Privacy Policy

Effective date: May 28, 2026 · petvalid.com

1. Who We Are

PetValid ("we", "us", "our") is an iOS application that lets pet owners create digital emergency ID cards for their pets. The app is operated by LumenWorx LLC, reachable at info@petvalid.com.

2. Information We Store

When you add a pet, the following information is saved to our cloud database so it can be retrieved by anyone who scans your pet's QR code:

• Pet profile: name, species, breed, gender, birth date, color, microchip ID, photo
• Owner contact info: name, phone number
• Emergency contact: name, phone number
• Veterinarian info: name, clinic, phone, address
• Medical info: blood type, allergies, conditions, medications, insurance, special notes

3. How Identity Works

PetValid uses an anonymous device identity. When the app first launches, it creates a random ID stored on your device — there is no signup, no password, and no personal account. We have no way to link this ID back to you personally. This anonymous ID is used only to ensure you can manage your own pets and no one else's.

4. Cloud Storage

Your pet data is stored in a cloud database hosted by Supabase, Inc. on infrastructure in the United States (US East). A local copy is also cached on your device so the app works offline and loads instantly.

Our database uses row-level security — each user can only read and modify their own pets. No other user or staff member can browse your data.

5. How QR Code Sharing Works

Each pet has a unique share token. The QR code on your pet's emergency card encodes a link in the form:

https://petvalid.com/pet/<share-token>

Anyone who scans the QR code or opens the link can view that pet's emergency information in any web browser. No login is required to view a shared pet — the share token itself is the access credential. Treat it like a secret URL.

You can rotate the share token at any time from the app, which immediately invalidates any previously printed or shared QR codes.

The public share view excludes your owner email address for privacy.

You can also add your pet's emergency card to Apple Wallet. The Wallet pass displays your pet's name, breed, owner phone number, and special notes, and includes the same QR code as your digital card. The pass is generated on our servers using data you have already provided and delivered to your device — no additional data is collected in this process. Apple's handling of Wallet passes is governed by Apple's privacy policy.

6. Photos, Camera, and Medical Records

PetValid may use your camera or photo picker to let you add a photo of your pet.

Pet photos are stored in cloud storage and may appear on your pet's public emergency card so that first responders can identify your pet when scanning the QR code.

Medical record files (e.g. vaccination certificates, vet documents) are stored in a private, encrypted storage bucket. They are never included on the public emergency card and are never accessible to anyone other than you. Access is granted only through time-limited secure links generated for your device — these links expire automatically and cannot be reused. We never share medical records with any third party. You can delete individual records from within the app at any time.

You may choose to share individual records with third parties (such as veterinarians or boarding facilities) using your device's built-in sharing features (Messages, email, AirDrop, etc.). Once shared, PetValid has no control over how that data is used by the recipient. We recommend sharing records only with trusted parties.

7. In-App Purchases

PetValid offers a Pro upgrade available as a monthly subscription ($1.99/month) or a one-time lifetime purchase ($7.99), both processed entirely through Apple's App Store. We never see or handle your payment details. Apple's privacy policy governs that transaction and can be found at apple.com/legal/privacy.

Subscription status is managed by RevenueCat, Inc., a third-party service that verifies your purchase with Apple and tells the app whether Pro is active. RevenueCat receives an anonymized purchase receipt — no name, email, or payment method is shared with them. See revenuecat.com/privacy.

8. Physical Tag Orders

PetValid offers optional custom-printed physical QR tags for purchase through our website (petvalid.com/order). When you place a tag order, the following information is collected solely to fulfill your order:

• Contact info: name and email address
• Shipping address: street address, city, state, zip, country

Payment is processed by Stripe, Inc. We never store your full card number or payment details — Stripe handles all payment processing. See stripe.com/privacy.

Physical tags are printed and fulfilled by Printify, Inc., a third-party print-on-demand provider. Your name, shipping address, and order details are shared with Printify solely for the purpose of manufacturing and shipping your tag. See printify.com/privacy-policy.

Order data is not used for marketing, analytics, or any purpose beyond fulfillment.

9. Device Permissions

The app may request the following permissions:

• Camera — optionally, to take a pet photo directly.

Photo selection uses Apple's system photo picker (PHPickerViewController), which does not require photo library permission. All permissions can be revoked at any time in your iOS Settings.

10. Third-Party Services

• Supabase, Inc. — cloud database, authentication, and file storage. Pet profiles, photos, and medical records are stored on Supabase's infrastructure. See supabase.com/privacy.
• Apple — handles in-app purchases. We never see card details.
• RevenueCat, Inc. — subscription management and purchase verification. Receives anonymized purchase receipts only. See revenuecat.com/privacy.

PetValid does not integrate any analytics, crash-reporting SDKs, advertising networks, or social login services.

11. Children's Privacy

PetValid is intended for adult pet owners. We do not knowingly collect information from children under 13.

12. Data Security

Your data is protected by Supabase's infrastructure security, encrypted in transit (TLS), and scoped by row-level security policies so only your anonymous device identity can access your pets. The local cache on your device benefits from the same security protections Apple applies to all local app data.

13. Data Deletion

To delete a pet, remove it from inside the app — this deletes both the local copy and the cloud copy immediately. Deleting the app removes all local data.

To request full deletion of any residual cloud data, email info@petvalid.com.

14. International Users (GDPR / CCPA)

Your pet data is stored in the United States. Because we use anonymous identifiers with no way to link data back to a real person, the data we store does not constitute "personal data" under most privacy frameworks. You have full control to view, edit, and delete your data directly from the app at any time.

15. Changes to This Policy

If we change this privacy policy, we will update the effective date above and note the change in the app's next update release notes.

16. Contact Us

If you have questions about this privacy policy, please contact us at:

• Email: info@petvalid.com
• Website: petvalid.com