Privacy & your rights
Last updated 1 June 2026
PetPing helps pet owners arrange care for their pets if they don't make it home as expected. This notice explains what personal data we process, why, and the rights you have under the EU General Data Protection Regulation (GDPR).
Who we are
PetPing is operated by Vincent Rook, established in France, acting as the data controller. For any privacy question or to exercise your rights, contact hello@mypetping.com.
If someone added you as an emergency contact
If you received a text from us, a PetPing user listed you as one of their emergency contacts. We obtained your name, phone number and your relationship to them from that user — not from you. We use it for one purpose: to ask, by SMS, whether you can help look after their pets if they miss a check-in.
- We only message you if you confirm you are happy to be contacted, and only when there is an actual missed check-in.
- You can opt out at any time using the link in any PetPing message — instantly and without giving a reason.
- Our lawful basis is your consent for emergency messaging, and the legitimate interest of the owner (pet welfare) in holding your contact details so they can reach you.
What we process, and why
| Data | Purpose | Basis |
|---|---|---|
| Owner name, email, phone | Account, sign-in, notifications | Contract |
| Owner home address & access instructions | Shown to a confirmed contact during an alert | Contract + owner consent |
| Pet care details | Shown to a confirmed contact during an alert | Contract |
| Contact name, phone, relationship | Emergency escalation | Owner legitimate interest + contact consent |
| Consent records (status, time, IP, device) | Proof of consent | Legal obligation |
| Audit logs | Security & safety of the service | Legitimate interest / legal obligation |
Who we share it with
We use a small number of processors, each under a data-processing agreement:
- Supabase — database, auth and storage (hosted in the EU, London region).
- Twilio — sends the SMS messages. With our data-minimisation, texts contain only a name and secure links — never your address or access details.
- Mailgun (EU) — sends account emails.
- Vercel — hosts the web app; pages that show personal data are served from EU regions.
International transfers
Some processors (e.g. Twilio, Vercel) are US-based. Where personal data leaves the EU/EEA, it is protected by Standard Contractual Clauses and equivalent safeguards in those providers' data-processing agreements.
How long we keep it
We keep account and contact data for as long as the owner's account is active, then delete it (typically within 30 days). Proof-of-consent records and audit logs are kept only for as long as necessary to meet our legal obligations and defend against claims, then deleted.
Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you;
- have it corrected or erased;
- restrict or object to processing;
- data portability;
- withdraw consent at any time (this does not affect processing before withdrawal).
To exercise any of these, email hello@mypetping.com. If you are an emergency contact, you can also use the opt-out link in any message. You have the right to lodge a complaint with the French data-protection authority, the CNIL (www.cnil.fr), or your local supervisory authority.
Questions? hello@mypetping.com