Compliance by Region

We are committed to respecting data protection laws across every jurisdiction we serve. Our platform is designed with a shared, API-first database that adapts to regional legal requirements automatically.

Shared Database Architecture

My Pet and Friends uses a single shared Supabase database accessible across all platforms: web (desktop), mobile (responsive web), and any future native apps. Your data, preferences, and consent choices follow you everywhere β€” no silos, no sync conflicts.

Cross-Platform

One database powers desktop web, mobile web, and future iOS/Android apps.

Consent Roaming

Cookie preferences and privacy consents sync across every device.

Region Adaptive

Legal rules, disclosures, and data handling adapt automatically to your region.

Regional Data Protection Standards

πŸ‡ΊπŸ‡ΈUS

United States

Regulated by: Federal Trade Commission (FTC)

Age of Consent13+ years
Data Retention730 days max
Explicit Consent RequiredNo
Right to DeletionGuaranteed
Data PortabilityNot required
Breach NotificationWithin 60 days
Visit Federal Trade Commission (FTC)β†’
πŸ‡ͺπŸ‡ΊEU

European Union

Regulated by: European Data Protection Board (EDPB)

Age of Consent16+ years
Data Retention365 days max
Explicit Consent RequiredYes
Right to DeletionGuaranteed
Data PortabilitySupported
Breach NotificationWithin 3 days
Visit European Data Protection Board (EDPB)β†’
πŸ‡¬πŸ‡§UK

United Kingdom

Regulated by: Information Commissioner's Office (ICO)

Age of Consent13+ years
Data Retention365 days max
Explicit Consent RequiredYes
Right to DeletionGuaranteed
Data PortabilitySupported
Breach NotificationWithin 3 days
Visit Information Commissioner's Office (ICO)β†’
πŸ‡¨πŸ‡¦CA

Canada

Regulated by: Office of the Privacy Commissioner of Canada (OPC)

Age of Consent13+ years
Data Retention365 days max
Explicit Consent RequiredYes
Right to DeletionGuaranteed
Data PortabilityNot required
Breach NotificationWithin 30 days
Visit Office of the Privacy Commissioner of Canada (OPC)β†’
πŸ‡¦πŸ‡ΊAU

Australia

Regulated by: Office of the Australian Information Commissioner (OAIC)

Age of Consent13+ years
Data Retention365 days max
Explicit Consent RequiredNo
Right to DeletionGuaranteed
Data PortabilityNot required
Breach NotificationWithin 30 days
Visit Office of the Australian Information Commissioner (OAIC)β†’
πŸ‡―πŸ‡΅JP

Japan

Regulated by: Personal Information Protection Commission (PPC)

Age of Consent15+ years
Data Retention365 days max
Explicit Consent RequiredYes
Right to DeletionGuaranteed
Data PortabilitySupported
Breach NotificationWithin 30 days
Visit Personal Information Protection Commission (PPC)β†’
πŸ‡§πŸ‡·BR

Brazil

Regulated by: Autoridade Nacional de ProteΓ§Γ£o de Dados (ANPD)

Age of Consent18+ years
Data Retention365 days max
Explicit Consent RequiredYes
Right to DeletionGuaranteed
Data PortabilitySupported
Breach NotificationWithin 10 days
Visit Autoridade Nacional de ProteΓ§Γ£o de Dados (ANPD)β†’

Your Rights Across All Regions

Right to Deletion

Request your account and all associated data be permanently deleted. We comply within 30 days (or less where required by law).

Right to Access

Request a copy of all personal data we hold about you in a machine-readable format.

Right to Rectification

Correct any inaccurate or incomplete personal data we hold about you at any time.

Right to Restrict Processing

Request that we limit how we use your data while disputes are being resolved.