Privacy Policy | Petcrest - Premier Pet-Friendly Community

1. Scope and Controller

This Privacy Policy explains how Petcrest Technologies Pvt. Ltd. (“Petcrest”, “we”, “us”) collects, uses, discloses, retains and safeguards digital personal data through the Petcrest app, website, Pet Vault, Petzy AI, community, marketplace and service-booking services. Petcrest generally acts as a Data Fiduciary for information collected for its own purposes. Independent service partners may act as separate data fiduciaries for their own processing.

2. Personal Data We Collect

Account data: name, mobile number, email, login identifiers, verification and communication preferences. Pet profile data: pet name, breed, age, photos, habits, diet, care schedules and veterinarian details. Pet Vault: vaccination cards, prescriptions, lab reports, bills, insurance records and documents uploaded by users; these may contain the pet parent’s or third parties’ personal information. Service and transaction data: bookings, addresses, appointment details, service-partner interactions, payment status, refunds and customer support. Community data: posts, photos, comments, reports and moderation history. Technical data: device/app identifiers, diagnostic logs, security events, approximate location where needed and permission-based precise location, notification tokens, and analytics choices. Petzy AI data: user questions, uploaded context and AI outputs. We do not request more personal data than reasonably necessary for stated purposes.

3. Why We Process Data

To create and secure accounts; build pet profiles; store and retrieve Vault records; issue user-selected reminders; provide AI pet-care assistance; match users with service providers; manage bookings and payments; deliver support; prevent fraud and platform abuse; run community functions; satisfy legal duties; and, only where lawful and appropriately consented, send promotional communications or conduct optional analytics/personalisation.

4. Consent and Choices

Where consent is the appropriate legal basis, we seek specific, informed, unambiguous affirmative consent for the described purpose. Marketing opt-in is optional and separate from account creation and core service use; boxes must not be pre-ticked. Device permissions (camera, photos, location and notifications) are requested contextually and can be managed in device settings. Users may withdraw optional consent using in-app Privacy/Communication Settings [IMPLEMENT LINK] or by writing to info@thepetcrest.com. Withdrawal does not invalidate earlier lawful processing and may restrict the affected feature. Certain processing may be permitted for specified legitimate uses or legal compliance, where applicable.

5. Sharing and Processors

We may share only necessary information with booking partners (for example, name, contact and booked pet-care details), payment gateways, hosting/cloud infrastructure, analytics and customer-support providers, communication vendors and AI-processing providers under appropriate confidentiality, security and processing agreements. We may share information with authorities where legally required. Public community submissions may be visible to other users. We do not sell personal data or disclose Pet Vault documents to advertisers. We will identify material external processors and international transfers in a maintained vendor register and update this notice when needed.

6. Pet Vault and AI Safeguards

Vault records are private by default and should be accessible only to the account holder and authorised staff or processors with a legitimate need. Sharing Vault files with a vet or care partner requires a distinct user action or narrowly scoped authorisation. Petzy AI may process submitted pet profiles, questions and selected records to answer requests; AI responses can be inaccurate and do not replace advice from a qualified veterinarian. We will not use identifiable Vault records or private AI conversations to train third-party/general-purpose AI models without separate, clearly explained permission. Do not upload another person’s personal information unless you are authorised.

7. Children and Age Controls

Petcrest is intended for persons aged 18 or older. Minors must not independently register. If Petcrest introduces accounts for children, it will implement age assurance, verifiable parental consent where required, and statutory restrictions on child tracking, behavioural monitoring and targeted advertising before allowing such accounts. Parents or guardians can report suspected minor accounts at the contact address below.

8. Security and Incidents

We apply risk-appropriate organisational and technical controls such as encryption in transit and at rest where appropriate, role-based access, restricted administrator access, logging, backups, vendor reviews and incident-response processes. No online service is entirely risk-free. We will make legally required notifications of personal data breaches to affected users and the Data Protection Board of India within applicable timelines when those provisions take effect; other currently applicable incident-reporting requirements continue to apply.

9. Retention and Deletion

We retain information only while needed for the stated purpose, legitimate service operations, dispute handling, security, or a legal requirement. Account and Vault deletion can be requested through [IMPLEMENT IN-APP DELETE ACCOUNT FLOW] or info@thepetcrest.com. Deletion may be delayed for records subject to statutory preservation, fraud prevention, disputes or backups; these exceptions will be documented. A detailed retention schedule, including backups, financial records and security logs, will be maintained internally and published where necessary. We will not promise immediate deletion of every backup copy.

10. Your Rights and Grievances

Subject to the provisions in force and applicable law, users may request information about processing, correction, completion, updating or erasure of personal data, withdraw consent, and use applicable grievance and nomination rights. Contact our privacy/grievance contact at grievance@thepetcrest.com (subject: “Privacy Request”). We will acknowledge and resolve complaints within the applicable statutory timeline and provide information on any right to approach the Data Protection Board once available. Designated grievance officer: [INSERT NAME AND BUSINESS CONTACT BEFORE PUBLICATION].

11. Cross-border Processing

Service providers may process data outside India where legally allowed, subject to relevant government restrictions and appropriate contractual safeguards. Actual hosting locations and relevant vendors must be checked and documented prior to publication.

12. Updates and Contact

We may revise this policy when services, vendors or laws change. Material changes will be communicated as appropriate, and new consent will be collected where required. Contact: Petcrest Technologies Pvt. Ltd. | H.No. 118, ATS Heavenly Foothills, Sahastradhara Road, Dehradun – 248001, Uttarakhand, India | info@thepetcrest.com | https://www.thepetcrest.com. Effective date: 13 October 2026. Version 1.0 (draft pending operational verification). Grievance redressal: grievance@thepetcrest.com.