Privacy Policy

Last updated: November 6, 2026

This policy explains what Petlu collects, why, and what you can do about it. Petlu ("the app") is published by CloudArbitration LTDA ("we", "us"), the same company behind Kaha Trainer and DietCoach. You can reach us at info@kahatrainer.com.

1. The short version

2. Using the app without an account

Petlu works in guest mode. Without an account, your pets' profiles, records, photos and documents are stored only on your device; nothing about your pets is sent to our servers. The trade-off is that the data does not sync to other devices, cannot be shared with your family, the lost-pet page is not available, and everything is lost if you delete the app. Usage statistics, crash reports and ads (sections 3.6 to 3.8) still apply in guest mode.

3. Data we collect

3.1 Account information

An account is optional. You can create one with an email and password, with Sign in with Apple or with Sign in with Google. We collect your email address and your name. With Sign in with Apple, we receive whatever Apple sends us — which may be a private relay address instead of your real email — and we keep the token Apple issues so we can revoke the sign-in when you delete your account. Passwords are handled by our authentication provider and are never visible to us.

3.2 Your pets' data

When you are signed in, we store what you record, which is the reason the app exists:

• Each pet's profile: name, species, breed, sex, date of birth, microchip, whether it is neutered, vet and pet shop contacts, and its photo.
• Care and health records: daily care routines and what was done or skipped (food, water, medicine, walks, hygiene), weight, vaccines, symptoms, appointments and other events, and expenses.
• Diary posts: photos and text, the pets they are about and the date.
• Documents you add, such as vaccination cards, exams and prescriptions.
• Your preferences, such as units, country and reminder settings.

This data is stored on your device and, while you are signed in, synced to our database so it is backed up and available on your other devices. Photos and documents are kept in private storage, up to 200 MB per account; files that family members add to your pets count toward your limit.

3.3 Location during walks

The walk feature uses your iPhone's location with the "While Using the App" permission. Location is read only after you start a walk, and it keeps being read with the screen locked only while that walk is active; it stops when you finish the walk. We save the route (location points with their times) and the distance with that walk record, so you can see it on a map. When you are signed in, the walk is synced like any other record and can be seen by the family members of that pet. We do not collect your location at any other time, and we never use it for advertising.

3.4 Family sharing

With an account, you can invite other people to a pet with a link or a code, as Family or as Pet sitter (who can add records, with access that ends on a date you choose). Everyone who joins a pet can see that pet's data — profile, records, walks with their routes, diary posts, photos and documents — and each record shows the name of who added it. We record who is a member of each pet and in which role. Invite only people you trust. The owner can remove a member at any time, and a member can leave on their own.

3.5 Lost-pet QR code and public page

If you turn on the lost-pet QR code for a pet, we create a short code and a public page at kahatrainer.com/pets/p/<code>, so whoever finds your pet can reach you. Anyone who has the code or scans the QR can see on that page: the pet's name, species, breed and sex, a reduced copy of its photo, whether you marked it as lost, the message you wrote, the owner name you entered and only the contacts you chose to show — phone, WhatsApp and/or email. Your address is never shown. Turning the QR code off takes the page down and deletes the public copy of the photo. The page has no analytics or tracking.

3.6 Usage analytics and crash reports

To understand which screens are useful and to fix what is broken, the app records product events in our own analytics database: a random identifier generated on your device at install, the screens viewed, the app version, the language and country, ad decisions (whether an ad was shown or skipped, and why) and purchases. That identifier is not linked to your account, your email or your pets' data, and it is recreated if you delete and reinstall the app.

We also use Google Firebase Analytics, for aggregate usage statistics, and Firebase Crashlytics, which sends a crash report (device model, iOS version, app version and the technical state of the app when it crashed) if the app closes unexpectedly. Your pets' records, photos and walk routes are not included in either.

3.7 Advertising

The free version shows ads served by Google AdMob — never while you are logging a record or on a walk. Depending on your choices and region, AdMob may process your device's advertising identifier (IDFA), general device and network information, and ad interaction data.

Ads are personalized only with your permission: on iOS, through Apple's App Tracking Transparency prompt; in the European Economic Area, the United Kingdom, Switzerland and other regions where the law requires it, also through Google's consent form. If you decline, the app works exactly the same and ads are simply less relevant. The "No ads" purchase removes ads altogether. Google's handling of this data follows its own policies; see How Google uses information from sites or apps that use our services.

3.8 Purchases

Petlu is free. An optional No ads purchase is offered monthly, yearly or as a one-time lifetime purchase. Purchases are processed by Apple through the App Store. We receive the status of the transaction (which plan, whether it is active, renewal and expiry dates and Apple's transaction identifiers) to unlock what you paid for. We never see your card or payment details.

3.9 Notifications

Reminders for care routines, medicines, vaccines and appointments are scheduled locally on your device. For notifications sent by us, we use Firebase Cloud Messaging: if you allow notifications, we store your device's push token, your account (if you are signed in), time zone, language and which kinds of notification you opted into, so we can send them at a reasonable hour and in your language.

3.10 Photos, camera and files

The app reads only the photos and files you pick, and uses the camera only when you take a picture in the app. It does not scan your photo library.

3.11 What we do not collect

• We do not collect your location outside an active walk.
• We do not access your contacts or microphone.
• We do not collect payment card details.

4. Why we process it

Purpose	Data	Legal basis (LGPD / GDPR)
Provide the service: store, sync and share your pets' records	Account, pet profiles, records, photos, documents, family memberships	Performance of a contract
Record walks on a map	Location during an active walk	Consent (iOS location permission)
Help a lost pet get home	What you chose to show on the lost-pet page	Consent (you turn it on)
Unlock the No ads purchase	Purchase status	Performance of a contract
Send the notifications you opted into	Push token, time zone, language, opt-ins	Consent
Understand product usage and fix crashes	Anonymous usage events, crash reports	Legitimate interest
Support the free version with advertising	Advertising identifier, ad interactions	Consent, where required

We use your pets' records, photos, documents and walk routes only to provide the app's features to you and the people you invite — never for advertising.

5. Who we share it with

We do not sell personal data. We share it only with the providers that make the app work and with the people you choose:

• Supabase — hosts our database, file storage and authentication, in the United States. Processes your data on our instructions.
• Google — Sign in with Google, Firebase Analytics, Firebase Crashlytics, Firebase Cloud Messaging and AdMob, as described above.
• Apple — provides Sign in with Apple, in-app purchases and push notification delivery.
• The family members and pet sitters you invite — they see the pets they were invited to.
• Whoever has your pet's QR code — only what you chose to show on the lost-pet page.

6. International transfers

Our database and file storage are hosted in the United States, and our other providers may operate infrastructure outside your country. Where required, transfers rely on the European Commission's standard contractual clauses or an equivalent mechanism offered by the provider.

7. How long we keep it

Account and pet data are kept while your account exists. Data kept in guest mode lives on your device until you delete the app. The public copy of a pet's photo exists only while its lost-pet QR code is on. Anonymous usage events are retained in aggregate; because they are not linked to your identity, they cannot be isolated and removed per person. Crash reports are kept by Firebase for a limited period (90 days).

8. Your rights and deleting your data

Depending on where you live, you may have the right to access, correct, export, restrict or delete your personal data, to object to processing, and to withdraw consent at any time. To exercise any of these, write to info@kahatrainer.com from the address associated with your account. We answer within 30 days.

Deleting your account. In the app, go to Profile → Delete Account. This removes your account and the pets you own — with all their records, photos, documents and lost-pet pages — immediately and permanently, also for the family members you shared them with. For pets owned by someone else, your access is removed; the records you added stay with the owner, without your name. The Sign in with Apple link is revoked.

Guest mode. To erase data kept without an account, delete the app from your phone.

If you are in the European Economic Area or the United Kingdom, you also have the right to lodge a complaint with your local data protection authority.

Practical controls — location, family, lost-pet page, tracking, ad consent, notifications — are listed on Your Privacy Choices.

9. Security

Data in transit is encrypted with TLS. Access to the database is restricted by row-level security rules, so an account can only read the pets it owns or was invited to. Photos and documents are kept in private storage; the only public file is the reduced photo of a pet whose lost-pet QR code is on.

10. Children

Petlu is not directed at children under 13 (or under the minimum age set by your country's law, where it is higher). We do not knowingly collect data from them. If you believe a child has given us data, write to us and we will delete it.

11. Not veterinary advice

Petlu is a log and organizer with general information. It does not replace your veterinarian. If your pet shows signs of an emergency, contact a veterinarian right away.

12. Changes to this policy

If we change this policy, we will update the date at the top and, for changes that matter, tell you in the app before they take effect.

13. Contact

CloudArbitration LTDA
info@kahatrainer.com
kahatrainer.com/pets