Legal & Privacy
Privacy Policy
1. What Data We Collect
Account Data (collected at signup):
- •Email address
- •Name (display name you provide)
- •City / location (as selected by you)
- •Authentication method (email or Google)
- •Account creation date
Pet Profile Data (collected during onboarding and profile setup):
- •Pet name and username
- •Pet photos (uploaded by you)
- •Breed, age, gender, vaccination status
- •Personality tags and bio
- •City of the pet
Content Data (collected when you use the platform):
- •Posts, captions, images you upload
- •Comments and replies you write
- •Likes and community memberships
- •Follow relationships between pet profiles
- •Post type tags and hashtags
Usage Data (collected automatically):
- •Pages visited and features used
- •Device type and browser type
- •IP address (used for security, not stored long-term)
- •Session timestamps
Communication Data:
- •Emails you send to our support address
- •In-app reports you submit
2. What Data We Do NOT Collect
- •Payment or financial information (no transactions in V1)
- •Precise GPS location (we collect city-level location only, selected by you)
- •Government identification documents
- •Biometric data
- •Data about children under 13 (users must be 18+ or have parental consent)
3. How We Use Your Data
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Creating and maintaining your account | Email, name, auth data | Contract performance |
| Displaying pet profiles and content | Pet data, photos, posts | Contract performance |
| Showing you relevant feed content | Community memberships, follows | Contract performance |
| Sending transactional emails | Email address | Contract performance |
| Sending notification emails | Email address, notification preferences | Legitimate interest + consent |
| Detecting and preventing abuse | Usage data, IP, reports | Legitimate interest |
| Improving the platform | Anonymised usage analytics (PostHog) | Legitimate interest |
| Error monitoring | Error logs (Sentry, anonymised) | Legitimate interest |
4. Third-Party Services We Use
| Service | Purpose | Data Shared | Policy Link |
|---|---|---|---|
| Supabase | Database, authentication, file storage | Account data, content, images | supabase.com |
| Vercel | Website hosting | IP address, request logs | vercel.com |
| Resend | Transactional email delivery | Email address, name | resend.com |
| PostHog | Usage analytics (anonymised) | Page views, feature usage | posthog.com |
| Sentry | Error tracking (anonymised) | Error logs | sentry.io |
| Google OAuth | Authentication (if Google login chosen) | Email, name | google.com |
We do not sell your data to any third party. We do not use your data for advertising on external platforms.
5. Data Storage & Security
- •All data is stored on Supabase servers (hosted on AWS infrastructure in your chosen region).
- •We use Row-Level Security (RLS) on all database tables — users can only access their own data.
- •All data is transmitted over HTTPS (TLS encryption).
- •Passwords are hashed using Supabase Auth's secure hashing (bcrypt).
- •Pet profile images are stored in Supabase Storage with access controls.
- •We do not store credit card or payment data (no transactions in V1).
How we secure your data
Furlo uses industry-standard encryption for data at rest and TLS for data in transit. In the event of a data breach affecting your personal data, we will notify affected users within 72 hours of becoming aware of the breach, as required by applicable law.
shield_person6. Your Rights Under DPDPA 2023
As a data principal under India's Digital Personal Data Protection Act, 2023, you have the following rights:
Right to Access
Request a copy of all personal data we hold about you by emailing privacy.furlo@gmail.com.
Right to Correct
Update or rectify any inaccurate or incomplete personal data via your account settings.
Right to Erasure
Permanently remove your account and all associated data via settings or support email.
Right to Nominate
Nominate another person to exercise your rights on your behalf in case of incapacity.
Response time: We will respond to all rights requests within 30 days.
Account Deletion: When you delete your account, we will:
- •Delete your email address, display name, and login credentials within 30 days.
- •Delete or anonymise your pet profiles and content within 30 days.
- •Retain anonymised aggregate data (no personal identifiers) for platform analytics.
7. Cookies & Analytics
- •Essential cookies: Required for login session management (cannot be disabled).
- •Analytics cookies (PostHog): Track page visits and feature usage — only set after you consent to our cookie banner.
- •No advertising cookies: We do not use any advertising or tracking cookies.
You can withdraw analytics consent at any time via the cookie settings in your account.
8. Children's Privacy
This platform is not intended for children under 13. We do not knowingly collect data from children under 13. Users between 13-18 require parental consent. If we discover an account belonging to a child under 13, we will delete it immediately. If you believe a child under 13 has created an account, contact us at furlo.pets.app@gmail.com.
9. Data Retention
| Data Type | Retention Period |
|---|---|
| Active account data | Until account deletion |
| Pet profile data | Until account deletion |
| User-generated content (posts, comments) | Until deleted by user or admin |
| Removed/moderated content | 90 days after removal (for appeal purposes), then deleted |
| Usage analytics (anonymised) | 24 months |
| Error logs (anonymised) | 90 days |
| Support emails | 2 years |
| Notification records | 90 days |
10. Grievance Officer & Changes
As required under Indian law, we have designated a Grievance Officer:
- •Email: furlo.pets.app@gmail.com
- •Address: Jaipur, Rajasthan, India
- •Response time: Within 30 days of receiving a complaint
11. Changes to This Policy
We will notify you of material changes to this Privacy Policy via in-app notification and email at least 14 days before changes take effect. Continued use after that date constitutes acceptance.