This notice explains what personal data Petavia collects, why, and the choices you have. It is written for the Personal Data Protection Act 2010 (Malaysia). Petavia is run by Petavia ("we").
Two kinds of businesses
Petavia is one app that hosts many independent pet shops. When you join a shop, the details you give for bookings, orders and pets are shared with that shop and its staff so they can look after you.
Each shop decides how it uses your details for its own business, and is responsible for that. We store and protect the data for the shop, and we never show one shop’s customers to another shop.
What we collect
Account: your email address (to send your sign-in code), and the name and phone number you add.
Shop records: a shop may bring in the details it already had about you from its own records (name, phone, email, pets, stamps and points), so they are ready when you join. Only that shop’s owner and managers can see them.
Pets: the details you choose to add, such as name, type, breed, size, birthday, weight, notes, vaccines and photos.
Bookings and orders: what you booked or bought, when, prices, deposits, delivery address and notes, and whether a payment was made.
Shop owners: shop details, logo, photos and videos, services, products, opening hours, and subscription status.
Technical: basic device and usage logs that keep the service secure and working.
We do not see or keep card numbers. Online payments are handled by the payment provider.
Camera and photos
The camera is used only to read a shop’s QR code. Nothing is recorded or saved.
We only use photos and videos that you choose to upload.
Why we use it
To run your account and sign you in; to let shops take bookings and orders and contact you about them; to take payments and deposits; to give support; to keep the service safe and prevent misuse; and to meet legal and tax rules.
We do not sell your personal data, and we do not use it for third-party advertising.
Who else receives it
The shops you join, as explained above.
Service providers who work for us under contract: Supabase (secure database and file storage, servers in Singapore), HitPay (online payments to shops), Stripe (shop owner subscriptions), and Expo (app delivery and updates).
Anthropic, only when a shop owner or manager uses voice control (the words of the command; no recordings are kept) or when the shop’s team reads a product photo or a supplier’s delivery note (the photo, to fill in product details or stock). Open Food Facts, only when the shop scans a product barcode: just the barcode number. Meta (WhatsApp), only when your shop sends booking reminders from Petavia’s WhatsApp number: your phone number and the booking time.
Authorities, if the law requires it.
Where it is kept
Your data is stored on servers in Singapore. When data leaves Malaysia, we use providers that protect it to a standard similar to Malaysian law.
How long we keep it
We keep your account while you use Petavia. Booking, order and payment records may be kept for up to 7 years because of tax and accounting rules. After that, they are deleted or made anonymous.
Your choices and rights
You can see and change your name, phone and pet details in the app at any time.
You can ask for a copy of your data, ask us to correct it, withdraw your consent, or ask us to delete your account. Email hello@petavia.shop. We reply within 21 days.
You can also delete your account yourself in the app: Me → Delete my account (shop owners and staff: at the bottom of Manage my shop).
If you withdraw consent or delete your account, shops will no longer be able to take bookings or orders from you in Petavia.
Security
Data is encrypted in transit, access is limited by strict rules for each shop, and staff see only the shop they work for. No system is perfect, so please keep your email account secure.
Age
Petavia is meant for people aged 18 and over. Younger people should use it with a parent or guardian’s permission.
Changes and contact
If we change this notice, we will update the date above and tell you in the app when the change is important.