Privacy Policy

1. Controller

Michael Voigtmann, sole trader, operating under the brand Petfinity.io (known as “Pawtoshi Petmamoto”), Zeißstraße 20, 09131 Chemnitz, Germany. Email: hello@petfinity.io, phone: +49 1522 5134529.

No data protection officer is appointed because there is no legal obligation to do so. For all privacy questions you can reach us at the email address above.

2. Scope

This policy applies to the website petfinity.io, the app at next.petfinity.io (including public star pages under /star) and the order pages at bio.petfinity.io.

3. Visiting the pages, hosting and server logs

Our pages are delivered by Vercel Inc. (USA). When you visit, Vercel processes technically necessary data: IP address, date and time, requested address, referrer, browser and device details. The purpose is delivering and securing the pages and analysing errors; the legal basis is Art. 6(1)(f) GDPR. We only review logs when there is a reason to; their retention depends on the host’s settings.

The host derives a country from the request. We use it to show prices in the right currency and to show the support resources configured for your country in the AI chat. The country is only stored with orders (see section 7).

4. Account and sign-in

For accounts and the database we use Supabase (Supabase Pte. Ltd., Singapore); database and files are hosted in the EU region (Ireland). We process your email address, your password (stored only as a hash), registration and sign-in times and the sign-in method. The legal basis is Art. 6(1)(b) GDPR. We keep the data until your account is deleted.

Sign in with Google: If you choose “Continue with Google”, Google (Google Ireland Limited) sends us your name, email address and the address of your profile picture. We use name and picture as your display name and avatar, which you can change. Google learns that you are signing in to Petfinity.

At registration we store which version of the Terms you accepted (see section 13).

Your sign-in is kept through an entry in your browser’s storage (see section 12).

5. Stars, photos, memories and tributes

We store what you create: details about your pet (name, species, breed, description, dates, country), portrait and gallery images, memories with date and photo, candles and tributes, your display name and avatar. Photos are kept in non-public storage and shown via time-limited links. The legal basis is Art. 6(1)(b) GDPR.

Private and public: New stars are private. If you make a star public, the following is visible to everyone and can be found via search engines: name, species, breed, description, dates of birth and passing, country, tier and Founder mark, portrait (via a permanent address), gallery images, and candles and tributes with the names of their authors. The star’s address is then listed in our sitemap. Memories of public stars are only visible to signed-in visitors. If you leave a tribute at someone else’s star, its owner and — for public stars — every visitor can see your name and text.

Deleting: You can delete individual photos, memories and stars yourself at any time; we then remove the related files automatically. If you delete your account in the settings, we automatically delete your stars, galleries, memories, stored files, profile and sign-in data — usually immediately, within one month at the latest. If a Studio order is still running or you bought something in the last 24 hours, we complete that first. Booking, invoice and contract records are kept as described in this notice.

6. Petfinity AI (AI chat)

For the AI chat we use OpenRouter, Inc. (USA). OpenRouter forwards your message to the provider of the configured language model, which may be located outside the EU. We send the conversation (up to 24 messages), the details of the selected pet (name, species, breed, dates, whether it is still alive), the names of your other pets and — if you mention a public star — its public details. We do not send your email address, your memories or the descriptions of your own stars. We have OpenRouter route requests only to endpoints that, by their own commitment, do not store inputs (zero data retention) and do not collect them for other purposes; for the OpenAI model we use, these are currently Microsoft Azure endpoints (USA and EU). If no such endpoint is available, the request is not carried out. Please do not enter sensitive information about yourself or other people in the chat.

We do not store the conversation text permanently. It stays in your browser’s memory until you reload the page, start a new chat or sign out. For each answer we store metadata with your account (result, model, duration, cost) to count your allowance and operate the service, and your ratings if you give any. We keep this metadata until your account is deleted.

Extra answers paid with Petfinity Crystals: If your included answers are used up and you expressly choose a paid answer, we book the price in your Crystals account (section 7), without any conversation content. So that a paid answer stays available after a lost connection, we hold it encrypted for up to one hour; only your browser creates and keeps the key (in this tab’s session storage), and without it we cannot read the stored answer. After one hour it can no longer be retrieved, and we delete it within minutes. The legal basis is Art. 6(1)(b) GDPR and, where the answer contains information about your health, your consent (Art. 9(2)(a) GDPR).

Every message is checked automatically for signs of a possible acute emergency so that the chat can show sources of help. We do not store the result of this check with the individual answer; we only count per day how often each classification occurred, without an account identifier. This count is not anonymous in every case: we still store the account and time of each answer, and on days with few conversations a count may be attributable to a person. In our host’s technical logs the classification appears without an account identifier; the host deletes these logs after its retention period. If your allowance is used up and the chat still shows sources of help, we record with your account that such an answer was delivered, so that it does not count against your allowance.

The legal basis for the chat is Art. 6(1)(b) GDPR. For the automatic check for crisis signals, insofar as your messages contain information about your health, the legal basis is your explicit consent (Art. 9(2)(a) GDPR). We ask for it before you first use the chat and store version, language and time (section 13). You can withdraw it at any time in Settings; the chat is then closed for you. Withdrawal does not affect the lawfulness of the processing before it.

7. Purchases and payments

Payments are processed by Stripe (Stripe Payments Europe, Limited, Ireland; Stripe, LLC, USA). Stripe processes your payment data, email address, name and billing country or address; we do not see card data. We receive the payment status, amount, product, a customer ID and, for Star Keeper, the term dates. Stripe processes some data under its own responsibility, for example for fraud prevention.

The legal bases are Art. 6(1)(b) GDPR and, for accounting and invoice records, Art. 6(1)(c) GDPR. We keep these records for the statutory periods (up to ten years).

Before each renewal of a yearly Star Keeper we send you a reminder by email and store when it was sent. If you cancel via “Cancel contracts here”, we match the cancellation to your contract by your email address. If you are not signed in, we send a confirmation link to your account’s email address; after confirmation — immediately when signed in — we instruct Stripe to end the subscription at the end of the paid period. Whoever fills in the form learns nothing about your account.

Petfinity Crystals and visit bonus: We keep a Crystals account for your account (purchases, uses, returns, refunds and prizes, separately per currency). For the visit bonus we store the last day on which you opened the app while signed in, the number of days collected, and your spins with time and prize. We do not evaluate the content of your stars or chats for this. The legal basis is Art. 6(1)(b) GDPR; bookings are kept like other accounting records.

8. Memorial media orders (bio.petfinity.io)

For an order we collect: email address, the pet’s name, photos and, voluntarily, your name, species, breed, dates of birth and passing, dedication, story, music preference and notes. We store the draft and photos with Supabase (EU region); a cookie links the draft to your browser for seven days, and a copy stays in your browser’s session storage until you close the tab.

After payment we create the order in Airtable (Airtable, Inc., USA) — with your details, the amount and time-limited links to your photos. To create the media we use Magnific (formerly Freepik; Freepik Company S.L., Spain) — for images, upscaling, motion and music. Within its platform Magnific provides models of further providers (among them Google, Kling, Runway) and passes inputs to them as its sub-processors, partly outside the EU. We give Magnific only the photos and design details, not your email address or name. We deliver the finished media by email with a download link.

The legal basis is Art. 6(1)(b) GDPR. We do not use your photos and details for advertising and do not train AI models with them ourselves. Under its terms, Magnific does not use inputs for training and deletes uploaded files after generation.

We keep photos and order data as long as needed for creation, delivery, remedying defects and follow-up questions; accounting records for the statutory periods. Automatic deletion of order photos is currently not set up; you can request deletion at any time.

Instant tools (Petfinity Studio)

For an automatic order we process your photo, the chosen options, the payment status and — without an account — your email address, otherwise your account. We store the photo without metadata (for example without location data) together with the result in non-public storage at Supabase (EU region). To create the result, Magnific (Freepik Company S.L., Spain) receives a reduced copy of the photo; depending on the tool, Magnific uses models from third-party providers, including outside the EU. Magnific deletes uploaded files after creation and keeps results under its terms. We delete the photo and the result 30 days after delivery, unpaid orders after six hours; we keep the order data without files as accounting records for the statutory periods. If you save a result to one of your stars, section 5 applies. The legal basis is Art. 6(1)(b) GDPR. If you buy Studio credit, we store every purchase, reservation, deduction and return with amount and time against your account; we keep these bookings as accounting records for the statutory periods.

9. Emails

We send emails via Brevo (Brevo GmbH, Germany; servers in the EU): account emails (confirmation, password, email change), order and contract confirmations, acknowledgements for cancellations, withdrawals and reports, and renewal reminders. The legal bases are Art. 6(1)(b) and (c) GDPR. Links in emails may run through a Brevo redirect address; Brevo technically records that the link was opened.

If you write to us, we process your message and contact details in our mailbox to reply (Art. 6(1)(b) or (f) GDPR).

Grief guide and email marketing

If you request the guide on bio.petfinity.io, we send it to you by email and store your address with Brevo. You only receive further emails with Petfinity content and offers if you separately agree and confirm that consent via the link in a confirmation email (Art. 6(1)(a) GDPR). You can withdraw consent at any time via the unsubscribe link or by email. If you signed up for the waitlist earlier, we keep your address with Brevo until you unsubscribe.

10. Website analytics (only with consent)

On petfinity.io and bio.petfinity.io we use Google Analytics 4 (Google Ireland Limited; transfer to Google LLC, USA, possible). The analytics script is only loaded after you consent in the notice. Google then sets cookies (_ga, _ga_*) and records pages viewed, events, device and browser details and approximate location. We do not use advertising features or Google signals. The legal basis is § 25(1) TDDDG and Art. 6(1)(a) GDPR. Google keeps user- and event-level data for the period set in the Analytics property, at most 14 months; this setting applies to detailed explorations, aggregated standard reports may persist longer.

You can change your choice at any time via “Cookie settings” in the footer. If your browser sends the Global Privacy Control signal, we treat it as a refusal. The app (next.petfinity.io) has no analytics or advertising trackers.

11. Fonts and video on petfinity.io

The website petfinity.io currently loads its fonts from Google Fonts (Google Ireland Limited). Your IP address is transmitted to Google. The legal basis is Art. 6(1)(f) GDPR (consistent presentation).

We embed the brand film via youtube-nocookie.com (Google Ireland Limited). The player only loads when you click “Play”; Google then receives data about the request. The legal basis is Art. 6(1)(a) GDPR.

12. Storage in your browser

Without consent we only store what is strictly necessary for the service you requested (§ 25(2) no. 2 TDDDG):

13. Records of acceptances and statements

We store which version of the Terms, the withdrawal information and this policy you accepted at registration or purchase, which individual statements you made (such as requesting an immediate start, agreeing to renewal, confirming photo rights), in which language, when and for which order. We also store statements made via “Cancel contracts here”, “Withdraw from contract here” and “Report content”, with time of receipt and handling. We do not store IP addresses for this.

The purpose is to evidence contract conclusion and statements and to meet legal obligations; the legal bases are Art. 6(1)(c) and (f) GDPR. We delete these records at the end of the third calendar year after they were created, and for contracts with a term no earlier than one year after the contract ends. Withdrawing consent or requesting deletion does not remove a record we still need to defend claims.

14. Recipients outside the EU

Some of the providers named above are based outside the EU or process data there. The following basis applies to each:

You can request a copy of the standard contractual clauses for a specific provider at hello@petfinity.io.

15. Obligation to provide data, no automated decisions

For accounts, purchases and orders the details marked as required are necessary; without them we cannot conclude the contract. All other details are voluntary. There is no automated decision-making within the meaning of Art. 22 GDPR.

16. Your rights

You have the right of access, rectification, erasure, restriction of processing and data portability (Art. 15 to 20 GDPR). You can withdraw consent at any time with effect for the future.

Right to object: Where we process data based on Art. 6(1)(f) GDPR, you can object at any time on grounds relating to your particular situation (Art. 21 GDPR). You can object to email marketing at any time without giving reasons.

Contact hello@petfinity.io. You can also complain to a data protection supervisory authority, in particular in the Member State of your residence; the authority responsible for us is the data protection supervisory authority of the Free State of Saxony, Germany.

17. Information for users in the United States

We collect the categories described in this policy: contact details and identifiers (email, name, customer IDs), purchase information, content you create and — only with consent — website usage data. We do not sell personal information and do not share it for cross-context behavioral advertising. We treat Global Privacy Control as a refusal of analytics; we do not otherwise respond to “Do Not Track” signals. Send requests about your rights to the email address above.

18. Children

Petfinity is not directed at children under 16. We do not knowingly collect data from children under 16.

19. Changes

We update this policy when our processing changes. The current version is available at https://next.petfinity.io/legal/privacy.