Quiet by default.
Yours by design.

Maskotis is a pet-care app run by Maskotis Inc., a small team in Brooklyn, Lisbon, and Singapore. Our European entity, Maskotis EU Lda., is the data controller for users in the EU and UK. You can reach us any time at hello@maskotis.com.

This notice covers everything we collect, why we collect it, who sees it, and how to make us stop. If a clause feels like fine print, tell us — we'll rewrite it.

The minimum we need to give you a useful pet record and a calm app:

• Account basics: email, name, sign-in provider, and a password we never see in clear text.
• Pet profiles: the things you choose to add — name, species, breed, birthday, photos, weight, allergies, medications, vaccination cards.
• Care activity: the reminders you set, what you tick off, and what you skip. We use this to keep your schedule honest, not to grade you.
• Posts and community activity: what you post to the community feed, the photos you attach, the comments you leave, and the posts you like.
• Device + app diagnostics: crash reports, performance traces, and an anonymised device ID so we can ship fixes. No advertising IDs, ever.

Things we deliberately don't ask for: precise location history, contacts, microphone, or anything from other apps on your device.

We use what you give us to do the job you hired us for:

• Run your pet's care plan and remind you about it.
• Show your posts to everyone signed in to Maskotis. The community feed has no smaller audience today.
• Sync the same plan to anyone in your household.
• Remove content that breaks the house rules.
• Catch crashes, fix them, and ship a quieter update.

We don't train ad models on your pet photos, and we don't enrich your account with data scraped from elsewhere. We don't build an advertising profile of you ourselves — the one thing we do send outward is a signup measurement to Meta, and only if you accepted analytics cookies. Section 04 spells out exactly what that contains.

Four groups can ever see your data, in this order of how often it happens:

• People you invite — partners, walkers, sitters, and household members — see the parts you grant them. Permissions are per-pet and reversible at any moment.
• Service providers— the companies that store our database, send our emails, and run our crash reports. They're bound by data-processing agreements and can't use your data for anything but our service.
• Meta (Facebook and Instagram), and only if you accepted analytics cookies. When you create an account or subscribe to the newsletter, we tell Meta that it happened and include your email address and name scrambled into an unreadable code (hashed), so Meta can recognise you as someone who saw one of our ads. It lets us stop paying for ads that bring nobody in. Nothing about your pets, your household, or what you do inside the app is ever included.
• Authorities, only when a valid legal request forces our hand. We'll tell you unless we're legally barred from doing so.

We don't sell your data, and we don't share it with data brokers. We don't train AI models on your pet photos. The only thing an advertising platform ever receives from us is the signup measurement described above — and never if you decline the cookie banner.

Encrypted at rest (AES-256) and in transit (TLS 1.3).

Backups roll on a 30-day window. When you delete something, it's gone from production immediately and from backups within 30 days. That holds for closing your account too: the records go at once, and the photos and documents follow within minutes — if a file refuses to delete we keep a note of where it is and retry, rather than losing track of it.

In the app today, you can:

• Delete a pet permanently, from its profile page. This erases its whole record and cannot be undone.
• Archive a pet instead, if you'd rather keep its records. An archived pet leaves your dashboard and stops all reminders, and you can restore it at any time.
• Turn off analytics and diagnostics from the cookie banner.
• Turn care reminder emails off in your notification settings. This covers reminders only — see below for the one message you cannot turn off.

One email has no off switch.If someone scans your pet's collar tag and reports them found, we email you straight away. That message is the entire point of the tag, and an owner who switched it off months earlier would not remember having done so on the day it mattered. It is sent to your account address, it carries whatever the finder chose to write, and we have not verified them or it. If you would rather not receive it, delete the tag from the pet's page — a tag that does not exist cannot be scanned.

We write to you once when you join. After you confirm your address we send a single welcome message explaining what Maskotis does. It goes to your account address, it is sent once and never again, and it is not a newsletter — subscribing to that is a separate choice you make yourself.

When you email a share link, a household invitation or a cartilla from Maskotis, we keep a record of it: what kind of message it was, the date, and the recipient's address stored only as a partly hidden form and a one-way code. We never keep the full address of someone you sent something to.

Download a copy of everything we hold about you, or close your account and delete it, from Settings → Your data. Both are immediate and neither needs us. Closing the account cannot be undone, so download the copy first if you want one.

For anything else — removing someone from your household, or a request you would rather we handled — email us at privacy@maskotis.com and we'll take care of it for you.

If you're in the EU, UK, California, or another region with specific privacy laws, you have the same rights you'd have anywhere — access, correction, erasure, portability, restriction, objection. We honour them within 30 days. Email us and we'll take it from there.

There is no in-app reporting yet. Maskotis has no report button, no appeals process, and collects no report data — so this section describes what we do today, not what we intend to build.

To flag something in the community feed, email moderation@maskotis.com. We keep that correspondence only as long as we need it to deal with what you told us. We may remove content that breaks the house rules.

When in-app reporting ships, this section will describe how it works before it is switched on.

Maskotis is for people aged 16 and up. We don't knowingly collect data from anyone younger. If you believe a child has uploaded something, write to us and we'll take it down.

When we change something material, we'll tell you in the app and by email at least 30 days before it takes effect.