เอกสารนี้มีเฉพาะฉบับภาษาอังกฤษในขณะนี้ ฉบับภาษาไทยกำลังจัดทำ
Privacy Policy
This is our first published version (0.9), still under review. We will announce changes in the Service before they take effect.
The Petsonal operator ("we", "us") runs Petsonal — the website petsonal.app and the iOS and Android apps (the "Service"). This policy explains what personal information we process and how. Section 11 has additional information for users in the United States.
- Effective date: November 12, 2026
- Version: 0.9
1. Information we process and why
Petsonal compares the allergens a dog owner enters with the ingredients listed on dog food and treat labels and shows where they overlap. We process only what we need for that, and we will tell you in advance (and ask for consent where required) before using information for a new purpose.
1.1 Members (dog owners)
| Area | Information | Purpose | Legal basis (Korea) |
|---|---|---|---|
| Sign-up and sign-in | Email address, your Apple or Google account identifier, user ID | Identifying you, sign-in, account deletion | Performance of our contract with you |
| Name and profile photo URL, if Apple or Google provides them at sign-in | Not used by the Service (stored by the sign-in system with your account) | Performance of contract | |
| Finishing sign-up | Country (US or Korea), language, the time you confirmed you are 18 or older, a record of which Terms/Privacy Policy version we showed you | Default product region, age confirmation, notice records | Performance of contract |
| Dogs | Name, breed, birth month, weight, photo — all optional | Showing the profile, calculating age | Performance of contract |
| Search settings: countries where you buy, allergens to leave out | Searching again with the same settings for each dog | Performance of contract | |
| Allergens and their evidence type (elimination diet, blood test, vet opinion, saliva/hair test, owner suspicion), grade, reaction type | Comparing with label ingredients (the core feature) | Performance of contract | |
| Result records | Each result we showed you: which product or scan, the allergens entered at the time, the rating, overlapping ingredients, dictionary/method/label versions, which screen, and when | Recent results; re-checking the same result (corrections, disputes) | Performance of contract |
| Treat scans | Barcode, ingredient text read by your device, the text you confirmed or edited | Calculating results, recent results | Performance of contract |
| Add requests | Text of breed or allergen add requests | Improving our lists | Performance of contract |
| Sending product info (optional) | Up to 3 photos of the ingredient label, barcode, brand and product name, the ingredient text you confirmed | Reviewing product information and building product data | Performance of contract at your request |
| Optional choices | Consent to promotional notifications and to night-time notifications, requests to opt out of sale/sharing, and their history | Managing your choices — we do not send promotional notifications today | Consent; your request |
| Generated automatically | IP address, access time, browser/device information (User-Agent), sign-in records | Keeping you signed in, security and abuse prevention, troubleshooting | Performance of contract; our legitimate interests |
Sign in with Apple in the app requests your email address only. If you choose Apple's "Hide My Email", we receive a relay address created by Apple.
1.2 People who send a correction request (no sign-in needed)
Requester type (manufacturer, importer, user), the product, your message, and your email address (optional, for our reply). Purpose: correcting label information and replying to you.
1.3 Business account contacts
Company name, type (manufacturer or importer), country, business registration number (EIN in the US), website, contact name, email and phone (optional), the brands you manage, your message, and the contact person's sign-in account (as in 1.1). Purpose: verifying and approving the business, contacting you, and reviewing the product information you send.
1.4 What we do not process
- Location. The app removes location and device data (EXIF) from photos on your device before sending them. Dog photos uploaded on the web are re-encoded by our server so no photo metadata is kept.
- Contacts, payment or financial information, advertising IDs, search queries. We do not use analytics, advertising, or crash-reporting tools.
- Camera images. Barcode reading and ingredient text recognition happen on your device. Photos leave your device only when you choose "Send product info". Google ML Kit, used for on-device text and barcode recognition, may send API performance and usage metrics to Google to improve the feature.
- Children. Only people 18 or older can sign up.
2. How long we keep information and how we delete it
We delete information without delay once its purpose is fulfilled. When you delete your account, everything kept "until you delete your account" is deleted right away.
| Information | Retention |
|---|---|
| Account, profile, dogs and allergens, result records, scans, history of optional choices, add requests | Until you delete your account. If you delete a dog, its results and scans stay (unlinked from the dog) until you delete your account |
| Dog photos | Until you remove the photo, delete the dog, or delete your account |
| Sent product info — photos | Until you delete your account (if we set an earlier deletion period after review, we will add it here) |
| Sent product info — not approved | Until you delete your account |
| Sent product info — ingredient text, barcode and product name that became product data | Kept as product data. When you delete your account we remove the link to you, so we can no longer tell who sent it |
| Correction requests (email and message) | Kept after the request is closed. We will add a retention period here once set; you can ask us to delete it at any time by email |
| Business applications and contact information | We will add a retention period here once set; you can ask us to delete it at any time by email |
| Sign-in records (email, time, IP) | For the retention period of our sign-in provider (Supabase); if we set a shorter period, we will add it here |
| Server access logs | For each service provider's log retention period (Section 5) |
| Backups | For our database provider's (Supabase) backup retention period; older backups are deleted on a rolling basis |
- Admin records. Records of how our staff handled requests, submissions, corrections and business applications (who, when, which status) are kept for security and dispute handling (they do not include what users sent). These records do not contain what you wrote or your contact details.
- Legal holds. If a law requires us to keep information longer, we keep it separately for that period only.
- Deletion method. We delete database records and stored files so they cannot be recovered. We do not keep paper records.
3. Sharing with third parties
We do not provide your personal information to third parties, except where a law specifically requires it or an authority requests it through legal process.
If you follow a store link (an affiliate link) to a retailer, the retailer's privacy policy applies from then on. We do not record who clicks a link.
4. Service providers and international transfers
The Service runs on cloud infrastructure in the United States, so information about users in Korea is also stored and processed in the United States by these service providers. For users in Korea, this is a transfer for storage and processing that is necessary to provide the Service, disclosed in this policy under Article 28-8(1)(3) of the Personal Information Protection Act.
| Recipient (contact) | Country and location | Information | Purpose | When and how | Retention |
|---|---|---|---|---|---|
| Supabase, Inc. | United States — Oregon (Amazon Web Services US West) | All information in Section 1 | Database, sign-in, file storage | Whenever you use the Service, over encrypted connections | The retention periods in Section 2, or until our contract with them ends |
| Render Services, Inc. | United States — Oregon | Sign-in verification data, ingredient text to analyze, account deletion requests, access logs | Running our ingredient analysis and account deletion server | When you use those features, over encrypted connections | Not stored after processing; access logs for the provider's retention period |
| Vercel Inc. | United States (servers in Oregon; traffic passes through a global delivery network) | Data exchanged while you use the website, cookies, access logs | Hosting the website | When you use the website, over encrypted connections | Not stored after processing; access logs for the provider's retention period |
- How to refuse and what happens. If you do not want your information transferred, you can choose not to sign up, or delete your account at any time (Section 5). Because the whole Service runs in the United States, you cannot use it without the transfer.
- Sign-in providers. Sign in with Apple and Google Sign-In are services you use directly, under Apple's and Google's own privacy policies. If you signed up with Apple and delete your account, we ask Apple to revoke the sign-in connection (token revocation).
- We operate the Service from the Republic of Korea, and our staff access the providers' systems from Korea to run it.
5. Your rights and how to use them
You can ask at any time to access, correct, or delete your information, or to stop processing, and you can withdraw consent. Most of this you can do yourself in the Service.
- Access and copy. See your information in the app and on the web. "Export my data" on the account page gives you one file (JSON) with your profile, dogs, allergens, choices, scans and result records.
- Correct. Edit your dogs, allergens, country and language yourself.
- Delete. Delete dogs, allergens and photos yourself. Deleting your account (app Settings → Delete account, or https://petsonal.app/en/account/delete) deletes everything as described in Section 2.
- Withdraw consent / stop processing. Turn optional choices off on your account page at any time; the change applies immediately.
- Anything else. Email 1onestepenglish@gmail.com. We will respond within 10 days of receiving your request. If you sent a correction request without an account, write from the email address you gave us. A legal representative or someone you authorize can make a request with proof of authority.
- If a law prevents us from doing what you ask, we will tell you why.
6. Cookies and similar technologies
The website uses only these cookies. We use no advertising or analytics cookies.
| Cookie | Purpose | Duration |
|---|---|---|
sb-…-auth-token |
Keeping you signed in | Until you sign out or the session expires |
sb-…-auth-token-code-verifier |
Verifying the sign-in flow | Deleted once sign-in completes |
NEXT_LOCALE |
Remembering your language — set only when it differs from your browser language | Until you close the browser |
- You can block cookies in your browser settings; features that need sign-in will then not work.
- The app stores your sign-in session, language, and whether you have seen intro screens on your device. They are removed when you uninstall the app.
- We do not collect behavioral data for targeted advertising.
7. Security measures
- Organizational. Separate admin roles (super admin, data editor, moderator) with only the access each needs; records of admin actions and views.
- Technical. Encryption in transit (HTTPS) for all traffic; access control on every data table (row-level security, so you see only your own data); mandatory two-step verification (authenticator app) for admins; a stated reason and a log entry whenever an admin views user information; masked email addresses in admin screens; server secret keys kept only on servers; removal of photo location data; dog photos and submitted photos stored in private storage (admins cannot see dog photos); encryption at rest provided by our service providers.
- Physical. Physical security of our service providers' data centers.
- If we learn of a breach involving your personal information, we will notify you within 72 hours and report it as required by law.
8. Privacy officer
Our privacy officer oversees how we handle personal information and handles inquiries, complaints, remedies and access requests.
- Name and title: the Petsonal operator (privacy officer)
- Contact: email 1onestepenglish@gmail.com
9. Remedies (users in Korea)
You can report or seek advice about privacy violations from:
- Personal Information Dispute Mediation Committee: 1833-6972, www.kopico.go.kr
- Personal Information Infringement Report Center (KISA): 118, privacy.kisa.or.kr
- Supreme Prosecutors' Office: 1301, www.spo.go.kr
- Korean National Police Agency: 182, ecrm.police.go.kr
10. Changes to this policy
We will announce changes in the Service at least 7 days before they take effect, and at least 30 days before for important changes to your rights (such as new categories of information or new purposes), asking for consent again where required. Previous versions stay available in the Service. The app and website record which version we showed you.
11. Notice for U.S. users
This section applies to users who live in the United States.
- Categories we collect. Identifiers (email, account ID, IP address); internet activity (result records, sign-in records); photos (dog photos and label photos — optional); information you enter (dog details, allergens, scan text, requests). We do not collect precise geolocation, payment information, or sensitive personal information.
- Sources. You, your device, and Apple or Google when you sign in.
- Sale and sharing. We do not sell your personal information or share it for cross-context behavioral advertising, and have not done so in the past 12 months. We disclose it only to our service providers (Section 4) to run the Service. We do not share personal information with third parties for their direct marketing.
- Your rights. Whatever state you live in, you can access, get a copy of, correct, and delete your information, and opt out of sale, sharing and targeted advertising. We will not discriminate against you for using these rights. Use them as described in Section 5; we verify requests through your signed-in account. An authorized agent may make a request with your written permission.
- Global Privacy Control (GPC). If your browser sends a GPC signal, we treat requests from that browser as an opt-out of sale and sharing. When signed in, you can also record the opt-out on your account (the "Do Not Sell or Share My Personal Information" page).
- Do Not Track. We do not track you across other websites, so we do not respond differently to browser Do Not Track signals.
- Children. You must be 18 or older to sign up. We do not knowingly collect personal information from children under 13.
- Retention. As in Section 2.
- Contact. 1onestepenglish@gmail.com
This policy takes effect on November 12, 2026.