Privacy Policy

The short version

• You can use the timer and your companion as a guest, with no account. Guest data stays on your device and is never uploaded.
• An account is optional. It syncs your sanctuary between devices, unlocks rooms and chat, and lets Pro follow you between web, iOS and Android. You can sign in with email, Sign in with Apple or Google.
• Analytics are off until you turn them on. Error reports on the web are sent to Sentry.
• We never collect your browsing history, the contents of other tabs or which other sites you visit.
• Chat messages are checked by an automated moderation service (DeepSeek). A photo you choose for "match your pet's coat" is sent to DeepSeek for one request, only to classify its colours and markings, and is not stored.
• We do not sell your personal information and do not use it for advertising.
• You can export your data and delete your account from inside the app.

Who is responsible for your data

The controller of your personal data is Dapols, G3 Janpath, Shyam Nagar, Jaipur, Rajasthan 302019, India. For privacy questions, to exercise a right, legal notices or anything else about the service, write to support@petcoworking.com.

What we collect and why

Everything below is collected only for the feature named. Roughly, the legal bases we rely on are: performing our contract with you (running your account, sync, Pro and rooms), our legitimate interests (security, abuse prevention, fixing bugs), your consent (analytics, and the optional pet photo), and legal obligations.

• On your device, always: sessions, tasks, companion progress, preferences and a random installation ID, stored in your browser (IndexedDB) or in the app's local database. Guest data never leaves the device.
• Account: your email address, or the identifier and (if you allow it) name and email that Apple or Google give us when you use Sign in with Apple or Google. Apple can hide your email behind a private relay address; we work with that address as it is.
• Profile: display name, username, optional bio, language, your 16+ confirmation and the look of your companion, including a custom coat if you matched one to a photo. Your bio and focus history are private by default and are visible only to you and connections you accept; your name and companion are visible to others in rooms.
• Synced progress: settings, devices, tasks, goals, focus sessions and their events, companion bonds, unlocked animals, items, the reward ledger, gifts and your Pro entitlement, uploaded so a second device shows the same sanctuary.
• Rooms and messages: which rooms you join and when, that you are present (a periodic heartbeat), chat messages, reactions and direct messages with people you have accepted as connections, reports and blocks you make, and our moderation state (strikes and mutes).
• Purchases: what you bought, whether it is active and when it was last verified. We never see card numbers.
• Technical data: IP address and request logs handled by our hosts, and, on the web, error reports with the page URL, stack trace and basic device details.

Where your data is stored

Guest data lives on your device. Account data lives in our database and authentication service, hosted by Supabase, and our website is served by Vercel. Supabase Edge Functions run our server logic (sync, rooms, moderation, purchases, export and deletion). These providers process data for us under their data processing terms.

Rooms, chat and direct messages

Rooms and chat need an account and a one-time confirmation that you are 16 or older. Messages in a room are visible to the people in that room and to us for moderation. Direct messages are visible to the two people involved and to us when we review a report or a moderation flag. Reactions are stored as room activity. You can report any message or person and block anyone; blocked people cannot message you. We keep room chat and direct messages until you delete your account. Reactions are deleted automatically after 7 days.

Moderation and safety

Every chat message is first checked against a short list of blocked terms and then sent, as text only, to DeepSeek (api.deepseek.com) for an automated safety check. We do not send your name, email or account ID with it. Messages that fail are blocked or hidden, repeated violations lead to a temporary mute, and serious or repeated abuse can end your access. A human reviews reports when needed. Automated decisions here only affect whether a message is shown; you can appeal by writing to support@petcoworking.com.

Photo coat matching (pet photo)

If you choose "match your pet's coat", the photo you select (JPEG, PNG or WebP, up to 4 MB) is sent to our server and forwarded to DeepSeek, which classifies the animal into a fixed set of options (colours from our own palette, a pattern, an ear shape, a tail type and the nearest of our 13 species). We apply those choices to recolour one of our own hand-illustrated companions. No new image is created from your photo. The photo is held in memory for that single request and is not stored or logged by us. What is kept is only the resulting coat settings (a few colour and shape choices, under 1 KB). Photos of people are rejected. Do not upload a photo of anyone who has not agreed, or anything you have no right to use. Free accounts can match up to 3 coats a day and Pro accounts up to 20; we keep a per-day counter for that limit. DeepSeek processes the image under its own terms and may process it outside your country.

Analytics

We use PostHog (US cloud) for product analytics on the web, extension and apps, and only after you turn it on in Settings. Until then no analytics event is sent. Events are tied to your random installation ID, not your name or email, and describe usage such as a session starting or finishing, a companion being petted, a paywall being viewed or a purchase completing. They never contain task text or chat. You can withdraw consent in Settings at any time and sending stops immediately.

Error reporting

On the web we use Sentry to capture crashes. A report can contain the page URL, a stack trace and basic browser and device information. It is not designed to include task text or chat, although a crash in an unusual state could in principle include a fragment of what was on screen.

Payments

• Web purchases are processed by Polar, the merchant of record. Polar handles your payment details and tells us, by webhook, what you bought and its status.
• iOS and Android purchases go through Apple App Store or Google Play, with RevenueCat managing subscription status. Apple or Google handle your payment details. RevenueCat and our servers receive purchase and entitlement events, and RevenueCat uses your account ID to link purchases to you.
• Pro is tied to your PetCoworking account, so a purchase made on one platform works on the others. We keep the product, status and timestamps needed to honour it.

Notifications

The apps can schedule local reminders on your device, such as the end of a session. They are created by the app on your phone and are switched off in Settings or in your system settings. We do not currently collect a push token or send remote push notifications.

Cookies and local storage

On the web we use a cookie set by our authentication service to keep you signed in, and browser storage (IndexedDB, local storage and the service-worker cache) for your guest data, preferences, your consent choice and offline use. These are strictly necessary for the features you use. We use no advertising or cross-site tracking cookies. PostHog only runs after consent.

Who we share data with

We share data only with the providers that run the service, and only what each needs. We may also disclose information when the law requires it, to protect people from harm, or in a sale or merger of the business, with notice to you. We do not sell personal information and do not share it for cross-context behavioural advertising. Our providers are:

• Supabase: database, authentication and server functions.
• Vercel: website hosting and delivery.
• DeepSeek: chat text for moderation, and the photo for "match your pet's coat".
• PostHog: analytics, after consent.
• Sentry: web error reports.
• Polar, RevenueCat, Apple and Google: payments and subscription status.

International transfers

Our providers operate in several countries, including the United States, and DeepSeek may process data outside your country. When personal data leaves the EEA, the UK or Brazil we rely on the safeguards those laws allow, such as the European Commission's Standard Contractual Clauses (and the UK addendum), adequacy decisions, or your consent where required. You can ask us for details at support@petcoworking.com.

How long we keep data

Guest data stays on your device until you delete it or clear your browser. Account data is kept while your account exists. When you delete your account we remove your profile and the data tied to it from our systems; copies in backups expire on the provider's normal backup cycle. Chat history follows the period stated above. Purchase and tax records may be kept by Polar, Apple, Google and RevenueCat for as long as the law requires them to. Error and analytics data is kept only as long as needed for its purpose.

Exporting and deleting your data

In the app, Settings → Data (the "You" tab on mobile) gives you the controls below. If you cannot use them, email support@petcoworking.com and we will act on the request after checking it is you.

• Export your data as a JSON file: on-device data, and when signed in, your account data from our servers.
• Delete local data on your device.
• Delete your account in the mobile app (You → Account), after confirming. On the web, email support@petcoworking.com and we run the same deletion for you. It permanently removes your sign-in and the profile and data linked to it and cannot be undone. Deleting an account does not cancel an App Store or Google Play subscription; cancel that in your store settings.

Your rights (EEA, UK and elsewhere)

Under the GDPR and UK GDPR you can ask to access, correct, delete, restrict or port your personal data, and object to processing based on our legitimate interests. Where processing rests on consent (analytics, pet photo) you can withdraw it at any time without affecting what happened before. You can also complain to your local data protection authority (in the UK, the Information Commissioner's Office). Write to support@petcoworking.com; we answer within one month.

California and other US states

If you live in California, the CCPA/CPRA gives you the right to know what personal information we collect and how it is used and disclosed, to delete it, to correct it, to opt out of sale or sharing (we do neither), to limit use of sensitive information (we do not use it beyond providing the service) and not to be treated differently for using these rights. In the past twelve months we collected identifiers (email, account ID, installation ID), commercial information (purchases), internet activity (usage events, with consent), user content (messages, profile) and, only if you choose it, a pet photo, for the purposes above. You or an authorised agent can make a request at support@petcoworking.com. Residents of other US states with similar laws have comparable rights through the same address.

Brazil (LGPD)

If you are in Brazil, the LGPD gives you the right to confirmation that we process your data, access, correction, anonymisation or deletion, portability, information about who we share it with, and withdrawal of consent. Our legal bases are those described above (contract, legitimate interest, consent, legal obligation). Write to support@petcoworking.com and we will answer within the LGPD deadlines. You may also complain to the ANPD.

Children

PetCoworking is not directed at children under 13 and we do not knowingly collect personal information from them. Accounts, rooms, chat and direct messages are for people aged 16 or older, and you confirm this before you can join a room or send a message. If you believe a child has given us personal information, write to support@petcoworking.com and we will delete it.

Security

Data is encrypted in transit; access to our database is restricted by row-level security and server-side checks, and access keys are held as server secrets. No system is perfectly secure, so please use a strong sign-in method and tell us at support@petcoworking.com if you suspect a problem.

Changes to this policy

When we change this policy we update the version and the "last updated" date above and, for changes that matter, tell you in the app or by email before they take effect.

Contact

Privacy requests, legal notices, billing and general help: support@petcoworking.com. Controller: Dapols, G3 Janpath, Shyam Nagar, Jaipur, Rajasthan 302019, India.