Privacy Policy

1. Who we are

MeetMyPets is operated by XLU Technologies Private Limited, a company incorporated in India (CIN U62090TZ2026PTC039365), with its registered office at 2nd floor, 178, A, Ramachandra Rd, R.S. Puram, Coimbatore, Tamil Nadu, 641002, India.

For the purposes of the Digital Personal Data Protection Act, 2023 ("DPDP Act") we are the Data Fiduciary. Where the EU or UK GDPR applies, we are the Data Controller. Where the CCPA/CPRA applies, we are the Business.

You can reach us about anything in this policy at hello@meetmypets.app.

2. Who this applies to

MeetMyPets serves three distinct groups, and the data we hold differs materially between them. Read the part that applies to you.

Pet Owners — you create pet profiles, use proximity-based discovery and matching, and may submit vaccination records and identity documents for verification.
Pet Enthusiasts — you take part in community feeds, groups and events without creating a pet profile. You are not asked for vaccination or pet records.
Pet Businesses — vets, groomers, trainers, boarding and retail. You submit business and professional credentials for a verified listing, and your listing is shown to nearby users.

This policy also covers visitors to meetmypets.app who join the waitlist without creating an account.

3. What we collect

Information you give us

Account details — name, email address and/or mobile number, password credentials, and profile photo.
Pet profiles — species, breed, name, age, sex, neuter status, temperament notes, photographs, and the intent you set for matching (friendship, playdate or breeding).
Vaccination records — documents you upload for verification, and the data extracted from them (vaccine type, date administered, validity period).
Identity documents — a government-issued identity document, submitted only for owner verification.
Business credentials — registration details, professional qualifications, service categories and operating address, for Pet Business accounts.
Community content — posts, images, comments, group memberships, event responses, and messages exchanged after a match.
Waitlist submissions — an email address or mobile number, and which part of the site you submitted it from.

Information collected automatically

Location — your device's location, used to calculate which pets, people and businesses fall inside your chosen search radius. Other users are only ever shown a coarse proximity band. See the location section below.
Device and technical data — device model, operating system, app version, language, and crash diagnostics.
Usage data — features used, screens viewed, and interactions such as matches made or events attended.
Log data — IP address, access times and referring pages.

We do not knowingly collect special category or sensitive personal data beyond the identity and health-adjacent documents described above, and we do not ask for financial account details on the marketing site.

4. How we use your data

To create and maintain your account and pet profiles.
To power discovery and matching, including showing you nearby pets, people and businesses within a proximity band.
To verify owners and pets, and to issue, maintain and withdraw verification badges.
To operate community features — feeds, groups, events and post-match messaging.
To display verified business listings to users in the surrounding area.
To keep the platform safe: detecting fraud, abuse, animal welfare concerns and prohibited conduct.
To communicate with you about your account, safety notices and material changes to this policy.
To improve the product through aggregated analytics.
To comply with legal obligations and respond to lawful requests.

We do not sell personal data, and we do not share it for cross-context behavioural advertising as those terms are defined under the CCPA/CPRA.

5. Consent and legal bases

Under the DPDP Act we process personal data on the basis of your consent, given at the point of collection through a clear notice, or where a Legitimate Use under the Act applies — for example, complying with a legal obligation.

Where the GDPR applies, our legal bases are: performance of a contract (operating your account and matching), consent (verification documents, precise location access, marketing messages), legitimate interests (safety, fraud prevention, product improvement), and legal obligation.

You may withdraw consent at any time, and withdrawing is as easy as giving it. Withdrawal does not affect processing already carried out, and some features — notably verified matching — cannot function without the underlying consent.

6. Location privacy

This is the part most people care about, so it is stated plainly: we never reveal your precise location to another user.

Discovery works on coarse proximity bands. Another user sees a description such as “within 1 km”, never coordinates, never a pin on a map, and never an address.
Your exact coordinates are not published to other users, and are not included in any profile, match or listing shown to them.
You choose where to actually meet, in conversation, after both sides have matched.
You can revoke location permission in your device settings at any time. Discovery will stop working; the rest of the community features continue.
Business listings show a proximity band to the user, derived from the business's stated operating address.

Your device shares its location with our servers so that we can calculate which pets, people and businesses fall inside the radius you choose. Those coordinates are stored against your profile, encrypted at rest, and used only for proximity calculation and safety enforcement. They are never returned to another user, never shown on a map, and never included in a profile, match or listing. Other users see only a coarse band such as “within 1 km”. Your coordinates are retained while your account is active and are deleted when your account is deleted. You can revoke location permission at any time in your device settings — discovery will stop working, and the rest of the community features continue.

7. Verification data

Verification exists so that a badge means something. It involves the two most sensitive categories of data we handle, and both are treated accordingly.

Identity documents are used solely to confirm that a real person stands behind a profile. They are reviewed, not published, and are never shown to other users.
Vaccination records are read to extract vaccine type and validity, and matched against the pet on the profile. Other users see only the resulting badge, never the underlying document.
A badge lapses automatically when the vaccination it represents expires, so it always reflects current records.
Verification decisions can be contested — contact us and we will re-review.

Identity documents are deleted within 30 days of verification completing. The document image itself is not kept. The verification outcome — verified or not — is retained for the life of the account.

Vaccination document text extraction is performed by Google Document AI (Google LLC). Identity document verification is performed by Digio (Decentro Technologies Private Limited). Both act as processors under contract and may not use the documents for their own purposes.

We share personal data only in the circumstances below, and only to the extent necessary.

With other users — your profile, pet profiles, community content and proximity band are visible according to the settings you choose.
With service providers acting on our instructions, under contract: Supabase (database, authentication and real-time messaging), Cloudflare (media storage, CDN and video delivery), Stream (chat infrastructure), Google Document AI (document text extraction), Digio (identity verification), Google Firebase Cloud Messaging and OneSignal (push notifications), Sentry (error monitoring), PostHog (product analytics), Railway (application hosting), Google (Apps Script and Sheets, for waitlist submissions made on meetmypets.app), and Resend (waitlist confirmation email).
For legal reasons — where required by law, court order, or a valid request from a public authority.
To protect people or animals — where we reasonably believe disclosure is necessary to prevent harm, including credible animal welfare concerns.
In a corporate transaction — if the business is acquired or merged, subject to this policy continuing to apply.

9. Children's data

Under the DPDP Act, anyone below eighteen years of age is a child. This is stricter than many other regimes and we apply the Indian standard.

MeetMyPets is intended for users aged 18 and over.
We do not knowingly process a child's personal data without verifiable consent from a parent or lawful guardian.
We do not undertake tracking or behavioural advertising directed at children, and we do not serve them targeted advertising.
If we learn that we hold a child's data without the required consent, we will delete it.

If you believe a child has provided us with personal data, contact hello@meetmypets.app and we will act promptly.

10. How long we keep data

We keep personal data only as long as it serves the purpose it was collected for, or as long as the law requires.

Account and profile data is deleted within 30 days of account closure. Certain records may be retained for up to seven years where Indian law requires it, for example financial and tax records.
Identity documents are deleted within 30 days of verification completing. Vaccination records are retained while the associated pet profile is active, and are deleted within 30 days of that profile or the account being removed.
Posts, comments, group contributions and event responses are deleted within 30 days of account closure. Messages you sent may remain visible to the recipient in their own conversation history.
Server logs and diagnostic data are retained for 90 days.
Waitlist submissions — until launch communications conclude, or until you ask us to remove them.

When a retention period ends we delete the data or irreversibly anonymise it.

You can delete your account at any time from Settings in the app, or by writing to hello@meetmypets.app. See meetmypets.app/delete-account/ for details.

11. Security

We apply reasonable technical and organisational safeguards appropriate to the sensitivity of the data, including encryption in transit, access controls limiting who can view verification documents, and logging of administrative access.

Data is encrypted in transit using TLS 1.2 or higher, and encrypted at rest by our infrastructure providers. Access to verification documents is restricted to authorised personnel, and every administrative access is logged. We use Sentry for application error monitoring.

No system is perfectly secure. In the event of a personal data breach we will notify the Data Protection Board of India and affected users as required by the DPDP Act, and supervisory authorities and data subjects where the GDPR applies.

12. Your rights

Under the DPDP Act (India)

Access — obtain a summary of the personal data we process about you and the processing activities undertaken.
Correction and erasure — have inaccurate or misleading data corrected, completed, updated, or erased.
Grievance redressal — a readily available means of raising a complaint, described below.
Nomination — nominate another individual to exercise your rights in the event of death or incapacity.

Under the GDPR

Access, rectification and erasure.
Restriction of processing, and objection to processing based on legitimate interests.
Data portability in a structured, machine-readable format.
The right to lodge a complaint with your supervisory authority.

Under the CCPA/CPRA (California)

The right to know what personal information is collected, used and disclosed.
The right to delete, and to correct inaccurate personal information.
The right to opt out of sale or sharing — note that we do not sell or share personal information as those terms are defined.
The right not to be discriminated against for exercising these rights.

To exercise any of these, write to hello@meetmypets.app. We will verify your identity before acting, and respond within the period the applicable law requires.

13. Grievance redressal

The DPDP Act and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 require us to publish a grievance contact and to act on complaints within defined timelines.

Grievance Officer: Pranesh S
Email: hello@meetmypets.app
Address: 2nd floor, 178, A, Ramachandra Rd, R.S. Puram, Coimbatore, Tamil Nadu, 641002, India
We acknowledge grievances within 48 hours and aim to resolve them within 15 days, as required under the DPDP Act.

If you are not satisfied with our response, you may escalate to the Data Protection Board of India.

14. International transfers

We operate from India and process data there. Some service providers may process data outside your country.

Data may be processed by our service providers in the United States (Google, Cloudflare, Stream, Sentry, PostHog, Firebase, OneSignal, Resend) and in the European Union. Where personal data leaves India we rely on Standard Contractual Clauses or an equivalent safeguard for GDPR purposes, and on the lawful transfer mechanisms notified under the DPDP Act.

15. Cookies and similar technologies

meetmypets.app is a static marketing site. It sets no advertising or cross-site tracking cookies.

meetmypets.app runs no analytics or session-recording scripts. The mobile applications use Sentry for crash reporting and PostHog for product analytics, configured to anonymise IP addresses and not to share data with advertising networks.

16. Changes to this policy

We may update this policy as the product and the law evolve. Where a change materially affects your rights we will give notice in the app or by email before it takes effect, and the date at the top of this page will always reflect the current version.

17. Contact

XLU Technologies Private Limited, 2nd floor, 178, A, Ramachandra Rd, R.S. Puram, Coimbatore, Tamil Nadu, 641002, India. Email hello@meetmypets.app.