytics) under strict data processing agreements.
Community members when you choose to share a post, photo, or pet profile.
Legal authorities when required by law or to protect safety.

6. International transfers

Your data may be processed outside the European Economic Area. When this happens, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission to ensure adequate protection.

7. Data retention

Account data: kept until you delete your account.
Memorial Mode profiles: kept indefinitely at the owner's request, to preserve the memory of deceased pets.
Verification IDs: deleted immediately after verification is complete.
Logs and backups: up to 90 days.

8. Your rights (GDPR)

Under the GDPR and equivalent laws, you have the right to:

Access the data we hold about you.
Rectify inaccurate data.
Erase your data (“right to be forgotten”).
Restrict or object to processing.
Data portability — export your data in a machine-readable format.
Withdraw consent at any time.
Lodge a complaint with your local data protection authority.

To exercise these rights, contact us at privacy@amberpaws.app. We respond within 30 days.

9. Security

We use industry-standard encryption (TLS 1.3 in transit, AES-256 at rest). Verification documents are processed in-memory and never stored. Access to personal data is logged and restricted.

10. Children's privacy

Amberpaws is not intended for users under 13 (or 16 in the EU). We do not knowingly collect data from children. If you believe a child has created an account, contact us immediately.

11. Changes to this policy

We may update this policy from time to time. When we do, we'll notify you via email or in-app notification at least 30 days before changes take effect.

12. Contact

For any privacy-related questions or requests:
Email: privacy@amberpaws.app