Privacy Policy

Pet Toxicity Lens (“the app”) is operated by KineticBit Inc. (“we”, “us”), a corporation incorporated under the Canada Business Corporations Act with its registered office in Ontario, Canada. KineticBit Inc. is the organization accountable for the personal information described below under Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).

The app helps pet owners check whether a plant, food, or household item is toxic to their pet. This policy explains what we collect, why, and the choices you have. It covers the app and this website. By using the app you agree to this policy.

• Account. Your email address, only if you create an account. Sign-in is passwordless via a one-time code. You may also use the app as a guest, without an email.
• Pet profiles. Details you enter about your pet — name, species, breed, birthdate, weight, pregnancy or nursing status, medical conditions, and notes — used to personalize the toxicity assessment.
• Scan input. Photos you capture or select, or text questions you type, to identify an item. These are sent to our service for analysis. We do not collect video or audio, and the app requests no microphone access.
• Scan history. The results of your checks, stored to your account.
• Subscription and purchase data. When you subscribe, the app store and our subscription provider process the transaction and share its status — for example active, trial, or expired. We never receive your full payment-card details.
• Usage and analytics data. In-app activity such as which screens you open, when a check starts, finishes, or fails, and whether you were shown or started a subscription — together with your device type, operating-system version, and app version. This is linked to your account identifier so we can measure how the app is used and fix what breaks. It does not include your photos, the questions you type, your pet’s name, or your email address.
• Basic technical data needed to operate the service, such as authentication tokens and app settings stored on your device.

• Identify the item and produce a toxicity assessment tailored to your pet.
• Maintain your account, pets, and scan history across your devices.
• Provide and manage your subscription, including any free trial.
• Respond to support requests you send us.
• Operate, secure, and improve the app.

We do not sell your personal information, and we do not use it for cross-app advertising or tracking.

If you are in the European Economic Area or the United Kingdom, we process your personal data on these bases:

• Performance of a contract — to give you the assessments, account, and subscription you asked for.
• Legitimate interests — to keep the service secure, prevent abuse, and understand which features are used, balanced against your rights.
• Consent — for camera and photo-library access, which you grant at the operating-system level and can withdraw at any time in your device settings.
• Legal obligation — where we must retain records to comply with law.

You keep ownership of the photos, questions, and pet details you submit. You grant us only the narrow licence needed to host, transmit, and process that content in order to produce your assessment and show you your own history.

We do not use your content to train AI models, and we do not claim any marketing or publicity rights in it. Please do not include sensitive personal information about yourself or anyone else in a scan or a typed question.

We share information only with the providers needed to operate the service. Each processes data on our instructions.

• Supabase — database, authentication, and the server functions that produce an assessment. Hosted in the United States.
• Google (Gemini) — the AI model that identifies items from your photos and answers typed questions. Your scan input is sent to it for that purpose.
• RevenueCat — subscription status and entitlement management.
• Apple App Store and Google Play — app distribution, purchases, and subscription billing, under their own privacy policies.
• PostHog — product analytics, as described above. US cloud.
• Resend — transactional email, including the one-time codes used to sign in. It processes your email address for that purpose.
• Vercel — hosting for this website. Standard server logs, including IP addresses, are processed to serve and secure the site.

• We do not sell or share your personal information for money or for cross-context behavioural advertising.
• We carry no advertising SDKs, and we do not use the advertising identifier on either platform.
• We do not track you across other companies’ apps or websites.
• We do not use your photos or typed questions to train AI models.

Your data is stored and processed in the United States (Supabase, us-east-1; PostHog US cloud). If you are outside the United States, this means your personal information is transferred across borders and may be accessible to courts, law enforcement, and national security authorities in that jurisdiction. Where required, we rely on standard contractual clauses or equivalent safeguards for these transfers.

We keep your account, pets, and scan history for as long as your account exists. You can delete your account at any time from Settings → Delete account in the app, which removes your account and its associated data. Deletion is permanent.

If you have uninstalled the app, you can request deletion from our account deletion page.

Deleting your account does not cancel a subscription bought through the App Store or Google Play. Cancel that in your store subscription settings, or it will keep renewing.

Data is encrypted in transit and at rest, and database access is constrained by row-level security so one account cannot read another’s data. We take reasonable measures to protect against unauthorized access, but no method of transmission or storage is 100% secure.

The app is rated as suitable for general audiences, but it is not directed to children and we do not knowingly collect personal information from anyone under 13. An account may only be created by someone aged 13 or over. If you believe a child has provided personal information, contact us at support@pettoxicitylens.com and we will delete it promptly.

You may request access to the personal information we hold about you, ask us to correct it, and withdraw consent subject to legal and contractual limits. If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner of Canada.

If you are in the EEA or the UK, you have the right to:

• Access the personal data we hold about you.
• Have inaccurate data rectified.
• Have your data erased.
• Restrict or object to how we process it.
• Receive your data in a portable format.
• Withdraw consent at any time, without affecting processing already carried out.
• Lodge a complaint with your local supervisory authority.

California residents may request to know what personal information we collect and why, to have it corrected, and to have it deleted. You also have the right to opt out of the sale or sharing of personal information — we do neither, so there is nothing to opt out of. We will not discriminate against you for exercising any of these rights.

Email support@pettoxicitylens.com from the address on your account, or use the deletion page for deletion requests. We may need to verify your identity before acting, which for most requests means confirming you control the account email. We aim to respond within 30 days.

We may update this policy. When we do, we revise the “last updated” date at the top of this page, and we will give notice in the app for changes that materially affect how we handle your information. Continuing to use the app after a change takes effect means you accept the updated policy.

Privacy questions go to support@pettoxicitylens.com, or write to KineticBit Inc., Ontario, Canada. For anything else, see our contact page.