Consumer Health Data Privacy Policy

This policy explains how PETFENA LLC (“PetFena,” “we”) collects, uses, shares and deletes consumer health data as Washington's My Health My Data Act defines it. It applies to every pet parent and sitter, wherever they live. It adds to our Privacy Policy; where this policy is stricter, this policy applies.

1. The consumer health data we collect

• Biometric data from the ID check: the photo of your government ID (which shows your face) and the selfie you take during account setup, and the result of comparing the two faces. We never create or keep a face template or faceprint; our AI service provider compares the two images and returns a result.
• Re-check selfies (sitters): a new selfie we may ask a sitter for after their bank account, login or device changes, compared with their verified selfie.
• Health information you choose to send us: for example a doctor's note you upload to support an emergency cancellation, or health details you mention in a support message or to our AI assistant.

We don't collect precise location to find out whether someone visits a health care provider, and we don't geofence health care facilities. Pet health records (vaccinations, vet notes about pets) are about animals, not people, and are covered by our Privacy Policy.

2. Where it comes from

Directly from you, when you upload your ID and selfie, take a re-check selfie, or send us a document or message. The face comparison result comes from our AI service provider, working for us.

3. Why we collect and use it

• To confirm you are who you say you are and are 18 or older, before you can use PetFena.
• To keep accounts secure and prevent fraud: one account per person, and confirming it's still a sitter's own account after a sensitive change.
• To handle the emergency, support request or question you sent it with.

We collect biometric data only with your consent, which you give with its own checkbox before you upload your ID and selfie. We never sell consumer health data, never use it for advertising, and never use it for any purpose other than the ones listed here without asking you first.

4. Who we share it with

We share consumer health data only with service providers that process it for us under a written contract and may not use it for anything else:

• Groq (AI service provider): your ID photo and selfie, and re-check selfies, to compare faces and read the ID. Groq may not use them to train its models.
• Supabase (database and file storage) and Vercel (app hosting): to store and run PetFena.

Inside PetFena, only our review staff can open ID photos and selfies, only while a check needs a decision, and every time they do it is logged. ID photos and selfies are never shown to other members. We don't share consumer health data with any affiliate. We disclose it to anyone else only if the law requires it (for example a court order), and we will tell you if we're allowed to.

Sitter background checks are run by Yardstik, which may ask a sitter to verify their identity with an ID scan and selfie through its identity provider, Persona. That happens in Yardstik's own form under Yardstik's privacy and biometric policies, and PetFena never receives those images. Background check information is governed by the federal Fair Credit Reporting Act and is not covered by this policy.

5. How long we keep it

• ID photos: deleted 30 days after the ID check is decided.
• Pet parent selfies: deleted 30 days after the ID check is decided.
• A verified sitter's selfie: kept privately while they are an active sitter, only for the re-checks above. Deleted when the account is closed, or 30 days after we disable it.
• Re-check selfies: deleted as soon as the re-check is decided.
• What our check read from your ID (name, date of birth, address, ID number digits): cut down to the result 30 days after the check is decided.
• Health information you sent us: kept with the request it came with, and deleted when you close your account, unless it is evidence in an open dispute.

If a dispute about one of your stays is open, we keep what it needs until the dispute is resolved. Deleted data can stay in our hosting provider's encrypted backups for a short time until they are overwritten, never more than 6 months.

6. Your rights

• Know and access: ask whether we collect, share or sell your consumer health data, get a copy, and get a list of every third party and affiliate we shared it with, with their contact details.
• Withdraw consent: withdraw your consent at any time. Because the ID check is required to use PetFena, withdrawing it closes your account.
• Delete: ask us to delete your consumer health data. We delete it from our systems and tell every service provider that has it to delete it too.
• Appeal: if we turn down your request, you can appeal (see below).

To make a request, email privacy@petfena.com from the email address on your account, or use Download my data and Delete my account in the app. We may ask you to confirm it's you. We answer within 45 days; if we need more time, we will tell you why within those 45 days and finish within 45 more. Requests are free, up to twice a year. We will never treat you differently for using these rights.

To appeal a decision, reply to our answer with the word “Appeal” within 45 days. Someone who did not make the first decision will review it and answer in writing within 45 days, explaining the outcome. If you're not satisfied, you can contact the Washington State Attorney General at www.atg.wa.gov/file-complaint.

7. Changes and contact

If we want to use or share consumer health data in a new way, we will ask for your consent first. We will post any change to this policy here and tell you about material changes by email or in the app. Questions: privacy@petfena.com, or PETFENA LLC, 13215 SE Mill Plain Blvd Ste C8 #3100, Vancouver, WA 98684.