LaPaglia · Privacy Policy
Version 0.1 · Last updated: 2026-11-04
1. In short
- Your pets' health records, documents, reminders and your message history stay only on your phone; they are not sent to our servers.
- An account is needed to post listings, send messages and subscribe. Adding new pets and records requires a subscription, which is tied to your account. You can view and export the records already on your phone without an account.
- Messages are end-to-end encrypted; our server cannot read their content.
- We do not sell your personal data or use it for advertising. The app contains no ads and no ad tracking tools.
2. Data controller
Nechh Robotics (individual developer), email: [email protected]. A separate information notice under Turkey's Personal Data Protection Law No. 6698 (KVKK) is provided for users in Turkey.
3. Data that stays only on your phone
Pet profiles, vaccine/medication/check-up records, weight records, notes, documents and photos, reminders, message history and messaging private keys. These are stored encrypted on the phone and are excluded from the operating system's cloud backup. If you lose your phone and have no encrypted backup, we cannot recover this data either. You decide where export and backup files are kept.
4. Data processed on the server
| Data | Why | Note |
|---|---|---|
| Email address | Sign-in (one-time code sent by email), preventing fake and repeat accounts | Stored encrypted; a keyed hash is kept for lookups. The full address is never shown in any response. No marketing emails are sent. |
| Display name, language | Account | |
| Device information | Session, security, notifications | Platform, app version, installation ID, notification token, messaging public keys. No advertising ID is collected. |
| Listing content and photos | Lost/found and adoption listings | Photos are re-encoded on the server; all metadata, including location, is removed. A photo fingerprint is kept to detect copied photos. |
| Approximate location | Showing a listing to people nearby | Only a grid cell of about 500 m and the area name you type. Exact coordinates never leave the phone. No home address is asked for. |
| Encrypted message envelopes | Delivering a message to the other person | The server cannot read the content; the envelope is deleted once delivered, or after at most 30 days if it cannot be delivered. |
| Reports and moderation records | Safety, fighting fraud and animal cruelty | In a chat report, the last 20 messages at most are added, encrypted, and only with your explicit consent (see 7). |
| Subscription status | Features unlocked by the subscription | Your payment details never reach us; the transaction from the App Store or Google Play is verified and the transaction ID is stored as a hash. |
| Questions you ask the Assistant | Producing an answer | Not stored; phone numbers, email addresses and IBANs are hidden before sending. |
| Consent records | Proving which text you accepted and when | Document version and date. |
5. Who data is shared with
We share your data only with the service providers needed to run the service:
- Email delivery — your email address, to send the sign-in code: Google (Gmail) (country: USA).
- Hosting and database — Render (server: Frankfurt, Germany) and Supabase (database: Frankfurt, Germany); both companies are headquartered in the USA.
- AI provider (Anthropic, USA) — for the safety check of listing texts and photos (Guardian) and for questions you ask the Assistant. Phone numbers, email addresses and IBANs are hidden before sending; your pet records are never sent. Under its commercial API terms, Anthropic does not use this content for model training by default and deletes it within 30 days, except for usage-policy reviews or legal obligations. This is a transfer abroad and relies on your explicit consent.
- Apple and Google — subscription purchase and verification, and notification delivery (notifications carry no content; who wrote and what is not sent).
- Identity verification (KYC) provider — not used at present. If one is added, this text will be updated and your consent asked again.
- Competent authorities — only where required by law and under our internal procedure (see the Complaints and Legal Requests Procedure).
We do not sell or rent your data, and we do not share it with advertisers.
6. Retention (summary)
Details are in the Data Retention and Destruction Policy.
- Account: until you delete it. It is permanently deleted within 30 days of your deletion request; you can cancel the request during that time.
- Listing: published for 30 days (can be extended); deleted 90 days after it is closed or expires.
- Message envelope: immediately after delivery, otherwise 30 days.
- Report evidence: 180 days after the case is closed.
- Sign-in code: 5 minutes.
7. Limits of end-to-end encryption
- We cannot read messages; however, the other person can read them, take screenshots or show them to others. On Android, screenshots are blocked on the chat screen; this does not protect in every situation.
- If you report a chat and explicitly agree, the last 20 messages at most are encrypted so that only our safety team can open them, and sent. Without your consent, no messages are sent.
- If your phone is lost or taken, the messages on it can be read; use the app lock and your phone's screen lock.
- Who talked to whom and when (metadata) exists on the server for a limited time.
8. Age limit
LaPaglia is for people aged 18 and over. An account cannot be created on a device where the user has stated they are under 18. If we learn that someone under 18 has created an account, we close it.
9. Security measures
Data on the phone is kept in an encrypted database and encrypted files; the email address on the server is encrypted; communication uses encrypted connections; messages are end-to-end encrypted; the moderator panel requires two-step verification; every moderator view is written to an audit log. No system is perfect; in the event of a data breach, we will inform you and the competent authority within the legal time limits.
10. Your rights
You have the right to access, correct and delete your data, to object to processing and to withdraw your consent. In the app: Settings > Export my data, Settings > Delete my account. For other requests: [email protected]. The application route under KVKK is in the information notice.
11. Changes
If this policy changes, we will tell you in the app; for important changes your consent will be asked again. The version and date are shown at the top of this document.