Privacy Policy
Last updated: 13 October 2026
This Policy explains how Paawrent handles personal data in the Paawrent app, paawrent.com and related services (the "Service"). It is our notice under Thailand's Personal Data Protection Act B.E. 2562 ("PDPA").
1. Who we are
The data controller is Suchada Phumimphol, an individual doing business as "Paawrent", 12 Soi Phet Kasem 48 Yaek 14, Phet Kasem Road, Bang Duan, Phasi Charoen, Bangkok 10160, Thailand. Privacy contact: paawrent@gmail.com.
Providers you book (hospitals, clinics, vets, shops and independent professionals) receive some of your data to deliver their service (Section 4) and are responsible for how they use it in their own business, such as a vet's medical records.
2. What we collect
| Category | Examples |
|---|---|
| Account | Name, email (or an Apple relay email), profile photo, phone number if you add it, language |
| Pets | Name, photo, species, breed, sex, birth date, size, weight history, temperament, microchip number, health conditions and notes, vaccinations, files you upload |
| Bookings | Provider, service, pet, dates and times, your notes, status. For services at your address: the address you type and a map pin from your device's location when you tap "Use my current location" |
| Payments | The booking price and whether the Provider marked your payment as received. Paawrent does not process payments: you pay the Provider directly from your own bank app |
| Messages and calls | Chat messages and photos. Video calls are live between participants and not recorded |
| Community and reviews | Posts, photos, comments, likes, tagged pets, follows, ratings and reviews |
| Safety and support | Reports, blocks, mutes, moderation decisions, support conversations |
| Settings and consents | Notification settings (including marketing opt-in), and a record of which version of our Terms you accepted and of this Policy you were shown, when, on which screen and in which app version |
| Providers | Public profile (name, photo, services, prices, hours, team, address and phone; for independent Providers only the area is public), verification details and documents (a vet's licence number, a shop's business registration, an insurance certificate if added), the payment details you enter (account name and PromptPay ID or bank account), notes, prescriptions and vaccinations you record |
| Device and usage | Device model, OS, app version, push token, crash reports linked to your user ID (Firebase Crashlytics), app usage events (Firebase Analytics), IP address in server logs |
- Category
- Account
- Examples
- Name, email (or an Apple relay email), profile photo, phone number if you add it, language
- Category
- Pets
- Examples
- Name, photo, species, breed, sex, birth date, size, weight history, temperament, microchip number, health conditions and notes, vaccinations, files you upload
- Category
- Bookings
- Examples
- Provider, service, pet, dates and times, your notes, status. For services at your address: the address you type and a map pin from your device's location when you tap "Use my current location"
- Category
- Payments
- Examples
- The booking price and whether the Provider marked your payment as received. Paawrent does not process payments: you pay the Provider directly from your own bank app
- Category
- Messages and calls
- Examples
- Chat messages and photos. Video calls are live between participants and not recorded
- Category
- Community and reviews
- Examples
- Posts, photos, comments, likes, tagged pets, follows, ratings and reviews
- Category
- Safety and support
- Examples
- Reports, blocks, mutes, moderation decisions, support conversations
- Category
- Settings and consents
- Examples
- Notification settings (including marketing opt-in), and a record of which version of our Terms you accepted and of this Policy you were shown, when, on which screen and in which app version
- Category
- Providers
- Examples
- Public profile (name, photo, services, prices, hours, team, address and phone; for independent Providers only the area is public), verification details and documents (a vet's licence number, a shop's business registration, an insurance certificate if added), the payment details you enter (account name and PromptPay ID or bank account), notes, prescriptions and vaccinations you record
- Category
- Device and usage
- Examples
- Device model, OS, app version, push token, crash reports linked to your user ID (Firebase Crashlytics), app usage events (Firebase Analytics), IP address in server logs
Location. If you allow it, the app uses your location on your device to show how far away Providers are; this is not stored on our servers. A booking at your address stores the address and map pin you set.
3. Why we use it (legal basis)
- To provide the Service (contract): your account, bookings, sending bookings to Providers, showing Providers' payment details to their customers, chat and video, pet records, community features, reviews, notifications and support.
- Legitimate interests: approving Providers, safety and moderation (reports, content filtering, fraud and abuse prevention), service announcements, fixing crashes and improving the app.
- Legal obligations: responding to lawful requests from authorities.
- Consent: marketing messages, only if you opt in. You can withdraw at any time in notification settings.
We do not sell your data or use it for third-party advertising. Without account and pet data we cannot take your booking.
4. Who sees your data
- Providers you book and their team see your name, photo, email, booking details, notes, any service address and your pet's name, species, breed and photo when you book, and your phone number and your pet's health details once they accept. They keep this in their booking history; if you delete your account, your and your pet's details are removed from it. Files on your pet's profile are available to them from when they accept until 90 days after the booking is completed.
- Customers of a Provider: once a Provider accepts a booking, that customer sees the Provider's payment details (account name and PromptPay ID or bank account) so they can pay. Independent Providers' exact address and phone are shown only to customers with a confirmed booking.
- Other users see your public profile, posts, comments, follows and reviews. Chat messages are visible only to people in that chat.
- Paawrent administrators, where needed to approve Providers, give support, review reports and keep the Service secure. Administrators' changes are logged.
- Service providers that run the Service for us: Supabase (database, sign-in, storage; Singapore), Google Firebase (push notifications, crash reports, analytics), Google and Apple (sign-in, iPhone notifications), LiveKit (video calls), Vercel (website hosting), Cloudflare (domain name service), Resend (sending email), Upstash (abuse-prevention counters) and Fastmail (our mailboxes). Some process data in the United States and other countries; we transfer data abroad only as the PDPA allows, under their data protection terms.
- Authorities, where the law requires it or to protect people or animals.
5. How long we keep it
- Your account, pets and their health records, posts, comments, chats, support requests and settings: until you delete your account. Removing a pet, or deleting a post or comment, hides it in the app; we keep it until your account is deleted.
- Booking records: after you delete your account they may be kept in anonymised form, no longer linked to you.
- Reports you made: kept after you delete your account, without your identity.
- Provider verification documents and payment details: until the Provider account is deleted. A vet's licence number is kept as a record of prescriptions issued.
- Crash reports 90 days; analytics up to 14 months; server logs and abuse counters for a short period.
Deleted data can remain in backups for a limited time until they are overwritten.
6. Deleting your account
Delete your account in the app: Profile → Delete Account (you need to have no active bookings first). Deletion is immediate and removes your profile, pets and health records, posts, comments, likes, follows, reviews, messages you sent (and, if you are a customer, your booking chats), notifications, favourites and support requests, and the photos and files you uploaded. If you are a Provider, your profile is unpublished (its service photos stay with it), your personal details and documents are removed, and your payment details are deleted. Files and vaccination records a Provider added to a customer's pet record stay with that record. If you no longer have the app, email paawrent@gmail.com from the email linked to your account (or tell us the account name if you hid your Apple email); we confirm the account is yours, delete it and confirm by email.
7. Your rights
Under the PDPA you can ask to access or get a copy of your data, receive it in a machine-readable format, correct it, delete or anonymise it, restrict or object to its use, and withdraw consent. You can also complain to the Office of the Personal Data Protection Committee. In the app you can edit your profile and pets, change notification settings, Export My Data and Delete Account; otherwise email paawrent@gmail.com. We may ask you to confirm your identity and will respond within 30 days.
8. Security
We use encryption in transit and at rest, database access rules so users see only what they are allowed to, private storage for documents and health files, and limited administrator access, with administrators' changes recorded in an audit log. If a breach is likely to put your rights at risk, we will notify the PDPC within 72 hours of becoming aware of it and tell you without undue delay when the risk is high.
9. Children
Paawrent is not for children under 13. Users aged 13 to 19 need a parent's or legal guardian's consent. If we learn we hold data about a child under 13, or a user aged 13 to 19 without that consent, we will delete it.
10. Cookies and analytics
The app does not use cookies. It uses Firebase Crashlytics and Analytics only to fix and improve Paawrent, not for advertising or tracking across other companies' apps. paawrent.com uses only cookies it needs to work: sign-in cookies (for administrators and team invitations) and a cookie that remembers your language. It uses no analytics or advertising cookies.
11. Changes and contact
We will update the date above and tell you in the app about important changes. Questions and requests: paawrent@gmail.com · Suchada Phumimphol, 12 Soi Phet Kasem 48 Yaek 14, Phet Kasem Road, Bang Duan, Phasi Charoen, Bangkok 10160, Thailand.