Privacy Policy

Pawverse OÜ is the controller of personal information handled through Pawverse. Pawverse OÜ is an Estonian private limited company (osaühing), registry code 17567892, with its registered office at Harju maakond, Tallinn, Kesklinna linnaosa, Järvevana tee 9, 11314, Estonia. Contact support@pawverse.pet or use https://www.pawverse.pet/data-rights for a privacy request.

Account and contact information can include your name, username, email address, date of birth, optional mobile number, sign-in provider, authentication, account-recovery, consent, and policy acceptance records.

Profile and content information can include user and pet profiles, photos, videos, captions, Stories, comments, reactions, messages, reports, appeals, and information you submit to support or a governed public form.

Service, device, and safety information can include privacy and notification choices, moderation and enforcement records, push registration, an app-generated device identifier, app and build details, request timestamps, network addresses, security events, and diagnostic records needed to operate and protect the service.

Username claims and disputes can include the requested username, claimant or represented organization's name, nominated contact email, necessary representative-authority evidence, relevant profile or pet details, explanations, notices, responses, decisions and delivery records. Pawverse does not routinely request passports or identity documents for this process; additional proof is requested only where necessary to verify a claim.

App usage totals

Where enabled, Pawverse measures how many eligible accounts have the app open in the foreground. The app sends a small periodic signal while open; it does not send screen names, taps, message text or viewed content for this purpose. We temporarily associate the latest receipt time with your account so several devices count as one account. Live counts cover the previous five minutes. We retain no sequence of these signals and schedule removal of the account-linked receipt within ten minutes. Authorized staff see totals, not a list of active accounts. Where history is enabled, we keep global minute-count samples for 30 days and hourly count summaries for 365 days to understand changes in service use and plan capacity. These history records contain no account or device identifiers. Missing readings remain gaps. Where usage and return-rate measurement is enabled, we also retain the UTC dates on which your account was observed, your completed registration time and first successful pet creation time for up to 90 days. We use these limited records to count distinct accounts over daily, weekly and monthly windows and measure return and first-pet rates. They do not contain a sequence of screens or actions. Global daily and cohort summaries are retained for 365 days. These account-linked records are included in your account-data export and removed on account deletion or an accepted measurement exclusion. Initially, accounts under 18 or without a known age, staff and designated test accounts are excluded. This first-party measurement supports our legitimate interest in understanding service use and planning capacity, subject to your rights. There is no third-party analytics SDK or advertising identifier. Use the Data Rights page or support@pawverse.pet for access, erasure or objection where applicable; accepted exclusions stop future measurement and remove the live receipt. Exclusion records remain while needed to honor the request and are deleted with the account.

Pawverse processes information to perform its contract with you by creating and securing accounts, providing pet profiles and social features, delivering messages and requested notifications, processing media, and responding to support and rights requests.

Pawverse relies on legitimate interests where appropriate to protect people and animals, prevent abuse and fraud, moderate content, maintain service integrity, diagnose faults, and improve the service, while considering the rights of affected people. Pawverse processes information to comply with legal obligations and may act to protect vital interests in an emergency. Pawverse uses consent where the law or an optional feature requires it; consent can be withdrawn for future processing at any time.

Pawverse uses this information to verify authority and email ownership, investigate impersonation or rights complaints, protect legitimate username use, explain decisions and handle disputes. It relies on legitimate interests in preventing deception and resolving disputes, while balancing affected people's rights, and on legal obligations where they apply. Necessary account notices also support the service contract. Restricted reviewers access case evidence; existing service providers process only what is needed for these functions, including account email delivery. Evidence and nominated emails are not a public claimant directory. Decision reasons may describe relevant allegations to the affected holder; personal evidence is disclosed only where necessary and lawful.

Post and Reel measurement

Where enabled, the app reports qualified foreground Post views and visible Reel playback, including watch duration. This supports view counts and private creator insights under our legitimate interest in understanding content performance, subject to your privacy rights. Recent qualified playback also helps personalize recommendations; replaying one item does not multiply its interest signal. Your Not interested choices exclude those items from Home and Reels recommendations and reduce similar suggestions. These choices stay until you undo them or the account or post is deleted, and appear in your data export. They do not remove the content for other people. A retry identifier prevents duplicate counting. Detailed view receipts are kept for up to 48 hours and daily totals for 30 UTC calendar days. For exact reach, we keep one account-to-post record with first and latest measurement times while both the account and post remain. Deleting either removes that record; aggregate view and watch totals contain no viewer identifier and can remain while the post exists. Creators receive totals, never a list of Post or Reel viewers. Your retained records are available in your ordinary data export. Contact support@pawverse.pet to exercise your rights, including objection where applicable. This feature adds no third-party analytics SDK, advertising identifier or precise location collection.

Text and media can be checked by automated safety systems and, where needed, authorized reviewers. Text moderation runs through Pawverse-controlled services. Eligible photo and video safety inputs can be processed by OpenAI after Pawverse prepares a moderation copy, and video audio can be transcribed for safety review. Automated systems assist detection and triage; they do not alone make Pawverse's final permanent-account-disablement or legal-reporting decision.

Pawverse uses providers only as needed to operate the service. These include Google or Apple when you choose provider sign-in, Firebase Cloud Messaging for push delivery, Firebase Crashlytics for reliability diagnostics on diagnostics-enabled app builds, Google Workspace for email, Cloudflare for media storage, delivery, connectivity and backup services, OpenAI for eligible media-safety processing, and Vercel for the public website. Hosting, security, and operational suppliers can also process limited data on Pawverse's behalf.

Information is primarily handled in the European Economic Area or in countries recognized as providing adequate protection. Where a provider processes information elsewhere, Pawverse uses an applicable transfer mechanism such as the European Commission's Standard Contractual Clauses and appropriate technical and organizational safeguards.

On diagnostics-enabled app builds, Pawverse collects limited technical outcomes and timings to diagnose startup, request, upload and playback problems. These first-party reports contain the app version, fixed technical event names, outcomes and durations, without account identifiers, message content, media or request bodies. Aggregates expire after 14 days and may be lost earlier from the operational cache.

Diagnostics-enabled app builds also use Firebase Crashlytics. Crash reports can include crash traces, app and operating-system versions, technical device details and installation identifiers. Our custom crash reports exclude passwords, verification codes, contact details and user-authored content. Native SDK technical metadata is separate from these custom reports. Google retains crash traces and associated identifiers for 90 days before beginning their removal from live and backup systems.

The current Pawverse mobile app has no active advertising, attribution, device-location, purchase or behavioral analytics SDK. The app-generated device identifier is not an IMEI, hardware serial number, advertising ID, or IDFA. Pawverse does not request device location for the current product and does not train an AI model on user media. Pawverse will update this notice before materially changing these practices.

Country and regional recommendations

You select a private country or region when creating an account and can correct it in Personal Information. It is not displayed on your public profile or treated as proof of residence or nationality. Where enabled, Cloudflare supplies an approximate country from your network connection. We can suggest it during signup, but you choose the country yourself. For signed-in activity, we keep one country summary per UTC day for up to 28 days; conflicting countries make that day inconclusive. These summaries contain no IP addresses, precise location or device history. They support gradual regional recommendations alongside your interests and follows, including when you move abroad. Travel and VPNs can make estimates inaccurate. Correcting your selected country clears these summaries. You can access them through your data export and contact support to exercise your privacy rights, including objection where applicable. This processing supports our legitimate interest in relevant content, subject to your rights; it does not determine legal or safety rules.

Pawverse keeps active-service information while an account is active and for as long as needed to provide the requested feature. An accepted account-deletion request immediately deactivates the account and begins a 30-day recovery period. If the account is not reactivated, Pawverse completes the scheduled deletion process.

Ordinary authentication security telemetry is retained for up to 12 months, while full network-address and device detail is retained for up to 90 days. Recognized-device records expire after 180 days of inactivity, and terminal refresh or saved-login records are retained for up to 30 days. Material safety, moderation, enforcement, consent, dispute, and legal evidence can be retained in restricted storage for up to five years where needed for the record's approved purpose. A narrowly scoped legal hold or legal duty can require longer retention. Secured backups rotate under Pawverse's operational schedule; deletion is reapplied if a backup is restored.

For username disputes, private case evidence is scheduled for disposal 1,826 days after final case closure. A narrowly scoped legal hold or legal duty can extend that period. An open case has no final-closure date and must remain subject to necessary-purpose review. Separately retained security and audit records follow their applicable schedules. The evidence period is not the 30-day nominated-email claiming window or a deadline for your privacy rights. Contact support@pawverse.pet or use the Data Rights route for access, correction or other rights; lawful exceptions may protect another person's information.

You can update supported profile information, manage privacy and notification settings, block users, report content, appeal eligible decisions, and request account deletion in the app. Depending on applicable law, you may request access, correction, erasure, restriction, objection, portability, and information about automated processing, and may withdraw consent for future processing. Use https://www.pawverse.pet/data-rights or contact support@pawverse.pet. Pawverse may need to verify identity and may apply a lawful exception while explaining it where permitted.

Please contact Pawverse first so the concern can be investigated. You may also complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), Tatari 39, 10134 Tallinn, Estonia, at info@aki.ee or https://www.aki.ee/en. Where applicable, you may contact the data-protection authority in the country where you live or work or where you believe an infringement occurred.

Pawverse is a general-audience pet social service for people aged 13 or older and does not offer an under-13 account mode. A higher regional minimum age or guardian requirement applies where required by law. Pawverse prohibits child sexual abuse and exploitation. Use the exact in-app Report action for content or behavior on Pawverse, and do not copy, download, or email suspected illegal imagery.

Pawverse uses access controls, encrypted transport, protected credentials, restricted administrative access, and security monitoring appropriate to the service. No online service can promise absolute security.

Pawverse may update this policy when its service, providers, or legal duties change. The version and last-updated date identify the applicable notice. Pawverse will provide an appropriate in-app or essential email notice before a material change takes effect when required. Contact support@pawverse.pet with the subject "Privacy request" and only the information needed to identify and handle the request.