Privacy Policy

1. Data controller

ZOIA is a product of Aven Labs di Daniel Matei (sole proprietorship), Sommariva del Bosco (CN), Italy · VAT 04209500042 · Tax code DNLMFL02H26I470S. To exercise your rights or for privacy requests: support@aven-labs.com or certified email mateidaniel@legalmail.it.

2. Data we process

• Account: email, name, profile photo, device ID for notifications.
• Pets: profile details (name, species, breed, sex, date of birth, microchip, pedigree, temperament), health data (weight, vaccinations, visits, treatments, antiparasitics), documents and photos.
• Location: used for Lost Pet SOS, walk tracking (including in the background while a walk is active), history of lost/found points, heat warnings and finding nearby places.
• Walks: route, distance, duration, steps.
• Family: sharing of pets and their data with the members you invite.
• Reviews and photos of places (public content), place memberships.
• Safety: reports, blocks and screenshot detection in chats.
• Support: the requests you send us.
• Sitter (optional): identity document and selfie for verification (KYC).
• Pro purchases: handled by Apple; we never receive your payment details.

3. Purposes and legal bases

We process data to provide the app's features — legal basis: performance of a contract (Art. 6(1)(b) GDPR). Location, camera, notifications and publishing reviews/photos are based on your consent (Art. 6(1)(a)), which you can withdraw at any time. Safety, abuse prevention and moderation rely on legitimate interest (Art. 6(1)(f)). Sitter verification documents are processed only with explicit consent and to meet our obligations. We do not sell your data and we do not carry out advertising profiling.

4. Who processes the data (processors and recipients)

Providers acting on our behalf: Supabase (database and authentication, EU — Frankfurt), Cloudflare R2 (photos and documents), Anthropic (AI assistant and analysis, USA), Resend (email), Expo/Apple (push notifications), Apple and RevenueCat (Pro subscription management). For the Services map we send anonymous queries to OpenStreetMap/Overpass; for heat warnings we send only coordinates to open-meteo.

Some information is visible to other users: the photo and details of a pet with an active SOS (to users within the radius), reviews and photos of places (public), and pets shared with your family.

5. Public content (reviews)

Reviews, ratings and photos you post about places are visible to other users together with your name. You can edit or delete them at any time; they may be hidden by moderation if they breach our guidelines.

6. Sitter service (marketplace)

If you apply as a sitter, for verification we collect: name, date of birth, address, tax code, document type and number, a photo of the document and a selfie. This data is stored privately, used only for manual identity verification and kept for as long as needed for that purpose (legal basis: compliance with obligations and legitimate interest in community safety). Applying is optional.

When you use the service as an owner or a sitter, during the relationship the data needed to care for the pet is processed and shared between the two parties: bookings (dates, service, notes, price), the private owner↔sitter chat messages, the care journal (meals, activities, treatments, notes and photos), the AI-generated behavioural profile, and the location during walks recorded by the sitter (visible to the owner). ZOIA acts as a technology intermediary: the service relationship is between owner and sitter. In-app payments, where available, will be handled by an external provider (we will not process card data).

7. AI assistant and features

Requests to the assistant and analysed photos (e.g. breed recognition, document reading) are sent to Anthropic solely to generate the response; they are not used to train models.

8. Payments

The Pro subscription is handled by Apple through the App Store (and RevenueCat solely to verify the purchase). We neither process nor store your card details. Pricing terms are set out in the Terms of Use.

9. Retention

Data is kept for as long as your account is active. Moderation data (reports, blocks, screenshots) is kept for up to 30 days. KYC documents are deleted after verification. When you delete your account, all data and files (including photos and documents) are permanently erased.

10. Transfers outside the EU

Some providers (e.g. Anthropic, Apple) are based in the USA: transfers take place with appropriate safeguards (standard contractual clauses).

11. Your rights (Arts. 15–22 GDPR)

Access, rectification, erasure, portability, restriction and objection. You can exercise them directly in the app, under Privacy & data, where you will find Export my data (a full copy in JSON, Art. 20 GDPR) and Delete account and data (permanent erasure, Art. 17 GDPR); or by writing to support@aven-labs.com. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).

12. Minimum age

ZOIA is intended for users aged 14 and over; if you are a minor you must have the consent of a parent or guardian.

13. Important notices

The assistant and AI features provide general information and do not replace veterinary advice. The SOS feature helps spread an alert but does not guarantee that your pet will be found; during an SOS your approximate location is shared with users within the radius you choose.