Privacy policy

1. Who is responsible for your information

Petcy is operated by Jeonghyeon Yu, trading as picko (픽코), a sole proprietor in the Republic of Korea. In this policy, “we”, “us” and “our” mean this operator. We are the controller of the personal information we process to provide Petcy.

Contact for privacy questions and requests: picko.corp@gmail.com.

Business address: Room 101 (High Class), 39-19, Gyeongchung-daero 2092beon-gil, Bubal-eup, Icheon-si, Gyeonggi-do, Republic of Korea.

Korean address: 경기도 이천시 부발읍 경충대로2092번길 39-19, 101호(하이클래스).

This policy covers the Petcy iOS and Android apps, our website, and messages you send us. It explains our handling of personal information; it does not replace a separate choice or consent required for a particular use of your information.

2. Information we handle

Information	Source and purpose
Account information	Apple, Google or Kakao supplies a sign-in identifier and, when available, an email address, which may be an Apple relay address. Google and Kakao may also supply your name (nickname) and a profile picture address, which we show as your profile in the app. Kakao sends these only if you agree on Kakao, and we do not store a Kakao email address. We keep only the address of a Google or Kakao picture, not a copy of the image. If you upload your own profile photo in the app, we store it in Cloudflare R2. We create an internal account identifier and keep sign-in timestamps and session information to authenticate you. We do not receive your Apple, Google or Kakao password.
Family information	Your chosen family display name, membership, joining and leaving times, invitations and the member associated with each record let family members care for pets together.
Pet profiles and care records	You provide pet names, species and optional breed, birthday, weight and photos, together with care goals, reminders, medication or supplement names, recorded care, times and optional notes. These support your care history and statistics.
Walk information	When you start a tracked walk, we process precise coordinates, timestamps, location accuracy, route segments, pauses or stops, selected pets, duration, distance, calculated speed and optional notes. Device time-zone information places the walk on the appropriate date.
App settings and local information	Language, measurement units, notification preferences and saved or unfinished activity data support the app on your device. Session credentials are stored using the device’s secure storage facilities.
Push notifications	The push token of the device the app is installed on (Firebase Cloud Messaging), the device type (iOS or Android) and the app language let us tell you when someone accepts your family invitation. The notification shows the new member’s display name.
Feedback and support	If you send feedback, we receive its category and text, app version, language, optional reply email and any images you attach. Email support also includes the sender and message metadata.
Technical information	Network services receive information needed to handle requests, such as an IP address. Petcy’s application request logs record request method, route pattern, response status and timing. We keep these logs for 30 days.

Pet information can become personal information when it is connected to your account, household or movements. A walk can reveal your home, routines or places you visit. Avoid putting human health information, passwords or information about other people into notes or attachments unless it is necessary and you have a lawful reason to share it.

Account authentication is necessary for the account-based service. Optional profile fields, photos and feedback are voluntary. You can use non-location care features without granting location permission. Turning off notification permission prevents reminders but does not prevent recording care.

3. Location and family sharing

We use precise location to record a walk you start and to show its route and measurements. Tracking may continue while the screen is locked or the app is in the background during an active walk, subject to your device permissions. You can stop the walk or withdraw location permission in your device settings. Removing permission does not delete routes already stored.

In the account-based service, route points can be uploaded while a walk is in progress, before you choose to save the completed walk. The setting for sharing your location during a walk controls whether other family members can see that active route. It does not turn off collection for your own walk. After you save a walk, its route and details are available to your family, including when you disabled sharing during the walk. Even with sharing off, family members see that you are on a walk, which pets are with you and when you started, but not where you are.

Family members can see the family’s pet profiles, care records and saved walks and can edit or delete shared data within the app’s controls. There are no separate owner and viewer roles. Share invitation links only with people you intend to give this access to. A person accepting an invitation can see existing shared history as well as new records.

If you join a family while you are the only member of your current family, your pets and records move into the family you join. If you leave a family that still has other members, its pets and records stay with that family. Leaving removes your access to that family’s data. Screenshots or copies another member has already made are outside our direct control.

4. Purposes and legal grounds

We use information to provide accounts, store and display records, coordinate family care, deliver reminders, respond to requests, protect the service and meet legal obligations. We do not use your care notes or routes to make decisions that have legal or similarly significant effects on you.

For people in the European Economic Area (EEA) and the United Kingdom (UK), our proposed legal grounds are set out below. Other regions have their own requirements; an EEA legal ground does not replace consent required elsewhere.

Purpose	Legal ground
Authenticate you and provide the account, pet records and family features you request	Performance of our contract with you, to the extent the processing is necessary for those features
Collect precise location and disclose an active route to family members	Your consent for the specified location uses, obtained before those uses begin; device permission alone does not replace the relevant explanation and choice
Answer a service request	Performance of the contract where necessary; otherwise our legitimate interest in responding to the request you send
Diagnose failures, prevent abuse and protect access	Our legitimate interests in operating a reliable and secure service, balanced against your rights
Meet applicable legal duties	Compliance with a legal obligation

Before your first walk, the app explains precise location, background tracking, uploading and family visibility and asks for your consent. We record your choice. You can withdraw it in the app’s settings. Walks then stop working until you consent again, and routes already saved stay with your family unless you delete them.

Where we rely on consent, you may withdraw it without affecting the lawfulness of earlier processing. You may also object to processing based on legitimate interests. We explain how to make a request in section 8.

5. Who receives information

We disclose information to your family as described above and use external services for specific functions:

Recipient or service	Function and information involved
Apple, Google and Kakao sign-in	Account authentication, validation of provider-issued credentials, and disconnecting Kakao when an account is deleted. These providers also handle information under their own policies.
API and database servers we operate	Storing account, family, pet, care and walk information for the account-based service.
Cloudflare network	Carrying app requests to our API servers and protecting them from attacks. This involves IP addresses and request data.
Cloudflare R2	Storage and delivery of uploaded pet photos and profile photos.
Google Maps	Displaying maps in the app. Map requests and SDK operation involve Google processing information under its own terms and privacy policy. The Google Maps SDK also collects crash and performance data, usage of the map and a device identifier, which Google uses to analyze and improve the SDK.
Apple Maps	Drawing the map on the iPhone Lock Screen walk card. The app requests map images for the area around your walk route, which Apple handles under its own terms and privacy policy.
Firebase Cloud Messaging (Google)	Delivering push notifications. This involves the push token and the notification text, which includes a family display name. The Firebase SDK also collects a device identifier and diagnostics, which Google uses to run and improve the service.
Apple Push Notification service	Delivering push notifications to iPhone. This involves the push token and the notification text. Apple handles this under its own terms and privacy policy.
Google Gmail	Receiving and responding to messages sent to our contact email.
Cloudflare Workers	Serving website requests and maintaining website security.

The app resizes feedback images and removes EXIF metadata before sending them. Text and visible details within an image remain. Access to support messages is limited to the people who handle support.

We may disclose information when required by law, to address a security incident, or to establish or defend a legal claim, limited to what is necessary and permitted. If the business is transferred, any transfer of personal information remains subject to applicable law and notice requirements.

The initial release is free and has no advertising or in-app payments. We do not sell personal information, share it for cross-context behavioral advertising or use it for targeted advertising. We have not added any analytics, advertising or crash-reporting SDK. The Google Maps, Google Sign-In and Firebase SDKs collect the information described above for Google. When you sign in with Google, the Google Sign-In SDK handles your Google account’s name, email address, phone number and identifiers, can estimate an approximate location from your IP address, and collects usage data that Google uses for analytics. Petcy’s server receives only the sign-in identifier, name, email address and profile picture URL described in section 2. If we add another SDK that collects information, we will update this policy first.

6. Where processing takes place

We operate from the Republic of Korea. Handling a support request may involve access from Korea. Our providers may process information in other countries, where public authorities may have lawful access under local laws.

Our API and database servers, which store account, family, care and walk information, are located in the Republic of Korea. We do not keep separate database backups. Some providers are based in or process information in other countries:

Provider	Information	Location
Cloudflare, Inc.	App and website requests, pet photos and profile photos (R2)	United States and Cloudflare data centers worldwide
Google LLC	Google sign-in, map requests, push notifications, email sent to our contact address	United States and Google data centers worldwide
Apple Inc.	Apple sign-in, map requests for the Lock Screen walk card on iPhone, push notifications to iPhone	United States

For transfers covered by EEA or UK transfer rules, we must use a valid mechanism for the particular recipient and destination. This may be an applicable adequacy decision or appropriate contractual safeguards together with any required assessment and additional measures. Korea’s adequacy status does not automatically cover a provider’s processing in a different country.

[CONFIRM before publication: name the mechanisms actually in place, their scope, and how users can obtain information or a copy of relevant safeguards. Do not publish this paragraph as a claim that contracts have already been executed.]

7. Retention and deletion

We keep information for the purposes described in this policy and remove it when it is no longer needed, subject to applicable legal requirements. We keep each kind of information as follows:

Information	Retention rule
Account identity and sessions	Removed from the active database when account deletion succeeds. Each sign-in token is valid for 60 days and is replaced with a new one when the app uses it. A token is deleted 30 days after its expiry date, including one that was revoked earlier.
Pet profiles, care records and saved walks	Kept for the family’s care history until a member deletes them or the last member deletes their account.
Unfinished walks	Kept so you can resume or save the walk. A walk with no location update for 30 days is deleted.
Photos	Pet photos are deleted when the photo, the pet or the family is deleted. Your profile photo is deleted when you remove it or delete your account. If a deletion fails, or an upload is never used, the file is removed within 7 days.
Feedback and support	Kept for 1 year after the request is resolved, including attachments and email.
Push tokens	Deleted when you delete your account. Signing out also asks us to delete it, but if the device is offline at that moment the token stays, and family notifications can still reach that device. A remaining token moves to another account that signs in on the same device, and is deleted once we learn it no longer reaches a device.
Technical logs	Application request logs are kept for 30 days. We do not keep separate database backups.

Use the account deletion option in Petcy settings, or contact picko.corp@gmail.com if you cannot access the app. We may need to verify the account before acting. Uninstalling the app or signing out does not delete your server account. We revoke the Apple sign-in connection when deleting an Apple-linked account and disconnect Kakao when deleting a Kakao-linked account. Deleting Petcy does not delete your Apple, Google or Kakao account.

If other family members remain, account deletion does not delete the pets, shared care records or saved walks you contributed. We delete your display name, and the app shows you as a former member. Notes and routes you left stay with the family and can still identify you, so this is not anonymization. You can ask us to delete the notes and walk routes you contributed. If you are the last member, deletion removes the family and its associated records from the active database and initiates photo removal.

You can request erasure of personal information that remains in shared records. We will assess the request under applicable law, including other people’s rights, and explain any lawful reason for retaining particular information. Family membership alone does not remove your privacy rights. Where we must retain information for a legal obligation or claim, we limit it to that purpose and the necessary period.

8. Your choices and rights

Contact picko.corp@gmail.com to request access, a copy, correction or deletion of your personal information, or to raise a concern. Tell us what you need and enough information to locate your account. Do not send a password or identity document unless we have explained why a particular verification step is necessary. We use proportionate verification and protect other people’s information when responding.

Depending on the law that applies, you may also have rights to portability, restriction, objection, withdrawal of consent, an authorized representative, or an appeal of a refusal. We will respond within the applicable legal period, explain a refusal or permitted extension, and tell you how to challenge it. We do not penalize you for exercising a protected right.

United States

State privacy rights depend on your state and whether the relevant law applies to our business. Where applicable, they include access, correction, deletion, a portable copy, and opting out of sale, targeted advertising or certain profiling. California law also provides rights concerning certain uses of sensitive information, including precise geolocation. We use location for the walk features you request, subject to the choices described above.

We do not sell or share information for advertising as described in section 5. Our website does not use cookies, analytics or third-party scripts. A browser’s Do Not Track signal does not change these practices. Where an opt-out preference signal such as Global Privacy Control has legal effect, we honor it for the processing to which it applies.

If your state provides an appeal right, email the same contact address with “Privacy appeal” and identify the decision. We will explain the outcome and any available complaint route to your state regulator. An authorized agent may contact us subject to legally permitted verification of authority.

Canada

You may request access to and correction of your personal information and challenge our handling of it. You may withdraw consent, subject to lawful or contractual restrictions that we explain; a feature may no longer work if it needs the information concerned. Contact us with privacy complaints. You may also contact the Office of the Privacy Commissioner of Canada or the applicable provincial authority, including Quebec’s Commission d’accès à l’information. Quebec rights, where applicable, include receiving computerized personal information collected from you in a structured, commonly used technological format.

EEA and UK

You may request access, correction, erasure, restriction or portability where the relevant conditions are met. You may object to processing based on legitimate interests and withdraw consent. You may complain to your local data protection authority, including the competent German authority, France’s CNIL, Spain’s AEPD, or the UK’s ICO. You do not need to contact us before contacting a regulator.

[CONFIRM before offering the service in these markets: whether EEA and UK representatives are required and, if so, insert their names and contact details. Assess separately whether a data protection officer must be appointed.]

9. Children

Petcy is not meant for children. You must be at least 13 years old, and at least the age at which you can consent to data processing on your own where you live (up to 16 in some EEA countries). We do not ask for your age when you sign up and do not knowingly collect personal information from anyone younger. Users in Korea follow the Korean version of this policy.

If you believe a child under these ages has given us personal information, contact us. When we learn of it, we delete the account and its personal information without undue delay. Family sharing does not authorize someone to track a child or another person without a lawful basis.

10. Security and changes

We use access controls and other measures appropriate to the information we handle. No service can guarantee absolute security. Protect access to your device and your Apple or Google account, and share family invitations carefully.

We will update this policy when our practices change and show the effective date. We will give additional notice of material changes and obtain a new choice or consent where required before using information for a new purpose. A policy update alone does not authorize a new use of your information.