Petory Privacy Policy
Established: September 25, 2026
Last updated: September 25, 2026
Verdo Lab ("we", "us") sets out this Privacy Policy (this "Policy") for how we handle user information in the iPhone and Android app "Petory" and its related websites (together, the "Service").
1. Operator
- Operator: Verdo Lab
- Address: Wind Ebisu Bldg. 8F, 2-4-8 Ebisu-nishi, Shibuya-ku, Tokyo 150-0021, Japan
- Contact: contact@verdolab.com (Japanese and English)
* The name of the representative will be disclosed without delay on request through the contact above.
2. Information we collect
- Account information: As a guest, only an anonymous account ID is used; we do not collect your email address. If you move from guest to a Google or Apple account, we receive your email address and display name from that service. If you choose Apple's "Hide My Email", we receive the relay address Apple provides.
- Information you enter: your pet's profile (name, species, birthday, etc.; all optional), daily records (weight, meals, water, toilet, medication, etc.), concerns written in your own words, drafts for vet visits, and photos with short notes.
- Purchase information: status and period of your "Petory Pro" subscription. Payment is handled by the App Store or Google Play; we never receive your credit card number or other payment details.
- Technical information: authentication tokens that keep you signed in, your support ID, and technical data that each service receives when your device communicates with the server (such as IP address and app/OS type).
We only receive photos that you choose or take yourself. The app asks for access to your photo library or camera only when you choose or take a photo. Photos are re-encoded on your device before upload, so location data (EXIF) is not stored. We store only a small image (600px on the long side) and a display image (1200px), not the original photo.
Notifications are local notifications, scheduled and shown on your device only if you turn them on (for example, record reminders). We do not use a notification server.
The Service does not collect your location or contacts.
The current version of the app contains no analytics, crash-reporting or advertising tools (SDKs). If this changes, we will update this Policy and let you know in advance.
Health records about your pet are not health information about you, but we handle them as carefully as personal information.
3. How we use information
- To sign you in and confirm your identity
- To provide the Service, such as saving and syncing records and photos
- To create the sheet (PDF) you show your veterinarian
- To check and manage your paid-plan status
- To respond to questions and deletion requests
- To investigate problems and improve the Service (based on what you tell us in inquiries)
- To respond to violations of the Terms of Use
- To send important notices about the Service
If we change a purpose of use, we will do so only within a scope reasonably related to the original purpose and will publish it by updating this Policy.
4. Service providers we use
- Firebase (Google LLC, USA): sign-in (Firebase Authentication), database (Cloud Firestore), photo storage (Cloud Storage; only the two images above) and server-side processing (Cloud Functions). Records and photos are set to be stored in Google's Tokyo region (asia-northeast1).
- RevenueCat (RevenueCat, Inc., USA): managing "Petory Pro" purchase status. RevenueCat processes purchase information and an anonymous in-app user ID. Billing itself is done by the App Store or Google Play.
When you move to a Google or Apple account, we use the sign-in services of Google LLC (USA) or Apple Inc. (USA) and receive your email address and display name from them.
5. Transfers outside Japan
Records and photos are stored in the Tokyo region, but Google LLC and RevenueCat, Inc. are US companies and may handle information from the United States or other countries for operation and maintenance. Purchase information processed by RevenueCat may be stored on servers in the United States or elsewhere. These are entrustments necessary to provide the Service, and we use only providers that we have confirmed take appropriate security measures in line with Japan's Act on the Protection of Personal Information.
6. Sharing with third parties and advertising
- We do not provide personal information to third parties without your consent, except where required by law or necessary to protect a person's life, body or property.
- We do not sell your information.
- The app shows no ads and does no ad tracking.
7. Security
We take necessary and appropriate measures to prevent leaks, loss or damage of personal information, including encrypted communication (TLS), access control and careful management of credentials.
8. Storage and deletion
- In the app, go to "More" (「もっと」) and choose "Delete all data" (guests) or "Delete account" (if you moved to Google or Apple). After two confirmation steps and typing your household name, the server deletes your records, photos and account immediately. If you use a Google or Apple account, you sign in again right before deleting to confirm it is you; for Sign in with Apple, the app also revokes the Apple token. Copies that may remain in backups are gone within 30 days. Deleted data cannot be restored.
- Deleting your account does not delete purchase records kept by the App Store, Google Play and RevenueCat, which are needed for accounting and refunds. Records at RevenueCat are linked only to a pseudonymous in-app user ID, not to your name or email address.
- Guest data that has not been used for 365 days is deleted automatically, because once the app is removed there is no way for a guest to prove who they are.
- If you cannot open the app, you can ask us by email. See Delete Account & Data.
- As proof of the procedure, we keep a deletion record containing only the account ID and dates for 365 days, and then erase it.
- Before deleting, you can save your records with "Export records" (「記録を書き出す」) in the app.
9. Your requests
Under Japan's Act on the Protection of Personal Information, you may ask us to disclose, correct, add to or delete your personal data, stop using or erase it, or stop providing it to third parties. Please contact us below. After confirming your identity, we will respond without delay as required by law. Much of what you entered can also be viewed, corrected and deleted directly in the app.
10. Using Petory as a guest
As a guest, your records are tied to "this app on this device" and an anonymous account. If you delete the app or change devices, you will not be able to open them again. To keep your records, we recommend moving to a Google or Apple account.
11. Children
The Service is not intended for children under 13. If we learn that we have collected personal information from a child under 13, we will delete it promptly.
12. Our website
Our website (petory.verdolab.com) is delivered through Cloudflare, which may set cookies that are technically necessary to protect the site. We do not use analytics tools on the website. Headings use Google Fonts, so opening a page sends your IP address and similar data to Google's servers to deliver the fonts.
13. Changes to this Policy
We may update this Policy when laws or the Service change. For important changes, we will let you know in the app or on our website before they take effect.
14. Contact
- Operator: Verdo Lab
- Address: Wind Ebisu Bldg. 8F, 2-4-8 Ebisu-nishi, Shibuya-ku, Tokyo 150-0021, Japan
- Email: contact@verdolab.com