PRIVACY POLICY & GDPR COMPLIANCE


Last Updated: 15.01.2026

Pati Paws AI/ YİĞİT BURAK YILDIRIM is committed to protecting the privacy of users (“User” or “you”) of the Pati Paws AI mobile application. This Privacy Policy is designed to comply with the General Data Protection Regulation (GDPR) and other relevant data protection laws.

Pati Paws AI

1. DATA CONTROLLER

The data controller for your information is:

Entity: Pati Paws AI/ YİĞİT BURAK YILDIRIM

Address: Çamlık Mah. Meşe Sk. Sarmaşık Evler Sitesi S/32 No:2 Pendik/İstanbul

Email: patii.pawss@gmail.com

2. DATA WE COLLECT

In accordance with the principle of "data minimization", we collect only the necessary information:

Account Information: Name, email (if you register).

Pet Information: Photos, descriptions, and location data shared for "Lost Pet" notices.

Financial Information: Subscription status and transaction IDs. (Payment processing is handled securely via Apple App Store or Google Play Store; we do not store your credit card details).

Location Data (approximate or precise, only when strictly necessary to provide core app functionality): We may collect and process location data only when required for core app features. For lost pet features, location is used to display notices on a map based on the last known location and to allow manual location selection when creating a lost pet report. Location access for these features is requested while the app is in use, and users can deny access and still create a report by manually selecting a location. We may also use location to show nearby pet-related services or community features (if enabled). Maps are rendered using third-party map tile providers (e.g., OpenStreetMap), and data is processed via our backend infrastructure (Supabase). Location data is never sold. Background location may be used only for the Walk module during an active walk session when you grant "Always" permission; it is not used for lost pet features. Location data related to lost pet notices is retained while the notice is active and for a short period after resolution (e.g., up to 30 days), after which it is removed or anonymized. Users can revoke location permission at any time via device settings.


3. PURPOSES AND LEGAL BASIS FOR PROCESSING

We process your data based on the following legal grounds under GDPR:

Contractual Necessity (Art. 6(1)(b)): To provide premium features and manage subscriptions.

Legitimate Interest (Art. 6(1)(f)): To improve app performance and ensure security.

Consent (Art. 6(1)(a)): For personalized advertising and tracking technologies.

Public Interest: To facilitate finding lost pets via user-generated notices.

4. INTERNATIONAL DATA TRANSFERS

As our servers and service providers (e.g., Google Firebase, AWS, AdMob) may be located outside the European Economic Area (EEA), including Turkey and the USA, your data may be transferred to these countries. We ensure that such transfers are protected by Standard Contractual Clauses (SCCs) approved by the European Commission.

5. COOKIES AND TRACKING TECHNOLOGIES (SDKs)

We use mobile SDKs (Software Development Kits) to:

Verify your premium membership.

Provide personalized ads.

Monitor app stability. 

Opt-out: You can reset your advertising identifier or disable tracking via your device settings (Settings > Privacy > Tracking).

6. YOUR RIGHTS UNDER GDPR

You have the following rights regarding your personal data:

Request a copy of your data, correct inaccurate data, right to erasure, delete your account and all associated data. Request your data in a structured, machine-readable format. Object to processing for marketing purposes.

To exercise these rights, contact us at patii.pawss@gmail.com

7. DATA RETENTION

We store your data as long as your account is active. If you delete your account, your personal data will be deleted or anonymized within 30 days, except where legal retention is required (e.g., for tax purposes).

8. LODGING A COMPLAINT

You have the right to lodge a complaint with a Data Protection Authority (DPA) in your country if you believe our processing violates GDPR.