Privacy Policy – Amico Fido

The data controller is:

Pietro Petrocchi Maestri Comacini 29B, Morbio Inferiore, 6834, Switzerland info@amico-fido.com

This Privacy Notice applies to the Amico Fido mobile application (iOS and Android), the amico-fido.com website and related services, as well as to registered users and website visitors.

It also applies where we offer goods or services to individuals located in the European Union, the European Economic Area, Switzerland or the United Kingdom, or monitor behaviour taking place in those territories (for example through location-based features), in accordance with the data protection laws applicable there.

We collect identification data (name, email address, username), authentication data (password and identifiers provided by Apple or Google), profile data (photograph, language, time zone and telephone number, where provided), dog-related data (name, breed, age, weight, allergies, diet, medication, microchip, photographs, health status, daily checks, meal diary, expenses and care entries), user-generated content (posts, comments, stories, chat messages and reports), the history of conversations with Bia – our AI assistant (the text of questions asked and answers received, including where originating from voice input converted to text), location data (GPS coordinates, routes and a location saved for notifications), device motion or activity data where used to improve walk tracking, technical data (notification tokens, IP address, error information, app version and usage counts for features subject to soft limits), situation-simulator session data (scenario, steps, choices, assessments and AI feedback), data relating to AI-generated photomontages (including outcome, history and associated technical information), Business profile data (professional contact details, verification materials where uploaded and leads), and subscription data.

Registration and account. A name, email address and password are required to register. Users may also sign in through Google or Apple; in that case, we receive the data returned by the provider (such as email address and name) in accordance with the settings selected by the user. Time zone and a push-notification token may also be collected during registration.

Profile. Users may provide a profile photograph, preferred language, username, and privacy and notification settings.

Dog profiles. For each dog, users may enter the dog's name, breed, age, weight, colour, allergies, diet, medication, notes, microchip details, neutering status and photographs. The last known location and date may be entered for missing dogs. Daily wellbeing checks, meal-diary entries, expenses and health/wellness entries may also be recorded as described in the relevant sections.

Content. Users create posts, comments, stories, chat messages, reports and other community content, including images, videos and, where available, voice messages.

Voice input. Where available, users may use the microphone and speech recognition to dictate requests to Bia or issue voice commands; the audio may be converted into text by the operating system or the device's speech-recognition services before being sent to our backend as text.

Toxicity check. The feature for checking the toxicity of food and plants for dogs and cats requires an image or the name of the substance to be checked to be submitted.

Photomontages (AI). To generate a photomontage, users must upload a photograph; the image is sent to artificial intelligence providers for analysis and generation of the result. Where supported by the service, technical parameters or descriptive prompt text (including text derived from image analysis) may also be retained, together with the resulting image and creation history.

Situation simulator (AI). This feature allows users to work through interactive narrative scenarios. During a session, the simulation content (scenario text, steps, choices made, assessments and feedback) is processed and, where the user selects a dog, relevant dog-profile data held in our records (such as name, breed, age, weight, neutering status, allergies, medication, diet, notes and other profile information) is also processed to personalise the AI's responses. Supporting context based on the date, time and time zone associated with the account may be included. This content may be processed through artificial intelligence providers and retained as required to provide the service.

Business profiles. Professional users may create a business profile (for example, as a veterinarian, trainer or shop) by providing a business name, category, biography, town or city, service area, coordinates, contact details (telephone, WhatsApp, email and website), opening hours, services, images and, where required for verification, documents (such as qualifications or certificates).

Contact. A contact form is available on the website and collects the sender's name, email address and message.

Registration source. During registration, we may optionally ask how the user heard about Amico Fido. This information is used to understand the effectiveness of communication channels and improve the service, without individual advertising profiling.

Location. With the user's permission, we collect location data to display the map, nearby reports and missing dogs. Safe Walk also requires background location access while a walk is in progress. We may further retain a reference location (for example, to define the notification radius) in the user's settings. Map searches and calls to place or geocoding services may generate technical logs containing coordinates or search text, for the purpose of providing and protecting the service.

Motion and activity. During Safe Walk, where permitted by the operating system and the permissions granted, device motion or activity-type data (for example, walking) may be used to improve tracking quality. Such data is used solely in connection with the walk and is not used for advertising.

Microphone and speech recognition. If users activate voice commands or dictation, the device may process audio through system speech-recognition APIs (for example, Apple or Google services on the device). As a rule, we send the resulting text to our servers rather than the raw audio file, unless a different feature is expressly identified in the app.

Technical data. We collect the IP address, push-notification token, error and crash information (message, technical context, app version and platform) and, where necessary, usage counts for features subject to soft limits, to ensure that the service operates properly and to improve its quality. We may use specialist third-party services, in particular Sentry, to detect and analyse errors in the mobile app, in accordance with their respective privacy notices.

Website. On the website, we use Simple Analytics (Simple Analytics B.V., European Union) to obtain aggregate traffic statistics. It does not set profiling cookies, does not carry out personally identifiable tracking and is not used for behavioural advertising or remarketing. We do not use Google Ads conversion tags or other advertising or marketing tracking tools.

Cookies and similar technologies. The website uses strictly necessary technical cookies required for pages to operate (for example, NEXT_LOCALE for language preference). We use the Kukie.io platform to manage cookie consent and record users' choices (cookie banner and consent log). We do not use profiling cookies or cookies for behavioural advertising. We use Google reCAPTCHA v3 (Google) on website contact forms and other public forms to prevent spam and abuse; technical and interaction data may be processed in accordance with Google's privacy notice. For users in the United Kingdom, cookies and similar technologies are also governed by the PECR, in addition to the UK GDPR.

Legal pages loaded in the mobile app through WebView (privacy and terms in embedded mode) do not include the Kukie.io banner or Simple Analytics.

When accessing via Google or Apple, we receive the data returned by these providers. For subscriptions and in-app purchases we receive membership status information from specialised platforms that interface with digital stores (App Store, Google Play), in particular RevenueCat.

Personal data is processed to enable registration and authentication; provide the service; manage user and dog profiles (including daily checks, meal diary, expenses, wellness and Memory Diary); enable participation in the community (posts, stories, comments and chat); provide reports and geolocation features, Safe Walk and artificial intelligence-based features (including retaining conversational context between sessions to personalise responses from the AI assistant Bia and processing voice input converted to text); manage Business profiles and related leads and contacts; send push notifications; manage subscriptions and in-app purchases; apply soft usage limits to prevent abuse and ensure fair access to the service; provide moderation, security, support and user contact; analyse and improve the service; and comply with legal obligations.

Check-ins at dog areas, nearby-presence notifications, dog birthday reminders and address/place-search services are processed only to the extent necessary for the respective features to operate and in accordance with the settings selected by the user.

Depending on the circumstances, processing relies on one or more of the following legal bases (art. 6 GDPR / UK GDPR):

Where processing is based on legitimate interests, users may object as set out in the Rights section. Where processing is based on consent, users may withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal.

Registration requires name, email and password. Access via Google or Apple uses data returned by the provider. IP address, timezone and push notification tokens may be recorded at registration. Acceptance of the Terms and Conditions and this Privacy Policy is mandatory and is recorded with date and version.

User profile. Users may manage their name, profile photograph, language, time zone, username, privacy settings (for example, profile and username visibility) and location settings (enabling geolocation and setting the notification radius).

Dog profiles. For each dog, users may enter and update identity and health information, diary and memories (events, media and audio), as well as daily checks, meal-diary entries and dog-related expenses. The last known location and date may be entered for missing dogs.

Sharing. Dog profiles and diaries may be shared by link or QR code. Shared content is visible to anyone who has the link.

Web diary. Anyone with the diary link may view, on a page of the amico-fido.com website and without creating an account, the content the user has chosen to share (text, photographs, videos, places and any background music, if enabled). Sharing remains under the user's control and can be disabled in the app.

Visibility. Posts and stories are visible to community users according to settings. Comments are associated with posts and visible to users. Chat allows private messages between users. Reports are visible on the map according to service settings. Content visibility may vary depending on the feature used, account settings, content nature and sharing methods provided by the service.

Moderation. Text and images are subject to automatic checks to prevent inappropriate content. Content that violates the rules may be rejected or reported.

Location is required to create reports (dangers, lost dogs, etc.). Reports are displayed on the map and associated with the account. The map uses location to show clusters and nearby reports and to filter lost dogs based on the area of interest configured by the user.

Safe Walk requires permission to use location data in the background when the user actively starts a walk. During the session, the following may be processed and retained: start and end coordinates, route points (polyline), duration, distance, speed, estimated calories, pauses, approximate weather data, geotagged photographs taken during the walk, any device motion/activity data useful for tracking, and statistics associated with the user's profile.

Background location and heartbeat. To keep the session active while the screen is off or the app is in the background, the service may periodically send location updates to the server (heartbeat) and use a background geolocation plugin (in particular TransistorSoft Background Geolocation, acting as a technical service provider). This data is used to record the route, synchronise the session with the server, generate alerts about nearby hazards and retain walk history.

Public sharing and trusted circle. Where supported by the service and applicable subscription, users may enable real-time sharing with other users (trusted circle) or generate a public link for viewing the route. In such cases, the location and/or route may be visible to people authorised by the user or to anyone with the link, according to the selected settings. Sharing can be disabled in the app.

Hazard alerts. When users approach geolocated hazard reports, the app may display in-app alerts and, if configured, send a summary email solely to the user's own address. We do not send hazard-alert emails to unauthorised third parties.

Maps and third parties. Third-party mapping services, in particular Google Maps Static API, may be used for static route maps. Rounded coordinates may be sent to Open-Meteo for weather information. Services such as Ably may be used for real-time presence and messaging during Safe Walk.

Retention. Data from completed walks remains linked to the account to provide history, statistics and replay features until deleted by the user or until the account is deleted, unless legal obligations require otherwise. Users may stop tracking at any time by ending or discarding the walk.

Amico Fido may offer features supported by artificial intelligence technologies, such as informational chats (Ask Bia), checks on the toxicity of food, plants or substances, generation of dog-related descriptions, image or video analysis, image-generation photomontages, an interactive situation simulator and tools supporting training activities.

Requests to Bia may be typed or, where available, dictated; in the latter case, the recognised text (not necessarily the raw audio) is processed as conversation content.

To provide these features, certain content submitted by users, such as text, images, videos or dog-related data, may also be processed through third-party technology providers specialising in artificial intelligence services. Depending on the circumstances, these providers act as service providers or as independent parties under their own terms and privacy notices. The principal AI technology providers used include OpenAI, L.L.C. (San Francisco, CA, USA) and Google Gemini, in accordance with their respective terms and privacy notices.

These features are intended to provide information and support and improve the user experience. They are not a substitute for advice from qualified professionals, including veterinarians, behaviourists or trainers, where appropriate.

The artificial intelligence-based features offered by Amico Fido do not constitute automated decision-making within the meaning of art. 22 GDPR / UK GDPR that produces legal effects concerning the user or similarly significantly affects them. They are provided solely for informational and support purposes, and all decisions remain with the user.

Users should not enter into artificial intelligence-based features any personal data that is unnecessary, information that goes beyond what is relevant to the request, or content they do not wish to be processed in order to provide the service.

AI service providers may be based, or have servers, outside the European Union, Switzerland or the United Kingdom. Further information on international transfers is provided in section 21 and, for users in the United Kingdom, in the section dedicated to the United Kingdom.

We use the device notification token to send service-related push communications. Notifications may concern, for example: nearby hazard reports, missing dogs, community activity (posts, comments and reactions), chat messages, Walk Buddy invitations, Safe Walk updates, wellness reminders, dog birthdays, moderation outcomes, premium features and other technical or service notices.

For check-ins at dog areas, if users choose to notify others and the relevant preferences allow it, we may send notifications to friends or other nearby users according to the selected visibility, the location saved in settings, the radius applied by the service, blocks between users, anti-spam limits and the recipient's notification preferences. The recipient may infer that the dog or owner is, or was recently, at a particular dog area.

Notifications are delivered through specialist providers, in particular OneSignal and Apple/Google push services. They may include the minimum data needed for delivery and in-app navigation, such as notification type, dog identifier, dog name, area or destination screen. Users may disable notifications in the app and/or device settings; certain service communications may also be displayed as in-app notifications.

Marketing communications. Where electronic marketing communications (email or equivalent) are sent, the PECR also apply in relation to users in the United Kingdom. In such cases, we obtain consent or rely on another lawful basis available under those rules, and users may object at any time. Service notifications necessary for the app to operate do not constitute marketing.

Subscriptions (Amico Fido Club, Amico Fido Academy and similar) are managed through digital stores (App Store, Google Play) and through RevenueCat, a platform that verifies subscription status in connection with the stores. We do not receive credit card data; payments are handled by the stores. The support link may lead to donation pages managed by third parties; in that case payments are handled by the payment service provider.

Content is subject to automatic checks on text and images. Users may report inappropriate content and block other users. Suspicious chat messages may be quarantined. We record errors and activity to ensure security and proper service operation.

The "Contact us" form on the website collects name, email and message. It is protected by anti-spam tools. The app may offer a dedicated screen for contacting support.

Personal data may be disclosed to:

Some of these providers may be based, or have servers, in the United States or other countries outside the EU, EEA, Switzerland or the United Kingdom.

Personal data may also be disclosed to advisers, contractors, technology-infrastructure, hosting and storage providers, strictly to the extent necessary to provide and secure the service.

Some providers used by Amico Fido may be based, or have servers, in countries outside the European Union, the European Economic Area, Switzerland or the United Kingdom.

Where this occurs, personal data is processed in compliance with applicable law and, where required, on the basis of a transfer mechanism recognised by law, such as adequacy decisions or regulations, the European Commission's standard contractual clauses, the United Kingdom's International Data Transfer Agreement (IDTA) or the EU SCC with the UK Addendum for transfers subject to the UK GDPR, Binding Corporate Rules, or other appropriate safeguards, together with a transfer risk assessment (TRA) where required.

Adequacy decisions may apply between the EEA and the United Kingdom, permitting data flows without additional safeguards for as long as those decisions remain in force.

Further information about international transfers and the applicable safeguards may be requested using the contact details provided in this Privacy Notice.

Personal data is retained for no longer than necessary to achieve the purposes for which it was collected and processed, unless applicable legislation requires or permits longer retention periods.

Retention periods may vary depending on the category of data, the purpose of processing, the need to handle disputes or user requests, as well as applicable legal, tax, administrative or security obligations.

Active account data is generally retained until account deletion. Session data is retained for the time necessary to provide the service. Logs and error and security information are retained for a limited period, proportionate to monitoring, protection and debugging needs.

Content deleted by the user and data associated with the deleted account may be removed according to normal technical processes of retention, backup, cleanup and system security.

The user may request deletion of their account through the features available in the app. The procedure may require password confirmation or other security checks.

Upon deletion request, the account is deactivated and subject to a process of deletion, anonymisation or cleanup of associated data and content, within the limits and timeframes compatible with service operation, internal technical processes, legal obligations and any needs to protect the controller's rights.

Access tokens are revoked and main account-related features cease to be available. Some content or files on storage, cache or backup systems may be removed at a later time, according to normal technical retention and cleanup cycles.

Once the deletion procedure is complete, the account cannot be restored, except where retention of specific data is necessary for legal obligations, security reasons, abuse prevention or protection of the controller's rights.

Under the GDPR, the UK GDPR (where applicable) and the FADP, users may exercise the rights of access, rectification, erasure, restriction of processing, data portability and objection, and may withdraw consent where applicable. Users may also lodge a complaint with the competent supervisory authority: in Italy, the Garante per la protezione dei dati personali; in the United Kingdom, the Information Commissioner's Office (ICO, https://ico.org.uk); in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC); or the authority in the EU/EEA country where the user habitually resides or works. To exercise their rights, users may contact the controller using the contact details provided in sections 2 and 28.

The service is not intended for users who have not reached the minimum age required under applicable law to use digital services independently or validly provide consent (generally, at least 16 years of age in the European Union under the GDPR, unless national law provides otherwise; at least 13 years of age in the United Kingdom for information society services under the Data Protection Act 2018; and 13 years of age in the United States under COPPA), unless the holder of parental responsibility is involved where required.

The service is not designed to be directed at children. If we become aware that a child's personal data has been collected in breach of applicable law, we will take reasonably necessary steps to delete that data or restrict its processing. In the United Kingdom, if the service were likely to be accessed by children, the principles of the ICO's Age Appropriate Design Code would also be taken into account.

Passwords are processed and stored with appropriate technical measures, according to suitable security standards. Communications are protected via cryptographic protocols. Access to data is limited to authorised personnel. Moderation measures and controls are in place to prevent abuse and ensure service security.

This policy may be updated to reflect changes to the service or legislation. Significant changes will be communicated via the app or email. The date of last update is indicated at the top of the document.

For privacy questions or to exercise your rights:

Pietro Petrocchi Maestri Comacini 29B, Morbio Inferiore, 6834, Switzerland info@amico-fido.com

The following information supplements this Privacy Policy for users who reside in the United States, with particular reference to California residents and other States that provide specific privacy rights, where applicable.

1. Scope of application. This section applies to users who reside in the United States and use the Amico Fido mobile application, website or related services. The applicability of specific laws (such as the California Consumer Privacy Act and its amendments) depends on the thresholds and requirements set out in each regulation. In case of doubt about applicability, you may contact the controller at the contact details indicated below.

2. Categories of personal data collected. In line with what is described in the preceding sections, the categories of personal data that may be collected include: identifiers (name, email, username), authentication data (password, identifiers provided by Apple or Google), profile data (photo, language, timezone), dog-related data (name, breed, age, weight, allergies, photo, health status), user-generated content (posts, comments, stories, chat messages, reports), location data (GPS coordinates, routes, including tracking during Safe Walk), technical data (notification tokens, IP address, error and app version information), data from situation simulator sessions (scenario, steps, choices, AI evaluations and feedback) and data relating to AI-generated photomontages (including outputs, history and related technical metadata), and subscription-related data. Where applicable law so provides, precise location data may qualify as sensitive information.

3. Sources of personal data. Data is obtained directly from the user (registration, profile, content, settings), from the device (location, tokens, technical data), from third parties (Google, Apple, subscription platforms and digital stores) and, on the website, from privacy-oriented analytics tools.

4. Purposes of use. Data is used for service delivery, account and profile management, community, reports, Safe Walk, AI-based features, push notifications, subscriptions, moderation, security, support and service improvement, as described in the preceding sections.

5. Categories of third-party recipients. Data may be disclosed to artificial intelligence, moderation, push notification, real-time chat, maps and geolocation, payment and subscription, analytics and monitoring service providers, as well as to authentication providers (Google, Apple), consultants, collaborators and infrastructure, hosting and storage providers, to the extent necessary for service delivery and security. Some of these parties have their headquarters or servers in the United States.

6. Privacy rights recognised to residents in the United States, where applicable. Where applicable law so provides, residents in the United States may have the right, among others, to: know the categories and purposes of data collection and use; access personal data; request deletion; request rectification; request data portability; object to or limit certain uses; not be discriminated against for exercising such rights. The existence and scope of such rights depend on the applicable law and applicability thresholds.

7. Sale, sharing and targeted advertising. Amico Fido does not sell personal data in the commonly understood sense and, based on the current configuration of the service, does not appear to engage in the sale or sharing of personal data for cross-context behavioral advertising or targeted advertising purposes, subject to any different legal classifications under applicable law.

8. How to exercise your rights. To exercise the rights provided by applicable law, you may contact the controller at the contact details indicated in the "Contacts" section of this policy, specifying, where possible, the right you wish to exercise and the information useful to identify your account.

9. Identity verification. To protect personal data, the controller may require identity verification before processing requests for access, deletion or portability. Verification methods will be proportionate to the type of request and the privacy risk.

10. Non-discrimination. Where applicable law so provides, the controller will not discriminate against users for having exercised their privacy rights, for example by applying different prices or denying access to the service, except where differential treatment is permitted or required by law.

11. Privacy contacts. For questions about this section or to exercise the rights of residents in the United States: Pietro Petrocchi, Maestri Comacini 29B, Morbio Inferiore, 6834, Switzerland, info@amico-fido.com.

12. COPPA. The service is not directed to children under the age of 13 and does not knowingly collect personal information from children under the age of 13. If we become aware that we have collected data from a child under the age of 13 without verifiable parental or guardian consent, we will take reasonable steps to remove such data.

Within the Amico Fido service (in particular via the mobile application) a feature may be available that lets you upload a photograph (for example of your dog alone or with people in the same frame). The image is sent to artificial intelligence providers for analysis and to generate an edited image (photomontage). The output may be stored in your account together with a history of generations, as provided by the service.

You choose voluntarily which photos to upload. You should obtain any necessary consent from people shown in the photo before uploading. Processing follows the purposes described in the section on AI-based features and international transfers; the individual technology providers’ terms may also apply.

For service, security and technical support purposes, the English-language prompt text used by the system for generation (following image analysis) may also be stored, together with the output image and metadata associated with the creation.

When a user (including users who are not logged in) submits an “I saw this dog” report through the flow linked to the dog’s QR tag, the following data may be processed: optional name, email address and/or phone number (at least one is required so the owner can reply), descriptive text, a photograph and geolocation coordinates if the reporter chooses to include them.

Purposes: to let the owner (and authorised co-owners) of the affected dog receive the report and contact the reporter solely about that sighting; we do not use these contact details for marketing or unrelated purposes.

Recipients: the controller and necessary technical processors (hosting, email delivery, database). The reporter’s contact details are visible only to the owner/co-owner of the dog concerned, in line with the app’s settings.

Legal basis: explicit consent of the reporter to use the contact details provided (Art. 6(1)(a) GDPR); legitimate interests of the dog’s owner in receiving a report about their lost dog (Art. 6(1)(f) GDPR), balanced with the reporter’s rights. For photos and location, the legal bases described elsewhere in this policy apply where relevant.

Retention: data are kept for as long as needed to handle the lost-dog case and, as stated in the app at the time of submission, for up to 90 days after the lost-dog report for that dog is closed (i.e. when the dog is no longer marked as lost), unless a longer period is required by law or to establish, exercise or defend legal claims.

Rights: reporters may exercise GDPR rights (access, rectification, erasure, restriction, objection where applicable, complaint to a supervisory authority) by contacting the controller at the details in the Contacts section of this policy and specifying the report concerned.

Walk Buddy (and related discovery/playmates features) lets you search for other dog owners in an area you choose. To provide the service, we may process: dog profile identifier, photo, compatibility tags, visibility preferences, search area (coordinates and radius), approximate distance in kilometres to other active profiles, contact requests, matches and related messages.

Where available, you may browse or search in an area without being visible to others until you explicitly activate your visibility. Your exact location is not shown to other users: an approximate representation (zone/area) is used to calculate distances and suggestions.

Purpose: to facilitate consensual meetings between owners for joint walks, manage requests and match-related chat, prevent abuse and improve the service experience. Data is retained for as long as needed to manage the discovery profile, active connections and pending requests, until you deactivate the feature or delete your account.

The dog social profile lets you display selected information to other platform users (name, photo, tags, temporary statuses, sociability preferences, availability). You control activation and visibility from the app settings.

Temporary statuses (for example "looking for companions", "on a walk", "do not disturb") may be visible according to your settings and may affect discovery and notifications.

The public profile accessible via QR or link (tag/collar card) may show information useful if the dog is found, distinct from the internal community social profile. You are responsible for information made public via QR, link or sharing settings.

The wellness section lets you record health and care data for your dog, such as vaccinations, veterinary visits, treatments, batch numbers, reminders and notes. Such data is linked to the dog profile and accessible to authorised users on the account (owner and co-owner, where configured).

Purpose: to let you keep an organised history of your pet's health and receive useful reminders. Wellness data does not replace official clinical records and is not automatically shared with veterinarians or third parties unless you explicitly choose to do so.

Retention: until manual deletion of entries, removal of the dog profile or account deletion, subject to legal obligations.

The dog horoscope feature is for entertainment purposes only. Generated content does not constitute veterinary, behavioural or predictive advice.

To generate entertainment text, minimal dog profile data already in the app may be used (for example name and zodiac sign derived from date of birth). We do not send health data, location, chat or other sensitive dog information to artificial intelligence models for this feature beyond what is strictly necessary for the configured entertainment text.

The Bia digest is a periodic summary generated by the AI assistant that may aggregate, where available and enabled by you, information from different areas of the app: wellness reminders, diary notes, recent activity and relevant messages from service-related chats.

To generate the digest, such content may be processed through artificial intelligence providers (in particular OpenAI) solely to produce the requested or configured summary. You may disable or ignore this feature where provided in settings.

We do not use the digest for advertising profiling. Generated digests are retained for as long as needed to show their history in the app, unless deleted by you or upon account deletion.

Amico Fido may offer or integrate GPS hardware devices (collars/trackers) and associated cloud services. When you link a device, we may process: device identifier, association data with the dog profile, GPS location of the device, route history, battery status, geofence events, connectivity data and technical logs necessary for operation.

Purpose: dog location, movement history, virtual fence, alerts when leaving safe zones, integration with the danger map and premium app features. Data may transit through M2M/SIM connectivity gateways or GPS service cloud infrastructure.

Device location is visible to authorised users on the dog's account (owner/co-owner). We do not sell device location data to third parties for marketing. Retention as indicated in GPS service settings and until device disassociation or account deletion, subject to legal obligations.

Stories are temporary visual content visible to community users according to service settings. By default, a story may be available for a limited period (typically up to 24 hours from publication), unless different technical or product configurations apply.

We may process: image or video, publication metadata, views (viewer tracking) and related interactions. Views are used to show the author who viewed the story and to prevent abuse.

Stories follow the same community content moderation rules. You are responsible for published content and its compliance with the Community Guidelines.

The app offers private messaging between users, community chat (themed rooms) and chat linked to lost dogs or Walk Buddy. Messages may include text, images and, where provided, other attachments.

Messages are stored on our systems and with technical providers (including real-time chat services) to enable delivery, history, moderation and security. Chats do not use end-to-end encryption: the controller and involved technical providers may access content to the extent necessary for service provision, moderation, security and legal obligations.

You should not send unnecessary sensitive data in chat. In case of abusive conduct, you may block other users and report content.

The app mainly distinguishes two types of report:

For geolocated reports we may process text, media, coordinates, category and associated metadata. For content reports we process information necessary to review the report.

Local drafts. To improve user experience, report drafts or forms (for example create-report) may be saved temporarily in local device memory (MMKV/AsyncStorage) until you complete or cancel submission. Such drafts are not synced to other devices unless explicitly submitted.

The app may offer access via device biometric recognition (Face ID, Touch ID, Android fingerprint) to unlock the app or reopen an already authenticated session. Biometrics are managed by the operating system: Amico Fido does not receive or store fingerprints or biometric templates.

Credentials and tokens. Passwords, session tokens and sensitive preferences may be stored in secure device stores (in particular Expo SecureStore on iOS/Android). Other configuration and cache data may reside in local app storage (MMKV/AsyncStorage) for offline operation, performance and session recovery.

You are advised to protect your device with a system passcode/biometric and not to share login credentials.

Distinct from sighting reports (section 31), the "Contact owner" form — available on the lost dog's public profile (app and website) — lets anyone with information send a message to the owner.

We may process: name, email and/or phone (at least one required), message text, acceptance of Privacy Policy and Terms, optional anti-abuse token (reCAPTCHA on the web) and technical submission metadata.

Purpose: to forward the message to the owner (and authorised co-owners) solely to manage the loss. The sender's contact details are visible to the owner to enable follow-up. Legal basis: sender's consent (Art. 6(1)(a) GDPR) and legitimate interest of the owner in receiving communications about their lost dog (Art. 6(1)(f) GDPR).

Retention: for as long as needed to manage the loss and up to 90 days after the "lost" status for that dog is closed, subject to legal obligations. The sender may exercise GDPR rights by contacting the controller at the details in this policy.

The dog-area check-in feature allows the user, only if enabled in settings and started manually, to indicate that they are in a specific dog area with one of their dogs for a limited time. The check-in expires automatically when the selected timer ends or can be closed earlier by the user.

To provide the feature we process: user identifier, dog identifier, dog-area or reported-place identifier, check-in status, check-in time, expiry, possible checkout, visibility preferences, notification preferences and technical data needed to prevent duplicates, abuse and repeated notifications. When the dog area is not yet present on the map, the user may report it and check in to a place that has not yet been verified; in this case, report data, coordinates and moderation status may also be processed.

Visibility. Depending on the settings chosen by the user, the check-in may be visible only to the user, to friends or to all platform users who can access that feature. The map may show an aggregated count of dogs present in an area; authorised users may see the dog present and open its social/public profile according to the available settings. Blocking between users limits visibility and interactions as provided by the service.

Notifications. If the user chooses to notify others and the preferences allow it, we may send check-in notifications to eligible nearby recipients or friends, based on the selected visibility, the location saved in settings, the radius configured by the service, blocks and the recipient's notification preferences.

The feature is intended for spontaneous and consensual meetings between dog owners and must not be used to monitor, follow or harass other people. A check-in reveals or may allow others to infer the recent presence of the user and dog in a specific area: the user should activate it only when they want to make that information visible.

Retention. Active check-ins are visible until expiry or checkout. Data relating to expired check-ins, sent notifications, cooldowns and technical logs may be retained for a limited period proportionate to operation, security, abuse prevention, troubleshooting and dispute handling purposes, unless legal obligations or account deletion procedures require otherwise.

Daily health check. Users may record daily wellbeing indicators (for example, appetite, water intake, energy and stools) and their respective status for each dog and date. The data is linked to the account and dog profile, may be used in summaries or digests, and remains private unless the user expressly enables a sharing feature.

Meal diary. This allows users to record meals, foods, quantities/calories and any dog-related attachments in order to maintain a dietary history. It does not constitute veterinary nutritional advice.

Dog expenses. This allows users to record amounts, currency, category, title, notes and optional links to health entries. This is financial information entered by the user for personal organisation; we do not process payment-card data through this feature.

Legal basis: performance of a contract for the features requested by the user. Retention: until the entries, dog profile or account are deleted, unless legal obligations require otherwise.

Where available, Amico Fido may request access to the microphone for voice commands (for example, to open maps or create a report) or to dictate requests to the AI assistant Bia.

Processing. Speech recognition is typically performed by the operating system's or device manufacturer's APIs (for example, Apple Speech Recognition or Google Speech Services). Audio may be processed on the device; as a rule, what we receive and retain to provide the feature is the transcribed text and necessary technical metadata, rather than a permanent archive of dictation audio files, unless expressly stated otherwise in the app for a specific feature (for example, voice messages or diary audio).

Purposes: to enable hands-free interaction and accessibility. Legal basis: performance of a contract and, for microphone access, the operating-system permission granted by the user. Users may withdraw microphone/speech-recognition permissions in the device settings; voice features will then no longer be available.

Amico Fido may allow Business profiles (for example, veterinarians, trainers, groomers and shops) to be created and displayed on the map or in dedicated sections.

Data processed. This may include: professional name, category, headline, biography, town or city, service area, coordinates and radius, contact details (telephone, WhatsApp, email, website and booking), social media details, logos and galleries, services, opening hours, languages, profile status, plan and subscription status, Stripe identifiers where used for billing, viewing/contact metrics, verification documents uploaded by the user (for example, a diploma or certificate in PDF format), and messages/leads from prospective clients (name, email address, telephone number and message).

Purposes: to present the business to users, manage verification and subscriptions, enable contact between users and professionals, and prevent abuse. Verification documents are accessible to the controller and authorised personnel for review; leads are visible to the intended professional recipient.

Legal basis: performance of the contract with the professional; legitimate interests in security and preventing abuse; the sender's consent for contact forms where required. Retention: for the duration of the profile/subscription and for the periods required for verification, accounting, disputes and legal obligations; verification documents may be kept for as long as necessary for assessment and any subsequent obligations, then deleted or restricted in accordance with internal processes.

To prevent abuse, ensure stability and provide fair access to high-cost features (for example, certain AI requests, photomontages or simulator sessions), we may record account-linked usage counts (feature, status, reservation token and timestamp).

This data is not used for behavioural advertising. Legal basis: performance of a contract and legitimate interests in protecting the infrastructure. Retention: for the period needed to apply the limits (for example, until the usage period resets) and for a limited technical period for anti-abuse diagnostics, unless legal obligations require otherwise.

The following information supplements this Privacy Notice for individuals located in the United Kingdom. The controller is established in Switzerland and has no establishment in the United Kingdom; however, the UK GDPR may apply where we offer the app or website to individuals in the United Kingdom or monitor behaviour taking place in the United Kingdom (art. 3(2) UK GDPR), for example through geolocation features.

1. Applicable law. The UK GDPR and the Data Protection Act 2018 apply, as amended from time to time (including, where in force in relation to the relevant provisions, by the Data (Use and Access) Act 2025). The PECR also apply to cookies and certain electronic communications.

2. Controller and contact details. The controller remains Pietro Petrocchi, whose contact details are provided in sections 2 and 28. No Data Protection Officer (DPO) has been appointed; privacy enquiries may be sent to info@amico-fido.com.

3. United Kingdom representative (art. 27 UK GDPR). As the controller is not established in the United Kingdom and offers services to users in the United Kingdom, it may be required to appoint a representative in the United Kingdom, subject to the limited statutory exemptions. As at the date of this Privacy Notice, a UK representative has not yet been appointed. Once appointed, the representative's name and contact details will be published in this section and made readily accessible. In the meantime, users in the United Kingdom may exercise their rights and contact the controller directly. Appointment of a representative, when made, does not limit the controller's responsibility.

4. Categories, purposes and legal bases. These remain as described in the preceding sections of this Privacy Notice, interpreted by reference to the corresponding articles of the UK GDPR.

5. International transfers from the United Kingdom. Where personal data subject to the UK GDPR is transferred outside the United Kingdom, we use mechanisms recognised under UK law, including United Kingdom adequacy regulations, the International Data Transfer Agreement (IDTA), the EU standard contractual clauses with the UK Addendum, or other appropriate safeguards, together with a transfer risk assessment (TRA) where required.

6. Rights. Users in the United Kingdom have the rights provided by the UK GDPR (access, rectification, erasure, restriction, portability, objection, withdrawal of consent where applicable, and rights relating to automated decision-making where relevant). They may lodge a complaint with the Information Commissioner's Office (ICO): https://ico.org.uk — Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom.

7. Children. For information society services in the United Kingdom, the age of consent to processing is generally 13 (Data Protection Act 2018). The service is not intended for anyone under 13. See also the Children section.

8. Marketing and PECR. We do not use advertising-profiling cookies. Any marketing emails sent to users in the United Kingdom will comply with the PECR (consent or another lawful basis) and will include an opportunity to object. Push notifications and service emails necessary for the contract are not marketing for PECR purposes.

9. Precise location. Where United Kingdom law or ICO guidance so requires, precise location may be processed with particular regard to risk; Safe Walk and similar features are activated by the user and described in the relevant section.

10. How to exercise rights. Contact info@amico-fido.com, specifying where possible the relevant account and the right being exercised. We may request reasonable information to verify identity.