Privacy Policy

Last updated: 2026-10-04

Who we are

NetForPet (a sole proprietorship in Israel) is the data controller for the personal data described here. For any privacy question or to exercise your rights, contact us at privacy@netfor.pet.

What we collect and why

Account data (email, name, handle, and a password managed by Firebase Authentication) — needed to create and secure your account, to perform our contract with you. Profile and pet data (photos, bios, personality, goals, medical records) that you choose to add. Location data — an approximate location you may set so your pets, lost-pet reports and nearby businesses can appear on the map; we use coarse (not precise) location for discovery. Content you create (posts, comments, messages, reviews, listings). Usage and technical data (device, log and diagnostic information) needed to run and secure the service. Our legal bases are: your consent (e.g. for ad personalization and optional location), performance of our contract (running your account), and our legitimate interests (keeping the service safe, working and improving it).

Advertising and cookies

You can change optional analytics and advertising consent at any time through "Privacy choices" in the site toolbar. Withdrawing consent stops these browser tools on this device. Updating your server-side choice requires a connection and cannot undo a request already sent. These tools are excluded from the NetForPet native apps. Google AdSense network ads are off by default: loading them requires your consent, a separately enabled advertising setting and an eligible page. Consent alone does not enable ads. When enabled, Google and its partners use cookies and similar technologies to serve ads, personalize them where permitted and measure performance. See google.com/policies/privacy/partners; you can manage Google's personalized ads at adssettings.google.com and other ad choices at youronlinechoices.eu or optout.aboutads.info. With your consent, Meta Pixel may load on selected public web pages to measure our Facebook and Instagram campaigns; it does not load without consent. See facebook.com/privacy/policy. Separately, signup measurement through Meta Conversions API requires a valid, current server consent record specifically for that purpose. A missing, denied, revoked, expired or unverifiable record blocks the report; the server checks it again immediately before sending. This signup report contains the registration time, a linked event identifier and a hashed account identifier. These identifiers are not anonymous. When available, it also includes Meta cookie identifiers (fbp/fbc) and browser information. This payload does not include your name, email, phone number, IP address or pet data.

Who we share data with (sub-processors)

We do not sell your personal data. We share data only with service providers who process it on our behalf: Google Firebase (authentication, database, file storage and cloud functions — our core hosting); OpenStreetMap (default map tiles, requested by your browser with your IP address and the visible map area); Overpass (nearby public places, queried through our server for the visible area); Nominatim (public place search only after you press Search — our server sends the search text and language, without forwarding your account identity or device IP address; do not enter personal or confidential information); Google Maps / Places (used only when the Google map is enabled; Google map requests include your IP address and map coordinates, while place lookups go through our server); Google Generative AI (powers optional AI features such as suggested pet bios — see "AI features" below); Google reCAPTCHA Enterprise (protects sign-in and our backend from bots and abuse — evaluates device and interaction signals; the Google Privacy Policy and Terms of Service apply); Microsoft Clarity (Microsoft Corporation) — with your consent, records sessions on selected public web pages while you are signed out, including clicks, scrolling and mouse movement, to help us understand usability problems. It is excluded from the NetForPet native apps and stops when you sign in, withdraw consent or leave eligible pages; Google AdSense (serves ads using cookies); Meta Platforms (advertising measurement — see "Advertising and cookies" above); and Resend (delivers our emails — receives the recipient's email address and name). Each processes data only to provide its service to us.

AI features

Some optional features use Google's Generative AI service (Gemini). Suggested pet bios: if you tap "suggest a bio" in the pet wizard, we send that pet's name, species, breed and the personality traits you picked, so the draft fits your animal; we do not send your name, email, health records, photos or location, and the draft is saved only if you accept it. Weekly pet horoscopes: these are generated in advance per zodiac sign, with no personal data at all — your pet's birthday is used only inside our own database to pick which sign to show you. We do not use your data to train anyone's models. AI output can be wrong — it is entertainment or a writing aid, never veterinary advice. These features are optional: if you never use them, nothing is sent.

Email

We send transactional emails (e.g. security and account notices), optional onboarding tips and a weekly newsletter. Every marketing email has a one-click unsubscribe, and you can manage email preferences in Settings.

Your rights

Depending on where you live, you have rights over your personal data. Under the GDPR (EEA/UK) these include the right to access, rectify, erase, restrict or object to processing, and to data portability. Under the CCPA/CPRA (California) you have the right to know, delete and correct your data and to opt out of the sale or sharing of personal information — and we confirm that we do not sell your personal data. You can exercise most rights yourself: export your data as a JSON file, or delete your account (a real cascade that removes your profile, pets and content) from Settings. For anything else, email privacy@netfor.pet. We will not discriminate against you for exercising your rights, and if you are in the EEA or UK you also have the right to lodge a complaint with your local data-protection supervisory authority.

Data retention

We keep your personal data while your account is active. When you delete your account, your profile, pets and content are removed through a server-side cascade. We may retain limited records for longer where the law requires it, or to resolve disputes and enforce our terms (for example, moderation history of removed content).

International transfers

Our providers (Google and Resend) process data on infrastructure that may be located outside your country, including in the United States. Where data is transferred internationally, it is safeguarded by the providers' data-transfer frameworks and contractual protections (such as Standard Contractual Clauses).

Children

NetForPet is not directed to children under 16, or the minimum digital-consent age in your country if it is higher. We do not knowingly collect personal data from children. If you believe a child has given us their data, contact privacy@netfor.pet and we will delete it.

Medical-record share links

You can create a 30-day shareable link to one of your pets' medical records. Anyone who holds that link can view that record until the link expires or you revoke it. Only share it with people you trust.

Lost-pet area alerts (works without an account)

Anyone can subscribe to lost-pet alerts for an area by giving an email address, an approximate map point and a radius. We store only those details, use them solely to send that area's lost-pet alerts, and require a confirmation click before any alert is sent (double opt-in). Every alert carries a one-click unsubscribe link that deletes the subscription.

Error diagnostics

If the app hits a technical error in your browser, we receive an automatic error report (the error message, a technical stack trace, the page path and the browser type — never the contents of anything you typed). Reports are aggregated per error and deleted within about 30 days; we use them only to find and fix breakages.

Security

Data is protected by server-enforced Firebase security rules, encryption in transit, and access controls. Passwords are handled by Firebase Authentication and are never visible to us. No system is perfectly secure, but we work to protect your data and to notify you of serious incidents as required by law.

Contact

Questions about privacy or this policy? Email privacy@netfor.pet or use the in-app report tools.