← Back to home
Summary: India's DPDP Act 2023 gives you meaningful rights over your personal data. PawCheck is built to respect every one of these rights from Day 1, not as a compliance checkbox, but because pet owners deserve control over their information.
1. About the DPDP Act 2023
The Digital Personal Data Protection Act 2023 is India's landmark data protection law. It establishes rights for individuals ("Data Principals") and obligations for organisations that process personal data ("Data Fiduciaries"). The substantive provisions are enforceable from May 13, 2027, but PawCheck is designed to comply from its first release.
2. PawCheck as a Data Fiduciary
Under the DPDP Act, PawCheck (operated by Canine Products, Mumbai) is a Data Fiduciary, we determine the purpose and means of processing your personal data. We process the following categories of personal data:
- Phone number (for account verification)
- Pet photos submitted for AI scanning
- Pet profile information (name, species, breed, age)
- Health assessment results (scan results, severity, condition)
- Location data (transient, used only during Vet Locator searches, never stored)
3. Consent
We collect your consent before processing any personal data. PawCheck's consent mechanism is designed to meet the DPDP Act's requirements of consent being free, specific, informed, and unambiguous:
- The consent checkbox starts unchecked, you must actively tick it.
- Each data processing purpose is described in plain language before you consent.
- AI training consent is a separate, optional toggle, it is not bundled with account creation.
- Consent timestamp and version are stored server-side for audit purposes.
- If consent requirements change (new DPDP rules or expanded data use), you will be asked to re-consent before continuing.
4. Your Rights as a Data Principal
| Right | How to exercise it |
Right to access information Know what data we hold and how it is processed. | Email support@pawcheck.in, we will respond within 7 days. |
Right to correction Correct inaccurate or incomplete personal data. | Edit your profile directly in the app: Profile → Edit, or edit pet details from the Pet screen. |
Right to erasure Delete your personal data and account. | Settings → Account → Delete Account. All data deleted from our databases and authentication systems within 30 days. |
Right to grievance redressal Raise a complaint about how your data is handled. | Email grievance@pawcheck.in, acknowledged in 24 hours, resolved in 15 days. |
Right to nominate Nominate someone to exercise your rights in case of incapacity. | Contact support@pawcheck.in to register a nominee. |
5. Children's Data
The DPDP Act defines a child as a person under 18 years of age. PawCheck requires users to confirm they are 18 or older at registration. If a user is a minor, verifiable parental consent is required before any account is created. We do not knowingly collect data from minors without parental consent.
6. Data Security Safeguards
- All data is transmitted over HTTPS/TLS encryption.
- Scan images are stored with strict access controls, only you can access your own images.
- Authentication tokens are stored in your device's hardware-backed secure storage, isolated from other apps.
- No PII (personally identifiable information) is included in analytics events.
- API keys and secrets are stored in a dedicated secrets management service, never hardcoded in the app or backend.
7. Data Breach Protocol
In the event of a personal data breach that is likely to cause harm to Data Principals, PawCheck will:
- Notify the Data Protection Board of India (DPBI) within 72 hours of becoming aware of the breach.
- Notify affected users via in-app notification and email/SMS as soon as reasonably possible.
- Document the breach, its scope, and the remediation steps taken.
8. Third-Party Data Processors
PawCheck uses the following processors who handle personal data on our behalf. Each is contractually bound to protect data in accordance with applicable law:
- Google Firebase, Authentication, analytics, remote configuration
- Google Gemini AI, Image analysis (pet photos processed per Google AI API terms)
- Supabase, Database and storage
- Google AdMob, Advertising (only after user consent; consent managed via UMP SDK)
- Google Maps Platform, Location-based vet search
Note: Some data processors host infrastructure outside India. We monitor DPDP Rules for any data localisation requirements and will migrate infrastructure if mandated.
9. Grievance Officer
As required by the DPDP Act and IT Rules 2021:
- Name: Ebrahim Mandviwala
- Organisation: Canine Products (PawCheck)
- Email: grievance@pawcheck.in
- Response time: 24 hours for acknowledgement · 15 days for resolution
10. Consent Withdrawal
You may withdraw consent for any optional data processing (including AI training consent, analytics, and ad personalisation) at any time via Settings → Privacy. Withdrawal of consent for core services (account authentication) will result in account deactivation. Withdrawal does not affect the legality of processing conducted prior to withdrawal.
11. Updates to This Page
As DPDP Rules are notified by the Indian government, we will update this page to reflect our ongoing compliance. Material changes will be communicated via in-app notification. For the latest position, bookmark this page or contact support@pawcheck.in.