Privacy Policy

Last updated: 28 June 2026

This Privacy Policy explains how OnlyPaw ("we", "us", "our") collects, uses, shares, and protects your personal information when you use our mobile applications, websites, and related services (collectively, the "Service"). By using the Service, you agree to the practices described here.

1. Who we are

OnlyPaw is operated from the United Arab Emirates and serves users worldwide. For privacy questions, contact us at privacy@onlypaw.net.

2. Information we collect

2.1 Information you provide

• Account information: name, email, phone number, password (hashed), profile photo.
• Identity verification (providers): government-issued ID, selfie, home photos, background-check information where applicable.
• Pet information (customers): name, breed, age, weight, medical notes, special needs.
• Payment information: we use Stripe to process payments. We do not store full card numbers on our servers; Stripe stores them in accordance with PCI DSS requirements.
• Communications: messages exchanged through the in-app chat, support tickets, reviews you write.

2.2 Information collected automatically

• Device data: device model, operating system, IP address, push notification tokens.
• Location data: approximate or precise location for nearby provider search, walk GPS routes, and pet-taxi tracking, where you grant permission.
• Usage data: screens viewed, features used, crash reports, performance metrics.

3. How we use your information

• To create and maintain your account.
• To match customers with providers, process bookings, and facilitate payments.
• To verify provider identity and run background checks where applicable.
• To send transactional notifications (booking confirmations, payment receipts, support replies).
• To detect, investigate, and prevent fraud, abuse, or violations of our Terms of Service.
• To improve the Service through aggregated, anonymised analytics.
• To comply with legal obligations.

4. How we share your information

We do not sell your personal information. We share it only as follows:

• With other users as required by the Service: a customer's first name and pet profile is shared with a provider when a booking is confirmed; a provider's name, photo, services, and reviews are visible to customers searching for those services.
• With service providers (sub-processors) who help us run the Service: Stripe (payments), Resend (transactional email), Supabase (database hosting), Cloudflare R2 (file storage), Sentry (error logging), Expo (push notifications). Each is bound by a data processing agreement.
• With law enforcement or regulators when required by valid legal process or to protect the rights, safety, or property of OnlyPaw, our users, or the public.
• With a successor entity in connection with a merger, acquisition, or sale of assets — under equivalent privacy commitments.

5. How long we keep your information

We retain account data for as long as your account is active and for up to 7 years after closure for tax, fraud-prevention, and dispute-resolution purposes. Identity-verification documents are deleted within 90 days of a provider being approved or rejected, unless retention is required by law. You may request earlier deletion as described in Section 7.

6. Security

We use industry-standard safeguards including TLS encryption in transit, encryption at rest for sensitive fields (passwords are bcrypt-hashed; SSNs are encrypted), least-privilege access controls, and audit logging. No system is impenetrable; in the event of a data breach affecting your personal information, we will notify you and the relevant authorities in accordance with applicable law.

7. Your rights

Depending on your jurisdiction (UAE Federal Data Protection Law, GDPR, CCPA, etc.) you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate information.
• Delete your account and associated data, subject to retention obligations.
• Withdraw consent for optional processing (e.g., marketing).
• Receive a portable copy of your data.
• Object to or restrict certain processing.
• Lodge a complaint with a data-protection authority.

To exercise these rights, email privacy@onlypaw.net. We will respond within 30 days.

8. Children

OnlyPaw is not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with information, contact us and we will delete it.

9. International transfers

We may transfer your information outside the country you reside in. When we do, we rely on appropriate safeguards including standard contractual clauses and adequacy decisions.

10. Cookies and tracking

Our website uses essential cookies to keep you logged in and remember your preferences. Optional analytics cookies help us understand how the Service is used. See our Cookie Policy for details.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes through the app or by email. The "Last updated" date at the top reflects the most recent revision.

12. Contact

Privacy questions: privacy@onlypaw.net
General support: support@onlypaw.net