Legal
Privacy policy
Last updated 28 October 2026
This policy explains what personal data Furkin collects, why, who else handles it, and what you can do about it. We have tried to write it in plain language. If anything is unclear, email us at lisa@pixelwitch.dev.
Who we are
Furkin is made by Pixel Witch, a sole proprietorship (eenmanszaak) based in The Hague, the Netherlands, registered with the Dutch Chamber of Commerce (KvK) under number 96974990.
Pixel Witch is the controller of the personal data described in this policy. That means we decide how and why it is used, and we are responsible for handling it properly under the General Data Protection Regulation (GDPR).
Contact: lisa@pixelwitch.dev
What this policy covers
- The Furkin app for iOS and Android.
- The Furkin website at furkin.app, including the waitlist.
- Emails we send you and emails you send us.
What we collect
Information you give us
- Your account: your name, email address and, if you add one, a profile photo. If you sign in with Apple or Google, we receive your name and email address from them. Apple may give us a private relay address instead of your real email if you choose that option.
- Your Household: the Household name, who is in it, their roles, and pending invitations (including the email address of the person you invite).
- Your pets: pet profiles (such as name, species, breed, birthday and photo), care routines, feeding and medication schedules, health records, weights, documents you upload, and contact details you save, such as your vet, groomer or pet sitter.
- Activity logs: what was done, for which pet, by whom and when. For example, "Mallow was fed at 08:10 by Lisa".
- Notes and photos you add to pets, routines or activities.
- Support messages: what you write when you contact us, and our replies.
- Waitlist: the email address you give us on the website.
- Subscriptions: if you buy a Duo or Family plan, Apple or Google tells us which plan you have, whether it is active, when it renews, and a transaction ID. We never receive your card or bank details. Apple and Google handle the payment.
Information collected automatically
- Push notification tokens: a device identifier that lets us send reminders to your phone, if you allow notifications.
- Technical data needed to run the service: such as your sign-in session, app version, device type and operating system, and server logs (which include IP addresses) that help us keep the service secure and fix errors.
- Website statistics: we use Plausible, which measures visits without cookies and without collecting personal data or tracking you across sites. It only gives us totals, such as how many people visited a page.
What we do not collect
- We do not use advertising trackers and we do not sell your data.
- We do not track your location.
- We do not need your human health information. Health records in Furkin are about your pets. Please do not add sensitive information about yourself or other people.
Information about other people
Some data in Furkin is about people who may not use the app, such as your vet's contact details, or people who appear in photos you upload. Please only add this if you have a good reason to and it is fair to the people involved. When you invite someone to your Household, we use their email address only to send the invitation.
Who can see your data
Furkin is built for sharing within a Household. This is important to understand:
- Everyone in a Household can see that Household's pets, routines, health records, documents, contacts and activity logs, within the limits of their role.
- Other members can see your name, profile photo and the activities you logged in any Household you belong to.
- The Household owner decides who is invited and what roles they have. Owners and members with editing rights can change or delete shared information.
- People outside your Household cannot see your Household's data. There are no public profiles.
We, Pixel Witch, can technically access stored data, but we only do so when it is needed to provide support you ask for, keep the service secure, fix a problem, or meet a legal obligation.
Why we use it, and our legal basis
Under the GDPR we must have a legal basis for each use of your data.
| What we do | Why | Legal basis |
|---|---|---|
| Create and run your account, Households, pet profiles and activity logs | To provide the app you signed up for | Performance of a contract (Art. 6(1)(b) GDPR) |
| Send invitations to people you invite | Because you asked us to | Performance of a contract with you; our legitimate interest in letting you share your Household |
| Send reminders and push notifications | Because you turned them on | Performance of a contract, and your device permission which you can withdraw at any time |
| Send essential service emails (sign-in links, security notices, changes to these terms) | To run your account safely | Performance of a contract; legitimate interest |
| Email you when Furkin launches, if you joined the waitlist | Because you asked us to | Consent (Art. 6(1)(a) GDPR), which you can withdraw at any time |
| Answer support requests | To help you | Performance of a contract; legitimate interest |
| Keep the service secure, prevent abuse and fix errors | To protect you, other users and Furkin | Legitimate interest (Art. 6(1)(f) GDPR) |
| Count website visits with Plausible | To understand which pages are useful | Legitimate interest (no personal data is collected) |
| Check which plan you have and unlock its features | To provide the plan you paid for | Performance of a contract |
| Keep financial records of subscriptions | Because Dutch tax law requires it | Legal obligation (Art. 6(1)(c) GDPR) |
Where we rely on legitimate interest, we have weighed our interest against your rights, and you can object at any time (see Your rights).
We do not use your data for automated decisions that have legal or similarly significant effects on you, and we do not use it for profiling or advertising.
Who processes it
We use a small number of trusted service providers (processors) to run Furkin. They may only use your data to provide their service to us, under a data processing agreement.
- Supabase (database, file storage and authentication). Data is stored in the EU, in Frankfurt, Germany.
- Vercel (website hosting).
- Resend (sending emails, such as sign-in links, invitations and the launch email).
- Plausible (cookieless website statistics, hosted in the EU).
- Expo (delivering push notifications to your device, together with Apple Push Notification service and Google Firebase Cloud Messaging).
- Apple and Google (Sign in with Apple, Sign in with Google, app distribution, and subscription payments through the App Store and Google Play). When you use their services, they also process data under their own privacy policies. For payments, they act as independent controllers, not as our processors.
We may also share data if the law requires it, for example in response to a valid order from a court or authority, or to protect the rights and safety of users, animals or the public.
If Pixel Witch or Furkin is ever transferred to another owner, your data may move with it. We will tell you in advance and this policy will continue to apply.
Where it is stored
Your app data (account, Household, pets, activity logs, photos and documents) is stored in the European Union, in Frankfurt, Germany.
Some of our providers (Vercel, Resend, Expo, Apple and Google) are based in the United States or may process limited data there, such as email addresses, push tokens or technical logs. When data is transferred outside the European Economic Area, we make sure it is protected by an approved mechanism: the provider's certification under the EU-US Data Privacy Framework, or the European Commission's Standard Contractual Clauses.
How long we keep it
We keep personal data only as long as we need it.
- Your account: for as long as you have an account. When you delete your account, we delete your account data within 30 days.
- Household data: shared data stays available to the Household while the Household exists. If you leave a Household or delete your account, the pets and records you added stay with that Household, because other members rely on them. Your name in old activity logs is replaced with "Former member". When a Household is deleted, all its data is deleted within 30 days.
- Backups: deleted data can remain in encrypted backups for up to 30 more days before it is overwritten.
- Pending invitations: until accepted, cancelled, or 30 days after they expire.
- Push tokens: until you sign out, turn off notifications, or the token stops working.
- Server logs: up to 30 days, unless needed longer to investigate a security issue.
- Waitlist emails: until we send the launch email, and then for no more than 3 months, unless you create an account. You can ask us to remove you at any time.
- Support emails: up to 2 years after the conversation ends.
- Subscription records (plan, dates and transaction IDs): 7 years, as required by Dutch tax law.
How we protect it
We use encryption in transit (HTTPS) and at rest, access controls so that only members of a Household can access its data, and limited internal access. No system is perfectly secure, but we take reasonable measures to protect your data. If a data breach is likely to put your rights at risk, we will notify the Autoriteit Persoonsgegevens and, where required, you.
Cookies and local storage
The website does not use tracking or advertising cookies. Plausible works without cookies. The app stores your sign-in session and settings, such as your colour profile, on your device so you stay signed in. This is strictly necessary for the app to work.
Children
Furkin is not intended for children under 16. You must be at least 16 to create an account. If you believe a child under 16 has given us personal data, contact us and we will delete it.
Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you and receive a copy.
- Correct data that is inaccurate or incomplete. You can edit most of it directly in the app.
- Delete your data. You can delete your account in the app under Settings. You can also ask us by email.
- Restrict how we use your data in certain situations.
- Data portability: receive the data you gave us in a structured, machine-readable format.
- Object to our use of your data where we rely on legitimate interest.
- Withdraw consent at any time where we rely on consent, for example for the waitlist email or push notifications. This does not affect anything we did before you withdrew.
To use any of these rights, email lisa@pixelwitch.dev. We may need to confirm your identity first. We will respond within one month. If your request is complex, we may extend this by up to two more months and will tell you why.
Some data in a Household is also about other members, such as shared activity logs. When you request access or deletion, we will handle that data in a way that respects their rights too.
Changes to this policy
We may update this policy when Furkin changes or the law requires it. The date at the top shows when it last changed. If we make important changes, we will tell you in the app or by email before they take effect.
Contact and complaints
For questions, requests or complaints about your data, email lisa@pixelwitch.dev.
Pixel Witch
The Hague, the Netherlands
KvK 96974990
If you are not satisfied with our response, you have the right to complain to the Autoriteit Persoonsgegevens, the Dutch data protection authority (autoriteitpersoonsgegevens.nl), or to the data protection authority in the EU country where you live.