Last updated: August 17, 2026
This policy explains what ФОП Гавришкевич Віктор Вікторович ("Petlify"), an individual entrepreneur (фізична особа-підприємець) registered in Ukraine, collects when you use the Petlify website or app, why, and what you can do about it. For data-protection purposes Petlify is the controller of that information.
1. What we collect
Account and identity. Name, email address and authentication identifiers from our sign-in provider (WorkOS); phone number, and the fact and time of its verification; preferred language, country and timezone; profile photo.
Sitter profile. Service types and rates, service areas and travel radius, availability, experience, description, home details (housing type, yard, other pets, children, smoking), and photos.
Pet profiles. Pet name, species, breed, date of birth, size, feeding schedule, dietary restrictions, medications, veterinary contact, behavioural notes and photos. Veterinary contact details are information about a third party.
Bookings and messages. Booking dates, services, notes, status history, and the content and timestamps of messages exchanged with other users. Support staff can read booking conversations when investigating a report.
Reviews and content. Ratings, review text, stories and photos you publish.
Precise geolocation — sensitive. When a walk is tracked, we record the route as a series of GPS coordinates with timestamps, plus photo checkpoints. This is precise location data about the Sitter carrying the device, and by implication about the Owner's home and the animal. Tracking is tied to a specific booking and has a privacy mode setting.
Government identification — sensitive. Where identity verification is required, we collect images of a government identification document (front and back), a selfie taken for comparison against that document, full name and date of birth, and the verification decision and its reason.
Payment. We do not collect or store your card details. Subscriptions are sold by Paddle as merchant of record; they collect payment information directly under their own privacy policy. We receive the subscription's status, plan, period dates and an identifier.
We do not process pet-care payments at all, so we hold no financial data about what Owners pay Sitters.
Technical. IP address, device and browser information, pages viewed, and actions taken in the product. Administrative actions taken by our staff are logged with the staff member's identity and IP address.
2. Why we use it, and on what basis
To operate the marketplace: create accounts, show profiles, run search and matching, record bookings, deliver messages, send notifications — because we need to in order to perform our agreement with you.
To keep it safe: verify identity where required, investigate reports and disputes, moderate reviews, detect abuse and fraud, enforce our Terms — on the basis of our legitimate interest in a safe marketplace, and, for identity documents, your explicit consent where the law requires it.
To bill: manage subscriptions, plan entitlements and renewals — to perform our agreement with you.
To improve it: understand which features are used and where people get stuck — with your consent where consent is required for the analytics described below.
To comply with law and to establish, exercise or defend legal claims.
We do not use your personal information to train machine-learning models, and we do not sell it.
3. Analytics and cookies
We use two analytics processors, and no advertising ones.
PostHog Cloud EU (PostHog Inc., data stored in the European Union) — product behaviour: which pages are viewed, in what order, and which product actions are taken. This tracking is identified: once you are signed in, your events carry your Petlify account identifier, and your email address, name and country are attached to your profile in PostHog. Visitors who never sign in produce events but no profile. PostHog sets cookies in your browser to recognise the same visit across pages.
Google Analytics 4 (Google LLC) — acquisition only: where a visit came from (referrer, campaign parameters), which pages it landed on, and coarse location derived from the IP address. It receives no account identifier, no email and no name. Google Analytics sets its own cookies.
Analytics events are held by each processor for the retention period configured on our account with them; we keep no separate copy of them.
Your choice. Where consent is required, neither tracker runs until you give it: before you answer, nothing is loaded from PostHog or Google, and neither sets a cookie. One prompt covers both, and declining leaves both off. Your answer is stored in your browser; clearing site data asks again.
Cookies strictly necessary to run the Service — your session, sign-in state, language, region and interface preferences — are set regardless, because without them the Service does not work.
4. Who we share it with
Other users, by design: an Owner and a Sitter see each other's profile, messages, and booking details. Your public profile and reviews are visible to anyone.
Service providers who process data on our behalf under contract: our authentication provider, hosting and storage, email and push delivery, error monitoring, mapping, the analytics processors named in §3, the merchant of record for subscriptions, and the machine translation processor named below.
Machine translation. Free text you write for other people to read — your profile bio, your service descriptions, the reviews you leave, and the care instructions you attach to a pet — is sent to OpenAI to be translated into the languages other users read the site in. Only that prose is sent: never your name, email address, phone number, exact address, payment details, account identifiers, or private messages. The translation is stored so the same text is never sent twice, and you can turn machine translation off for your own reading in your account settings.
Authorities. We disclose retained identity information only in response to a legally valid request, a court order, or where otherwise required or permitted by applicable law. We check the authority and jurisdiction of whoever asks, disclose the minimum necessary, record every disclosure, and tell you unless we are prohibited from doing so.
Parties to a legal claim, where necessary to establish, exercise or defend it — including where an injured person needs a court order to identify who to bring a claim against.
A successor, if the business is sold or merged.
We do not sell personal information, and we do not share it for cross-context behavioural advertising.
5. How long we keep it
Account and profile data for as long as the account exists. Bookings, messages and reviews are retained after account closure where they are part of another user's record or needed for disputes.
Identity documents are kept for 90 days after the verification decision, then deleted. We keep the result of the check — the confirmed name, country, date and check identifier — after the documents themselves are gone.
Location tracks are retained for 180 days after the booking.
Administrative audit records are retained for 365 days.
6. Your rights
Depending on where you live, you may have the right to:
- know what we collect and how we use it;
- access a copy of your personal information;
- correct inaccurate information;
- delete your personal information;
- object to processing based on our legitimate interests, and restrict processing while an objection or a correction is considered;
- receive the information you gave us in a portable form;
- withdraw consent at any time, without affecting what was done before you withdrew it;
- opt out of sale or sharing — we do neither, so there is nothing to opt out of;
- limit the use of sensitive personal information — we use the two sensitive categories above only to provide the feature you asked for (identity verification, walk tracking) and to keep users safe;
- not be discriminated against for exercising any of these.
Some of these are directly available in the product: profile data is editable in Settings, and an account can be deleted from Settings, which permanently removes it.
To make any other request, contact support@petlify.pet. We will verify your identity against the account before acting, and respond within the period required by applicable law.
Appeals. If we refuse a request, you may appeal by replying to our decision at support@petlify.pet. We will respond with a written explanation.
If you are in the European Economic Area or the United Kingdom, you also have the right to complain to your national data-protection authority.
An authorised agent may submit a request on your behalf with proof of authorisation.
7. Children
The Service is for adults. It is not directed to children under 18, and we do not knowingly collect information from them. If you believe a child has given us information, contact support@petlify.pet and we will delete it.
8. Security
Private uploads, including identity documents, are never served from a public URL: they can only be read through an authenticated endpoint restricted to the person who uploaded them and to our staff. Every staff read of someone else's private file is recorded with the staff member's identity. Transport is encrypted.
If a breach occurs that is likely to put your rights at risk, we will notify the competent authority and, where required, you — without undue delay.
No system is perfectly secure, and we cannot guarantee absolute security.
9. International transfers
We operate from Ukraine and use service providers in the United States and the European Union. If you use the Service from outside those regions your information will be transferred to and processed in them. Where personal data of people in the European Economic Area or the United Kingdom is transferred to a country without an adequacy decision, we rely on the European Commission's Standard Contractual Clauses, or the UK Addendum, agreed with the provider concerned.
10. Changes
We will post any update here with a new date, and notify you of material changes before they take effect.
11. Contact
ФОП Гавришкевич Віктор Вікторович
support@petlify.pet