Privacy Policy

1. Controller and contact

The controller responsible for Puki is Anton Kasatkin, Ukraine. Privacy and support requests may be sent to puki.support@proton.me. No Data Protection Officer has been appointed because one is not currently required for the known scale and nature of processing.

2. Information we process

• Contact and support data: your name, email address, message, attachments, and any technical details you voluntarily provide.
• Website technical data: IP address, browser and device information, request time, and security logs generated by the hosting infrastructure.
• Subscription information: subscription status and transaction identifiers made available by Apple after launch. Apple processes payment-card details; Puki does not receive them.
• App information: pet profiles, reminders, schedules, and photos may be entered into the app. Before release, the App Store privacy disclosure and this policy will be updated to identify which data remains on-device and which data, if any, is transmitted to Puki or service providers.

The website does not currently use advertising trackers or behavioural advertising. Please do not include unnecessary sensitive personal information in support messages.

3. Purposes and legal bases

• Respond to requests and provide support — steps requested by you, performance of a contract, and legitimate interests in assisting users.
• Operate, secure, and diagnose the website and future app — legitimate interests and legal obligations.
• Administer subscriptions and verify entitlements after launch — performance of a contract.
• Comply with accounting, consumer-protection, and lawful authority requirements — legal obligations.

Where consent is legally required, it will be requested separately and may be withdrawn at any time. Puki does not currently make decisions based solely on automated processing that produce legal or similarly significant effects.

4. Service providers and disclosures

Data is disclosed only where needed to provide or secure the service. Current website and communications providers include Vercel for website hosting, Proton for support email, and Google Fonts for web typography. After app launch, Apple will process App Store purchases and subscription management. Providers process data under their own terms and applicable data-protection obligations. Information may also be disclosed to professional advisers or public authorities when legally required. Puki does not sell personal information.

5. International transfers

Some providers may process information outside Ukraine or your country. Where the GDPR applies and data is transferred outside the EEA to a country without an adequacy decision, the transfer will rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses, or another lawful transfer mechanism.

6. Retention

• Support correspondence: up to 24 months after the request is closed.
• Website security and server logs: normally up to 30 days, unless required longer to investigate abuse or a security incident.
• Subscription and transaction records: up to 5 years, or longer where Ukrainian tax, accounting, or other law requires it.
• Backups containing personal data: deleted or overwritten within 90 days after the source data is deleted, unless legal retention is required.

Data may be deleted earlier when no longer needed. When retention is legally required, processing is limited to that purpose.

7. Your rights

Depending on applicable law, including the Law of Ukraine “On Personal Data Protection” and the GDPR where relevant, you may request access, correction, deletion, restriction, portability, or objection, and may withdraw consent without affecting earlier lawful processing. Send requests to puki.support@proton.me. Identity may be verified before a request is completed. GDPR requests are normally answered within one month.

You may complain to the Ukrainian Parliament Commissioner for Human Rights or, where the GDPR applies, the data-protection authority in the country where you live or work.

8. Children

Puki is intended for adults responsible for pet care and is not directed to children under 13, or a higher minimum age required by local law. Puki does not knowingly collect children’s personal data without valid parental authorisation. Contact us if you believe a child has provided personal information improperly.

9. Cookies, device permissions, and security

The current website does not use non-essential advertising cookies. Essential storage may be used for security or requested functionality. The future app may request notifications or photo access only when relevant; permissions can be changed in iOS Settings. Reasonable technical and organisational safeguards are used, but no internet or storage system can be guaranteed completely secure.

10. Changes

This policy will be reviewed before the mobile app launches and whenever data practices materially change. Material updates will be communicated through the website, the app, or another appropriate channel. Questions may be sent to puki.support@proton.me.