Draft for legal review. This page is a working draft published while PawManage is in development. Items in [brackets] are still to be confirmed. It will be finalised before launch.
1. Who we are
PawManage (“we”, “us”) runs the PawManage mobile apps and pawmanage.com. For this policy, we are the Data Fiduciary under India's Digital Personal Data Protection Act, 2023 (“DPDP Act”). Registered entity: [legal entity name and address].
2. Data we collect
- Account data: mobile number (required, used to sign in), first and last name, display name, and optionally email, profile photo and location (city, state, country).
- Pet data: name, species, breed, gender, date of birth, colour, weight, photos, microchip and registration numbers, sterilisation status, feeding and care notes.
- Health data: vaccinations, medications, deworming, allergies, conditions, surgeries, medical records, lab reports, prescriptions, vet details and uploaded documents.
- Relationship data: the people linked to a pet and their access permissions.
- Breeder data: kennel name, experience, breed specialisations, verification documents and review history.
- Content: community posts, comments, reactions, reports and messages.
- Device and session data: device type, app version, login activity and push notification tokens.
- Billing data (when plans launch): billing email, plan, invoices and transaction references. Card details are handled by our payment provider and never stored by us.
3. How we use it
- To create and secure your account, including OTP sign-in and session management.
- To provide pet profiles, health records, reminders and notifications.
- To enforce the access permissions you set for people linked to your pets.
- To run breeder verification, matching and match-request messaging.
- To moderate community content, including automatically detecting contact details and spam.
- To process payments and send invoices, when plans launch.
- To keep audit logs of important actions for security and accountability.
- To comply with the law.
We do not sell your personal data.
4. Consent
We process your personal data based on the consent you give when you sign up, and for the legitimate uses allowed by the DPDP Act. You can withdraw consent at any time in the app or by emailing privacy@pawmanage.com. Withdrawing consent may mean we can no longer provide parts of the service.
5. Who can see what
- Public: your display name and role (pet owner or breeder) on community posts. Your phone number, email and exact address are never public.
- People linked to your pet: only what their relationship allows (for example, a vet sees health information).
- Breeders and owners in a match: contact details stay hidden before a request is accepted, and chats hide phone numbers and emails automatically.
- Our team: authorised staff, with role-based access and audit logging.
- Service providers: hosting, SMS/OTP, push notifications, email and payments, only as needed to provide the service. [List of processors to be confirmed.]
6. Storage & security
Data is encrypted in transit (HTTPS). Sensitive documents are stored privately and only accessible to authorised users. We use rate limiting, session expiry, role-based access control and audit logs. No system is perfectly secure. If a breach affects you, we'll notify you and the Data Protection Board as the law requires.
7. Retention & deletion
We keep your data while your account is active and as needed for legal, security and audit purposes. You can delete your account from Settings, and we'll verify the request first. Pets shared with other people are not deleted when you delete your account. Your link to them is removed. [Retention periods to be confirmed.]
8. Your rights
Under the DPDP Act you can ask to access a summary of your personal data, correct or update it, erase it, and nominate someone to exercise your rights if you die or become incapacitated. You can also raise a grievance. Email privacy@pawmanage.com. If you're not satisfied with our response, you can complain to the Data Protection Board of India.
9. Children
PawManage is not intended for children under 18 without verifiable parental consent, as required by the DPDP Act.
10. Grievance officer
[Name], Grievance Officer, PawManage. Email: privacy@pawmanage.com. Address: [address].
11. Changes
We'll update this page when things change, and tell you in the app about significant changes.