Skip to content

Privacy

Last updated: 5 October 2026.

Location, which is what matters most here

We store each pet's precise location encrypted, and it is never sent to any client: not to the website, not to the mobile app, not through the API. What leaves the server is a rounded distance («about 3 km away») and a point shifted by between 500 and 1,500 metres, used to draw a circle on the map. The shift is fixed per pet, so it cannot be undone by averaging several queries.

Lost pet alerts are the exception. There we store the exact point where the pet was lost, because searching an area thirty times larger is useless, and that point is visible to anyone who sees the alert and on the poster you can share outside the app, together with the contact phone number if you choose to add it. It stops being shown as soon as you close the alert.

To find places, meet-ups or alerts near you, the app sends your current location with the request and we do not store it.

Photos are re-encoded on upload and the metadata is discarded in that step. If your phone embedded the coordinates of your yard in a photo of your dog, those coordinates never get published.

What we store

  • Your account: email, display name, date of birth (to check that you are 18), country, language and time zone. Your password is stored as a hash that cannot be reversed; if you sign in with Google, we store the identifier Google gives for your account.
  • Your phone number, only if you choose to verify it.
  • Your pets: name, species, breed, sex, age, size, energy, temperament, photos and approximate area, and if you add them, their health record and pedigree.
  • Identity verification, if you request it: a photo of your ID document and a selfie. Only a moderator sees them and we delete them as soon as the request is resolved, approved or not. We keep the decision, who made it and when.
  • What you write and post: messages, community posts and comments, events, place reviews and the reports you send.
  • How you use PetMatch: your swipes and matches, which order the feed, and some usage events linked to your account —which sign-up step you are on, when the feed loads, when you see the Premium screen— that we use to measure and improve the product.
  • Your device and sessions: a device identifier, its model and version, the token used to send you notifications and a hash of your IP address (not the IP itself), so you can see and close sessions you do not recognise.
  • Your purchases: which plan you have, when it started and its status. We do not store card details: payments are processed by Google Play or PayPal.

Who it is shared with

We do not sell personal data, we do not show ads and we do not use your data for advertising. Nor do we use your conversations to train models. Only the services needed to operate are involved:

  • Brevo, to send you email: your address and the content of the email.
  • Google Firebase Cloud Messaging, for notifications: your device token and the text of the notification.
  • Google Play and PayPal, to charge the subscription: an identifier of your account that does not reveal who you are.
  • Google, if you choose to sign in with your Google account.

Other users see your display name, your pets and their photos, the approximate distance and what you post or write to them. Never your email, your phone number (except in a lost pet alert, if you add it) or your address.

How long

  • Messages: 24 months, or until your account is deleted.
  • Swipes: 90 days. Usage events: 12 months.
  • ID document and selfie: until the request is resolved.
  • Everything else, for as long as you have the account.

Security

Everything travels encrypted over HTTPS. Pets' precise locations are stored encrypted, passwords and verification codes only as hashes, and ID documents in private storage that is never served publicly.

Your rights

  • Access and export. You can download your profile, your pets and your sessions as a JSON file from your settings. For a full copy, write to us.
  • Rectification. Every profile field is editable.
  • Erasure. You can delete your account from the app or the website; we explain how, and what is deleted, in delete your account.
  • Email. You can turn off non-essential email from your settings or with the link in every email.

Who is responsible

The controller of your data is DConext, which operates PetMatch. You can write to us about anything related to your data at petmatch@dconext.com.

Why we are allowed to process it

  • To provide the service you ask for when you create an account: profile, pets, feed, matches, messages, meet-ups and subscription.
  • Legitimate interest in keeping the service safe: moderation, preventing scams and abuse, and account security.
  • Your consent, which you can withdraw at any time: push notifications, non-essential emails, the precise location of a lost-pet alert, and identity verification.
  • Legal obligation, for payment records.

Where it is stored

The services we use to operate —Google, PayPal and Brevo— process data in the United States and the European Union, so your data may leave your country. When it leaves the European Economic Area it does so with the safeguards the law requires, such as the European Commission's standard contractual clauses or the EU-US Data Privacy Framework.

Depending on where you live

The rights in the previous section apply to everyone. In addition, depending on your country:

  • Spain and the European Union (GDPR and Spanish Organic Law 3/2018). You also have the right to restrict processing, to object to it and to data portability. If you think we are not handling your data properly, you can complain to the Spanish Data Protection Agency (aepd.es) or your local authority.
  • United States (including the California privacy law, CCPA/CPRA). We do not sell your personal data or share it for behavioural advertising. You can find out what data we hold, ask us to correct or delete it, and exercising these rights will not get you treated any differently.
  • Colombia (Law 1581 of 2012). By signing up you authorise us to process your data as described here; you can know, update and correct it, revoke that authorisation, and complain to the Superintendence of Industry and Commerce.
  • Argentina (Law 25,326). You can access your data free of charge at intervals of no less than six months, unless there is a legitimate interest, and ask for it to be corrected or deleted. The Agency for Access to Public Information, as the supervisory body of Law 25,326, has the power to handle complaints from anyone whose rights are affected by a breach of the personal data protection rules.
  • Panama (Law 81 of 2019). You can exercise your rights of access, rectification, cancellation, objection and portability, and complain to the National Authority for Transparency and Access to Information.

To exercise any of them, write to the contact address. We answer within the period your country's law sets and, at most, within one month.

Minors

PetMatch is not aimed at anyone under 18: sign-up asks for your date of birth and does not let anyone younger continue. If we detect an account belonging to a minor, we delete it.

Contact

For anything about your data, write to petmatch@dconext.com.

Borrador pendiente de revisión legal. Este texto describe cómo funciona PetMatch y sirve de base para el documento definitivo, que debe revisar un profesional antes del lanzamiento.