Privacy Policy

Effective 24 August 2026

1. Data controller

Putrio is operated by Klejdi Kumanaku under the KMN APPK brand, Rruga Ismail Qemali, 1001, Tirana, Albania. Contact privacy@putrio.com for privacy requests and info@putrio.com for support.

2. Scope

This policy covers the Putrio Owner iOS app and its supporting account web flows, currently offered in Albania. Putrio 1.0 manages pet profiles, passport and care history, reminders, and notifications. This release does not offer payments, advertising, tracking, a marketplace, or AI.

3. Data we process

We process your name, email, user ID, language, and session data; pet profiles, passport data, notes, care history, reminders, and reminder actions; optional photos or files; notification settings and device tokens; support correspondence; and limited operational, security, and product-interaction logs.

4. Purposes and legal bases

We use data to provide and secure the service, authenticate you, store your information, deliver reminders you enable, provide support, prevent abuse, and meet legal duties. Depending on the activity, the legal basis is performance of our service agreement, consent, our legitimate interest in a secure service, or a legal obligation. Optional notification permission may be withdrawn at any time.

5. Providers and transfers

We use Supabase for authentication, database, and private storage; Vercel for hosting and server functions; Resend and Google for operational email; and Expo/EAS and Apple for iOS builds, TestFlight/App Store delivery, and push notifications. They process only what is needed for their role. Processing outside Albania uses safeguards required by applicable law and the relevant provider agreements. We do not sell data or use it for cross-app tracking.

6. Retention and deletion

Account, pet, passport, care, reminder, and device data are kept while your account is active and removed from active systems when account deletion completes. Private files are removed through the same flow. Technical summaries are scheduled for deletion after 6 months, operational audit records after 12 months, and security, privacy, and administrative audit records after 24 months. Correspondence is kept only as needed for the request or a legal duty. Residual encrypted copies expire through the provider's limited rolling backup cycle.

7. Security

Putrio uses authentication, row-level access controls, private storage, and restricted service access so owners see only authorized data.

8. Your rights

Subject to law, you may request access, correction, deletion, restriction, portability, or objection, and may withdraw consent. Account deletion can be started from Profile and Settings. Contact privacy@putrio.com. You may complain to Albania's Information and Data Protection Commissioner at idp.al.

9. Children

You must be at least 16 to create and use your own Putrio account. A person under 16 must not create an account; a parent or legal guardian may use Putrio as the account holder.

10. Changes and contact

We will update this policy when the service or legal requirements materially change. Contact: Klejdi Kumanaku, Rruga Ismail Qemali, 1001, Tirana, Albania; privacy@putrio.com.