Amidipet

Privacy Policy

Last updated: September 6, 2026

Amidipet ("Amidipet", "we") is the social app for dog people — available on iOS, Android, and the web at app.amidipet.app — and this website. This policy explains what data we collect, why, and the choices you have. The short version: we collect what the service needs to work, we never sell your personal data, and GPS is used only while you record a walk you started — your routes stay private to you; everywhere else, you tell us your city, and that's as precise as it gets.

1. Who is responsible

Amidipet is published by Khadija Rahoui, sole proprietor (entrepreneur individuel, SIREN 104 293 097), 160 rue d'Antibes, 06400 Cannes, France — the data controller for the processing described here (full publisher details on the Legal notice page). For anything privacy-related, write to bonjour@amidipet.app.

2. What we collect

• Account. Your email address and name. If you sign in with Apple or Google, we receive the identifiers they share (never your password). Passwords for email sign-up are stored hashed — we cannot read them.
• Profile. Your display name, handle, photo, an optional bio, and the city you choose. Your city powers local discovery; outside walk recording (below), we never access GPS or precise location.
• Your dogs. The profiles you create for them — name, breed, photos, birthday.
• Walks. If you record a walk, we collect precise GPS location — only while the recording you started is running; it continues while your phone is locked or in your pocket, and stops the moment you finish. The route is stored with your account and shown only to you. Sharing a walk shares a card with the stats (distance, duration) — never the route or a single coordinate — and any privacy zones you set (around home, say) are cut from the route before it is even saved. Your location is never used for advertising, never sold, and never shown to other members; delete a walk and its route is deleted, delete your account and they all are.
• Content. Posts, photos, video clips, voice notes, comments, and likes you publish; the communities you join and the connections you make.
• Private messages. Direct and group messages are stored so we can deliver them. We do not read or scan them. The only time a private message reaches a human reviewer is when a participant attaches it as evidence to an abuse report.
• Technical data. A session cookie to keep you signed in, a push-notification token if you enable notifications, and server logs (IP address, timestamps) kept for security and debugging.
• Usage & diagnostics. A small, deliberate set of product-analytics events (for example "post created", or which screens are viewed — some tied to your account, some anonymous) so we can understand what works, and crash/error reports with device context when something breaks. This never includes what you write, is never used for advertising, and is never sold.

3. Why we process it

• To run Amidipet — accounts, feeds, communities, messaging, media (performance of our contract with you).
• To keep it safe — moderation of reported content, abuse prevention, security (our legitimate interest in a safe community).
• To notify you — push notifications, only if you turn them on (consent).
• To send account email — verification and password-reset messages (contract).
• To improve and repair Amidipet — the product analytics and crash reports above (our legitimate interest in understanding and fixing the service).
• To show ads — see the next section (consent where required, otherwise legitimate interest in funding a free service).

4. Advertising

Amidipet is free, funded by a small number of clearly-labeled sponsored cards in the home feed — never in your messages, on profiles, or in communities. Ads are served by Google AdMob. In the European Economic Area, the UK, and Switzerland, personalized ads run only with your consent, collected through Google's certified consent form when you first use the app; decline and you'll see non-personalized ads instead. On iOS, ad personalization additionally requires your permission through Apple's App Tracking Transparency prompt. Google may process device identifiers and ad-interaction data as described in its own privacy policy; you can review its ad-technology partners here. To measure whether our own app-install ads on Facebook and Instagram bring new members, Meta Platforms receives your device's advertising identifier together with the app-install and account-creation events — on iOS only with your App Tracking Transparency permission — as described in its privacy policy. You can change your mind at any time: in the app, under Settings → Privacy & ads (shown where consent applies), or through your device's system ad settings.

5. Who we share data with

We share personal data only with the processors that run the service, under data-processing agreements, and never for their own marketing:

• Cloudflare — hosting, content delivery, and photo/audio storage.
• Neon — our database (EU, Frankfurt).
• Bunny Stream — video hosting and streaming.
• Resend — transactional email (verification, password reset).
• Expo — push-notification delivery.
• PostHog (EU Cloud) — product analytics and in-app surveys.
• Sentry (EU-hosted) — crash and error reporting.
• Apple / Google — sign-in, if you use it; Google additionally for ads (above).

We may also disclose data where the law requires it. If Amidipet is ever part of a merger or acquisition, this policy continues to apply to your data.

6. International transfers

Our infrastructure primarily serves from the European Union. Where a processor handles data outside the EU/EEA, the transfer is protected by recognized safeguards such as the EU Standard Contractual Clauses or an adequacy decision (including the EU–US Data Privacy Framework where certified).

7. How long we keep it

Your data stays as long as your account does. Deleting your account — available in the app under Settings — removes your profile, dogs, walks and their routes, privacy zones, posts, comments, and media; uploaded files are purged from storage shortly after. Server logs and backups age out on a rolling basis. We keep only what the law obliges us to keep (for example, records of a handled abuse report).

8. Your rights

Under the GDPR you can access, correct, export, restrict, or delete your data, object to certain processing, and withdraw any consent — without affecting prior processing. Most of this you can do directly in the app; for the rest, email bonjour@amidipet.app and we'll respond within a month. You can also lodge a complaint with your supervisory authority — in France, the CNIL.

9. Children

Amidipet is not directed at children. You must be at least 16 to use it. If we learn an account belongs to someone younger, we will delete it.

10. Security

All traffic is encrypted in transit (TLS). Passwords are hashed, media links are signed and expire, and access to production systems is restricted and credentialed. No service can promise perfect security, but if a breach affects you, we will notify you and the authorities as the law requires.

11. Cookies & similar technologies

The app and web app use one essential session cookie to keep you signed in. This website keeps your theme and language preferences on your device (the language choice also travels to the web app through one first-party cookie on amidipet.app, so both speak the same language).

How this website is measured. amidipet.app uses PostHog (EU Cloud, hosted in Frankfurt) to understand how the site is used: the pages viewed and how far they are read, clicks on the app-store and "log in / join" links, the type of device and browser, the page language, and how you arrived (the referring site and any campaign tags in the link). No advertising, no cross-site tracking, no profile of you: visitors are never linked to an account, and we ask PostHog not to derive a location from your IP address.

• No cookies before you say so. Until you answer the bar at the bottom of the page, PostHog runs in cookieless mode: nothing is stored in your browser, and visits are counted through a short-lived identifier computed on PostHog's servers that changes every day and cannot be used to recognise you afterwards. If your browser sends a "Do Not Track" or Global Privacy Control signal, we treat it as a refusal and never ask.
• If you accept, PostHog sets first-party cookies (named ph_…, kept for 12 months) and a matching browser-storage entry so your visits can be told apart over time. If you decline, we stay in cookieless mode. Either way your choice is kept in your browser, and you can change it at any time with "Cookie settings" at the bottom of every page.
• These statistics are kept for up to 12 months in the EU, then deleted.

In the app, the product analytics and crash reporting described above run through PostHog and Sentry — both EU-hosted, never used for advertising, never cross-site tracking — and advertising identifiers are used only as described in the Advertising section, under its consent rules.

The web app (app.amidipet.app) is measured the same way — the same bar, the same rules — and, once you are signed in, what you do there is linked to your account exactly as in the app. Public pages such as a lost-dog alert or a shared walk card are counted in aggregate only: cookieless, never a cookie, never a profile.

12. Changes

If this policy changes in a way that matters, we'll tell you in the app before it takes effect. The date at the top always reflects the current version.