How we handle your data

1.Who is responsible

The controller is Amica mea s.r.o., company number 11638915, Zenklova 24/54, Libeň, 180 00 Prague 8, Czech Republic.

For anything about personal data, write to info@pawfie.eu.

2.What we know about you

Only this:

• your e-mail address — without it you cannot sign in and we cannot send you anything
• a name you enter yourself; it does not have to be your real one
• the language you use the app in, so we write to you in the same one
• whatever you record about your pet: name, species, breed, dates, photos, moments, health entries
• on a paid plan, payment details from the payment provider — your card number never reaches us

3.Why we process it

So that we can provide the service you chose. That is the contractual basis under Article 6(1)(b) GDPR and it covers the overwhelming majority of the data.

We keep accounting documents because the law requires it. We cannot delete those even if you ask.

We do not use pet data for profiling or automated decision-making. Nobody decides anything about you on the basis of this data.

4.Directory of shelters and breeders

We keep a directory of shelters, charities and breeders, and we want it to be as complete as possible. Anyone missing from it cannot be found — and people search it for a pet to adopt, for a shelter nearby, and for an animal they have lost.

This data does not come from you. It comes from public registers, from each organisation's own website and from publicly available listings. We process it on the basis of legitimate interest under Article 6(1)(f) GDPR.

A listing holds the organisation's name, its town and region, a link to its website and a few sentences about what it does. Where it is published publicly, a contact as well. We charge the organisation nothing for this, and we never will.

What an organisation can do about it — one message to info@pawfie.eu is enough:

• have the data corrected or completed
• have the contact deleted — we remove the email and phone, and the listing keeps the name, the town and the link to the organisation's own website
• refuse our emails; every one we send carries an unsubscribe link
• object to the processing

5.A person's contact versus data about an organisation

A contact that belongs to a particular person — an address with their name, or a mobile number — is personal data, and we always honour an objection to publishing it.

The organisation's name, its town and the link to its public website stay in the listing. That is data about an organisation rather than about a person, and we have a legitimate interest in the directory being complete.

Where an organisation is run by a single individual, however, it cannot be claimed that this is data about an organisation alone. We assess such an objection individually and reply to it.

6.Health records about a pet

Vaccinations, weight or allergies concern the animal, not you — they are not special category personal data under the GDPR.

We still treat them carefully: they sit in the same private storage as photos, and only people you invite to the profile can reach them.

7.Who else can reach the data

We work only with services the product could not run without. We do not pass data to them for their own purposes.

• Supabase — database and file storage, servers in Frankfurt
• Vercel — hosting
• our payment provider — processing payments on paid plans
• our own mail system, running at crm.pawfie.eu

8.Where the data is stored

In the European Union, specifically in Frankfurt. Photos and video sit in private storage and open only through a temporary link requested by a signed-in person.

The one exception is a memorial page and the page of a pet looking for a home — there the photos are public, because that is the point of them.

9.Measuring traffic

On public pages we run measurement that stores no cookie in your browser and does not follow you across websites. We do not ask about that one — there is nothing to ask about.

Inside the signed-in application we measure nothing at all.

You can also sign in with Facebook or Google. If you do, we receive your name and e-mail address from that account, and the company behind it learns that you signed in here. It is optional, and the e-mail link remains a full path in — an account with another company will never be a condition here.

Once you agree, Google Analytics, the Meta Pixel and the TikTok Pixel are added. All of them store data in your browser and report the visit to their companies — Google, Meta and TikTok. The Meta Pixel additionally sends a hashed copy of the e-mail address you enter here; it lets Meta recognise you among its users and lets us see which advertisement brought whom.

Neither runs without your consent. Refusing is exactly as easy as agreeing, and the decision can be changed at any time from the link in the footer.

10.How long we keep it

As long as you have an account. When you close it, you have thirty days to change your mind — signing in brings everything back. After that the data is deleted.

Accounting documents have to be kept for ten years; that is the law.

Memorial pages stay even after an account is closed, unless you choose otherwise when closing it. That link tends to be in a death notice.

11.What you can do about your data

You have these rights, and an e-mail is enough to use them:

• find out what we hold about you
• have anything wrong corrected
• have everything deleted
• download your data in a machine-readable form — there is a button for it in your account settings, so you do not have to write to anyone
• object to the processing
• complain to the Czech data protection authority (uoou.gov.cz), or to the authority in the country where you live

12.Photos with other people in them

If you upload a photo that has another person in it, it is on you that they agree. That goes double for photos you publish.

If you find yourself on a public page and do not want to be there, write to us and we will remove the photo.

13.Children

The service is not intended for anyone under 16 and we do not knowingly create accounts for them. If we find out an account belongs to a child, we delete it.

14.Changes

If this document changes substantially, we let you know by e-mail. The date of the last change is at the top.