Privacy Policy

1 Data Controller

PawsPulse is a product/brand of TMA Ticino Media Agency. Personal data is processed by:

2 Data Collected

The App collects the following categories of personal data:

3 Purposes of Processing

• Provision of the App's Services (pet management, maps, notifications)
• Account authentication and security
• "Lost Pet" feature — SmartTag collar GPS tracking
• App improvement through aggregated anonymous analytics
• Technical support and troubleshooting
• Compliance with legal obligations

4 Legal Basis

• Consent of the data subject (Art. 6(1)(a) GDPR) — for background location and marketing communications
• Performance of a contract (Art. 6(1)(b) GDPR) — for the App's core Services
• Legitimate interest (Art. 6(1)(f) GDPR) — for security, fraud prevention, and service improvement
• Legal obligation (Art. 6(1)(c) GDPR) — where applicable

5 Third-Party Services

The App uses the following third-party services, which may collect data:

6 International Transfers

Some data may be transferred to countries outside the EU/Switzerland (in particular the USA, where Google LLC maintains its servers). Such transfers take place on the basis of:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions where available
• Certifications recognized by the competent authorities

7 Data Retention

Data is retained for the time strictly necessary to fulfill the purposes for which it was collected:

• Account and Pet Data: until account deletion
• Location Data: up to 30 days from collection
• Crash Logs and Analytics: aggregated and retained for up to 14 months (Firebase policy)
• System Logs: up to 90 days

Upon expiry, data is irreversibly deleted or anonymized.

8 User Rights

In accordance with the GDPR and the Swiss nFADP, users have the right to:

• Access — obtain a copy of their personal data
• Rectification — correct inaccurate or incomplete data
• Erasure (Right to be Forgotten) — request deletion of data
• Portability — receive data in a structured, machine-readable format
• Objection — object to processing based on legitimate interest
• Restriction — restrict processing under certain circumstances
• Withdrawal of Consent — at any time, without affecting the lawfulness of processing carried out before withdrawal

To exercise these rights, please send a request to tina.magna@tmagency.ch. The Controller will respond within 30 days.

If unsatisfied with the response, users have the right to lodge a complaint with the data protection authority of their country of residence or with the FDPIC (Federal Data Protection and Information Commissioner, Switzerland).

9 Security

PawsPulse implements appropriate technical and organizational measures to protect personal data from unauthorized access, loss, disclosure, or alteration, including:

• Encryption of access credentials
• Data transmission via secure protocols (HTTPS in production)
• JWT token-based authentication with expiration
• Secure token storage on the device (flutter_secure_storage)
• Continuous error monitoring via Firebase Crashlytics

10 Contact and Updates

For any questions regarding this Notice or the processing of personal data, please contact the Controller:

The Controller reserves the right to update this Notice. In the event of material changes, users will be notified via the App or by email. The date of the last update is indicated at the top of this page.