Privacy policy
Last updated: 27 October 2026
This policy explains what personal information Petory collects, why, where it's kept, who it's shared with, and what you can do about it. It covers the Petory app (iPhone, Android and web) and this website. We follow the Australian Privacy Principles in the Privacy Act 1988 (Cth).
Who we are
Petory is run by Petory (ABN 86 198 789 989). You can reach us about anything in this policy at hello@petory.au.
What we collect
Your account. Your name, email address and password. Your password is stored only as a secure hash by our login provider, and we never see it. A phone number is optional. You can add a profile photo.
Your pets. The details you enter: name, species, breed, birth date or age, weight, sex, whether they're desexed, microchip number and photo. You can also add their care records: events and reminders, vaccinations, medications, allergies, vet visits, travel permits, and memories with photos, videos and captions.
Sharing and social features. Who you share each pet with and their role, your friends, the posts, comments and likes you make, your chat messages and the photos you send in them, reactions, and group chats.
Pawsley, the in-app assistant. When you ask Pawsley something, we send your question, your recent conversation with it, any photo you attach, your name and the active pet's details and records to our AI provider to get an answer. We never send your pet's microchip number. We don't keep your questions or Pawsley's replies on our servers. We only count how many questions you've asked, to apply your plan's limit. On the web, your chat history with Pawsley is saved in your browser. In the mobile app, it's saved on your device.
Feedback and support messages you send us from the app.
Notifications. If you allow notifications, we store a push token for your device so reminders can reach it.
This website. If you join the app waitlist, we collect your name, email, phone platform, and your optional answers about your pets. We also record that you agreed to hear from us, and when. If you use the contact form, we collect your name, email and message. If you use the chat on this website, we send your messages to our AI provider to answer them, and we don't store them.
Technical information. Our hosting providers keep standard request logs, including IP addresses, to run and secure the service.
What we don't collect: your location, payment card details, or advertising identifiers. Petory has no ads, no analytics or tracking tools, and no tracking cookies. The only cookie is a sign-in cookie for Petory staff on the admin pages.
Photo location data. Phone cameras can embed the GPS location a photo was taken. Petory removes this information from photos when you upload them. Photos uploaded before TODO: the date the photo-metadata update went live may still contain it.
How we use it
We use your information to run Petory for you. That covers keeping your pet records, sharing them with the people you choose, showing your posts to your friends, delivering messages and reminders, answering your Pawsley questions, applying your plan's limits, replying to you, and keeping the service secure. We email waitlist members about the app's launch and occasional product updates, which they agreed to, and every email has an unsubscribe link. We don't sell your information, and we don't use it for advertising.
Who can see what
- People you share a pet with can see that pet and its records, according to the role you give them.
- Your friends can see your posts, comments and likes.
- Chat members can see the messages and photos in that chat.
- Other signed-in Petory users can see your name and profile photo, for example when searching for friends. They can find you by name, or by your exact email address. They can't see your email address or phone number.
- Photos in chats and memories are private. They can only be opened through short-lived links by people who can see the chat or memory. Photos in posts and profile photos are stored at public links, so anyone who has the link can open them.
- The Emergency QR card contains the details you choose to put on it, including your name and phone number. Anyone who scans it, or receives it when you share it, can read those details.
- Petory staff can access account information to run the service and help you. Every change we make through our admin tools is logged.
Service providers and overseas disclosure
We use these providers to run Petory. Some are outside Australia:
| Provider | What they do for us | Where |
|---|---|---|
| Supabase | Database, photo storage and sign-in | Sydney, Australia |
| Vercel | Hosts the website and the web app | United States |
| Groq | Answers Pawsley and website chat questions (AI) | United States |
| Resend | Sends our emails | United States |
| Expo | Delivers push notifications (through Apple and Google) | United States |
Groq states that it doesn't keep the content of AI requests by default. TODO (legal review): confirm Groq's data terms for our account (Zero Data Retention setting, and that API data isn't used for training).
We only use providers whose terms require them to protect your information, and we share only what each one needs to do its job. TODO (legal review): confirm a data processing agreement is in place with each provider.
How long we keep it
- Your account and everything in it are kept until you delete your account.
- Pets you've shared with others work differently when you delete your account. Before deleting, you can hand each one to someone it's shared with. If you don't, the pet stays with those people as a read-only copy, and it's removed when the last of them leaves it. Pets you haven't shared are deleted with your account.
- Waitlist details are kept until the app launches or you unsubscribe, whichever comes first. Contact form messages are kept until we've dealt with them. TODO (legal review): set fixed retention periods for waitlist and contact data.
- Backups. Deleted information may remain in our database provider's backups for up to TODO: the Supabase plan's backup retention before it's overwritten.
Deleting your account
You can delete your account at any time in the app, under Settings › Delete account. Your profile, login, posts, comments, likes, messages, friends and your photos and videos are deleted straight away. The only exception is the photos on pets you leave with others. Group chats you created stay for the other members. If you can't use the app, email hello@petory.au from your account's email address and we'll delete it for you within 30 days. See deleting your account.
Your choices and rights
- See and correct your information in the app at any time.
- Get a copy. You can download a pet's passport as a PDF in the app. For a copy of anything else we hold about you, email us and we'll respond within 30 days.
- Withdraw consent to marketing emails with the unsubscribe link in any email. You can also turn notifications off in your phone's settings.
- Complain. If you're unhappy with how we've handled your information, email us first and we'll reply within 30 days. If you're still not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.
Security
Information is encrypted in transit (HTTPS), and our providers encrypt it at rest. Access to your data inside Petory is controlled per user, so only the people you've shared with can see it. If a data breach is likely to cause you serious harm, we'll tell you and the Information Commissioner as the law requires.
Children
TODO (legal review): minimum age to use Petory, and how children's information is handled.
Changes
If we change this policy, we'll update the date at the top. If a change is significant, we'll also tell you in the app.
