Data Protection Policy

Synthcraft Web & Automation, operated by Atilla Firat Bozdogan, Chemin de Pierrefleur 37, 1004 Lausanne, Switzerland — contact: info@synthcraft.ch.

This is a sole proprietorship operating under the trade name "Synthcraft Web & Automation", not yet registered with the Swiss commercial register.

Account data: e-mail address, password (stored encrypted, never in plain text), or Google identifier when signing in with Google.

Pet-related data: name, breed, photos, reminders (vaccinations, treatments), and any health documents you choose to upload.

Location data: canton and approximate location for lost/found listings, plus your precise location if you voluntarily enable location sharing when searching for nearby providers.

Phone number, for the SMS verification required before publishing a listing or contacting another user.

Payment data: processed directly by Stripe. We never receive or store your card details.

Technical data: IP address, device type, and cookies strictly necessary to operate the service (login session).

To perform our contract with you: creating your account, managing your pets and reminders, displaying the directory, publishing listings, managing your subscription.

Based on our legitimate interest: securing the platform, preventing abuse and fraud, improving the service.

Based on your consent: sending push notifications, sharing your location for geolocated search.

To comply with legal obligations, in particular billing requirements.

We never sell personal data. Certain data is shared with processors necessary to operate the service:

Supabase (database hosting, Frankfurt region, European Union) — accounts, pet profiles, health documents.

Stripe (payments, Ireland/United States) — subscription and billing management.

Twilio (SMS verification, United States) — delivering the phone verification code.

Google (OAuth sign-in and Places API, United States) — optional sign-in and directory search results.

Vercel (website hosting, United States) — technical delivery of the application.

Some processors (Stripe, Twilio, Google, Vercel) process data outside Switzerland, including in the United States. These transfers rely on standard contractual clauses or compliance mechanisms recognised by these providers to ensure an adequate level of protection.

Your data is kept for as long as your account is active. If you delete your account, your data is erased within a reasonable timeframe, subject to legal retention obligations (in particular accounting records, kept for 10 years under Swiss law).

Under the revised FADP, you have the right to access, rectify, delete, and object to the processing of your data, as well as a right to data portability where provided by law.

To exercise these rights, contact us at info@synthcraft.ch. You may also lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC).

Pawinia only uses strictly necessary technical cookies (maintaining your login session). No third-party advertising or tracking cookies are currently used.

Data is protected through encryption in transit (HTTPS) and strict access rules at the database level (each household can only access its own data). As no system can guarantee absolute security, we commit to responding promptly in the event of an incident.

Pawinia is not intended for persons under 16 years of age without the consent of a holder of parental authority.

This policy may be updated; the last revision date is shown at the top of the page. We will notify you within the app of any material change.