Privacy Policy

Last updated: November 2026. A legal review of this policy is recommended.

1. Controller

ALTYPIST DOO Beograd
Milutina Milankovića 7 DJ, 11070 Belgrade, Republic of Serbia
Email: hello@petbook.life

2. This website

petbook.life is a static website. It sets no cookies, embeds no third-party content (no fonts, scripts or maps from other servers) and uses no analytics or advertising.

Server and logs. The website runs on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. To deliver pages the server necessarily processes your IP address. Access logs with requested addresses are not stored. Legal basis: Art. 6(1)(f) GDPR (secure, working operation). A data processing agreement under Art. 28 GDPR is in place with Hetzner.

Premium and gift pages. On petbook.life/premium and /gift you sign in with your PetBook account using a code sent by email. The sign-in token is kept only for the browser tab (sessionStorage) and sent only to our database provider. When you subscribe, we pass your email, your family’s identifier and your account identifier to Lemon Squeezy to create the payment page.

Email contact. If you write to us, we process your address and message to reply (Art. 6(1)(b) or (f) GDPR).

3. The PetBook app

PetBook is a private journal. You create an account and store your pets, their vaccinations, treatments, medications, vet visits, daily care entries, expenses and reminders. This data is visible only to the members of your family you invite. Legal basis: Art. 6(1)(b) GDPR (contract). You decide what to enter; anything you enter about other people is your responsibility towards them.

4. Payments (Premium)

Purchases on petbook.life are processed by Lemon Squeezy LLC (USA), which acts as reseller and merchant of record and processes payment and billing data (name, email, billing address, payment method, tax data) as an independent controller under its own privacy policy. We receive the subscription status, plan, renewal date, a customer identifier and your family identifier — never your card details. Purchases in the app, when available, are processed by Apple or Google; we receive only the subscription status. Legal basis: Art. 6(1)(b) GDPR; invoices are retained as required by tax law.

Processors

Data processing agreements under Art. 28 GDPR are in place with all processors; for providers based in the USA, appropriate safeguards under Art. 46 GDPR (EU Standard Contractual Clauses) or the EU-U.S. Data Privacy Framework apply.

• Supabase, Inc. (USA) — database, sign-in, file storage; stored in the EU.
• Resend, Inc. (USA) — sending emails with confirmation and sign-in codes.
• Hetzner Online GmbH (Germany) — the server of this website.

We do not sell data and show no ads. The app includes no analytics or advertising SDKs.

Retention

Data is kept while your account exists. When you delete your account, your data is deleted unless the law requires us to keep it (for example, billing records).

5. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21). You can withdraw consent at any time with effect for the future (Art. 7(3)). You may also lodge a complaint with a data protection supervisory authority (Art. 77), in particular in the EU member state where you live.