Local care data
Pet profiles, care plans, reminders, health events, vaccinations, medication, weight, expenses, attachments and related information are stored on your device by default. Reports and manual .petiyo backups are also created locally.
Optional account data
If you create an account, Petiyo stores your email address, a one-way password hash, verification and security metadata, access-token metadata, and a random app-generated installation/device identifier. Petiyo does not collect IMEI, Android ID, advertising ID or hardware serial for account devices.
End-to-end encrypted cloud backups
When you explicitly enable cloud backup, the encrypted backup file, its size, checksum, format/app versions, device label and timestamps are stored by the Petiyo service. Backup contents are encrypted on your device with a random backup master key; the server cannot read pet, health or attachment content in plaintext.
The server stores only encrypted copies of the backup master key together with KDF, salt and nonce metadata. Your account password and recovery key are never stored in plaintext. Cloud backup is a versioned restore service, not live synchronization.
Advertising and purchases
The Free version of Petiyo may show Google AdMob banner ads. In regions where an advertising privacy choice is required, Google User Messaging Platform (UMP) presents and manages that choice before Petiyo requests an ad. Required privacy options can be reopened from Settings. Petiyo Pro users do not receive ad requests or see ad slots. Petiyo does not use care records for ad targeting.
Google and its partners may process device, advertising and interaction data under their own policies when UMP reports that an ad request is allowed. For the optional Petiyo Pro purchase, Petiyo sends purchase proof to the server over HTTPS and processes purchase history for store verification, fraud prevention, acknowledgement, refund/revocation handling and restoration. The raw purchase token is not stored; the server retains a SHA-256 reference linked to the signed-in account and entitlement record.
Deletion and your controls
You can delete local records separately in the app. Deleting an account removes server account data and cloud backups, but local data can remain on your device until you choose to remove it. Start deletion in the app or on the account deletion page.
Petiyo includes no analytics or crash-reporting SDK. For questions, contact support@morve.com.tr.