Privacy policy
Last updated: 31 October 2026
Draft. Not legal advice; to be reviewed by a lawyer before launch.
Who we are
lukypet is the app and this website. lukypet is not yet a registered company: until it is, it is run by its founder as a private person, who decides how your data is used (the “controller” under Moldova’s Law 195/2024 on personal data protection). A company will take over before the public launch; we’ll update this page and tell you in the app.
For anything about your data, write to hello@lukypet.com. We have no data protection officer: the law doesn’t require one for what we do.
What this policy covers
The lukypet app (the test builds through Apple TestFlight and the Android test build), the server it talks to, and this website, lukypet.com.
The app is in testing. Testers’ data may be wiped before the public launch, and it isn’t backed up. Deleting your account in the app deletes it straight away.
What we keep, why and for how long
The legal basis is one of two (Law 195/2024, art. 6(1)). Contract: we need it to give you the app you asked for. Legitimate interest: we need it to keep the service safe and working, and we’ve weighed that against your interests.
| What | Why | Basis | How long |
|---|---|---|---|
| Your phone number | To sign you in with a code | Contract | Until you delete your account |
| Sign-in codes | To sign you in | Contract | Valid for 5 minutes; deleted about 2 days after they expire |
| Sign-in events: your number, whether a code was sent, used or wrong, and when | Limits that stop abuse and the cost of text messages | Legitimate interest | Deleted after about 3 days |
| Sessions: each device you’re signed in on, its network address and the app’s or browser’s name | Keeping you signed in; spotting misuse | Contract; legitimate interest | Until you sign out on that device or delete your account |
| If you sign in with Apple or Google (coming soon): the account’s ID, the email it gives us (possibly Apple’s private relay address) and your first name | Signing you in that way; showing which account is linked | Contract | Until you remove that way of signing in or delete your account. We never email you |
| Your household and its members (family sharing, coming soon) | Sharing pets with your family | Contract | Until you leave or delete it |
| Your pets: name, species, sex, age or birth date, breed or kind, other details you add, weight log, care routine, reminders, health records (date, clinic, product, notes) | What the app is for | Contract | Until you delete the pet or your account |
| Pet photos | Shown on the pet’s page, only to your household | Contract | Location and other hidden data are removed on upload; deleted with the pet or your account |
| Your settings: language, time zone, your answer to “allow notifications?” | Showing the app in your language and notifying you at the right time | Contract | Until you delete your account |
| Push token and phone type | Sending you notifications | Contract | Until you sign out on that phone or the token stops working |
| Your inbox and the daily notification’s text | Showing you what was sent | Contract | Inbox: entries older than 90 days are removed when you next get a notification; the daily notification’s text: until you delete your account |
| Error reports (only when switched on) | Finding and fixing faults | Legitimate interest | At most 90 days at Sentry. A report can carry the internal account ID (a random code), but no phone number, name or token |
| The server’s log (testing only) | While testing, sign-in codes aren’t sent by text: they’re written to the server’s log, where the founder reads them for testers | Legitimate interest | As long as the server keeps its log |
| Emails you send us: your address, the name it shows and what you write | Answering you | Legitimate interest | Until the conversation is over, then deleted within 12 months |
| Visits to this website | Delivering the page securely | Legitimate interest | We keep nothing. Cloudflare handles each request, including your network address, to deliver it |
Pet details aren’t personal data in themselves, but they sit in your account, so we treat them as yours.
A phone number (or, soon, an Apple or Google account) is needed to use the app; everything about your pets is up to you. We make no decisions about you by machine alone, and we don’t profile you.
What we don’t collect
- Your location. When the vet search arrives, it will ask first, use your location only to sort clinics by distance, and not store it.
- Your contacts, photos other than the ones you choose, or anything else on your phone.
- Advertising IDs. There are no ads and no trackers.
- Usage analytics: none today. Before any, the app will ask you, and saying no will be as easy as saying yes.
- Cookies on this website: we set none, and the site loads nothing from anyone else.
Who else handles your data
Only these, each for one job, under a contract with us or the provider’s own data protection terms. We don’t sell your data or share it for advertising.
- Hetzner Online GmbH: the app’s data lives on a server rented in Germany from Hetzner Online GmbH, run for us by a contractor who acts only on our instructions. The database, pet photos and the server’s log are there.
- Cloudflare, Inc. (USA, worldwide network): runs lukypet.com’s domain, protects the app’s server and delivers this website. Everything between the app and the server passes through it: encrypted on the way, Cloudflare decrypts it to filter and forward it, then sends it on encrypted.
- Expo (650 Industries, Inc.) (USA): relays notifications to Apple and Google. It receives your phone’s push token and the notification’s text, which can include a pet’s name.
- Apple (APNs) · Google (Firebase Cloud Messaging): deliver notifications to your phone.
- Apple TestFlight: if you test the app on an iPhone, Apple’s TestFlight terms apply. Apple shares with us your name and email as a tester, and any feedback or crash reports you choose to send.
- Apple · Google (sign-in, coming soon): only if you choose to sign in with them. Your Apple or Google account itself follows their own terms.
- Sentry (Functional Software, Inc.) (USA; data kept in its EU region, in Frankfurt): error reports, when switched on. A report can carry the internal account ID, but no phone number, name or token.
- Apple (iCloud Mail) (USA): receives and stores the emails you send us at hello@lukypet.com.
- Text messages: no provider yet. We’ll name it here before it’s used.
We give data to an authority only if the law obliges us to.
Data sent outside Moldova
Our server is in Germany, in the European Economic Area, where Moldovan law lets data go without further conditions (Law 195/2024, art. 44(2)).
Cloudflare, Expo, Apple, Google and Sentry are US companies. Where your data reaches them outside the European Economic Area, it’s covered by the European Commission’s standard contractual clauses in their data protection terms (art. 46(2)(c)). Write to hello@lukypet.com for a copy.
Your rights
You can ask us to:
- show you the data we keep about you, and give you a copy;
- correct it;
- delete it;
- limit what we do with it, or object to a use based on our legitimate interest;
- give it to you in a machine-readable form, to take elsewhere;
- stop a use you agreed to, whenever you like (what was done before stays lawful).
You can do most of it yourself in the app: change your pets’ details, or delete your account (Profile → Delete account), which deletes your account, your household and everything in it at once, photos included. A data export is coming. For anything else, write to hello@lukypet.com. We answer within one month.
If you think we’ve handled your data wrongly, please tell us first. You can also complain to the National Centre for Personal Data Protection, str. Serghei Lazo 48, MD-2004 Chișinău, (022) 820 801, centru@datepersonale.md, datepersonale.md, or go to court.
Children
The app is for people aged 14 and over. A younger child can share in a pet’s care through a parent’s or guardian’s account. If you think a child under 14 has an account, write to us and we’ll delete it.
Keeping it safe
- Every connection is encrypted.
- Only your household sees your pets and their photos.
- Photos lose their location and other hidden data when you upload them.
- Error reports have phone numbers, tokens and codes removed before they leave.
- The server sits behind Cloudflare’s protection.
If a breach puts your data at risk, we’ll tell the National Centre for Personal Data Protection within 72 hours and tell you without undue delay.
Changes to this policy
The date at the top shows the last change. If a change matters for you, we’ll also tell you in the app before it takes effect.
Languages
This policy is in Romanian, Russian and English. If they differ, the Romanian text prevails.