This policy covers the puppyonair.com website and the Puppyonair iPhone app. We only collect the data needed to find a suitable flight for your pet and to keep its travel documents.
Data controller
The controller is Puppyonair. For any request about your data, write to info@puppyonair.com.
Data we collect
- Flight searches: airports, pet type and weight, date and travel mode. Searching needs no account and is not linked to your identity.
- Account: name, email and password. The password is stored only as a secure hash (PBKDF2) and cannot be read.
- Traveller and pet profile, if you choose to fill it in: phone, pet name, breed, weight, microchip and passport numbers, vaccination and certificate dates.
- Documents you upload (pet passport, certificates, veterinary records).
- Trip Watch: airline, flight, date, route, language and the email address for alerts.
- App push notifications: a device identifier issued by Apple, needed to deliver Trip Watch alerts.
- Flight stories and reports you choose to send, and messages from the contact form.
- Technical data: IP address, used to limit abuse and sign-in attempts. In reports we keep it only as a hash.
Why we use it
- To provide the services you ask for: search, account, profile, documents and alerts (Art. 6(1)(b) GDPR).
- To protect the service from abuse, through rate limits per IP address (legitimate interest, Art. 6(1)(f) GDPR).
- On the website only, and only with your consent, for anonymous visit statistics with Google Analytics (Art. 6(1)(a) GDPR). The iPhone app uses no analytics or tracking tools.
iPhone app
- The app contains no advertising, no third-party SDKs and no cross-app tracking.
- Documents are also copied to the phone so you can open them offline. They stay encrypted while the phone is locked, are excluded from iCloud backup and are deleted when you sign out.
- Your session is kept in the iOS Keychain. You can lock the app with Face ID in Settings.
- Push notifications are sent only if you allow them, and you can turn them off at any time in iPhone Settings.
Who we share data with
- We do not sell personal data or use it for advertising.
- The website and database are hosted by Aruba S.p.A. in Italy.
- Apple (Apple Push Notification service) delivers the app's notifications.
- Google (Google Analytics) receives website browsing data only if you accept statistics cookies.
- To complete some searches we query AviationStack (airport codes) and OpenStreetMap (the city where you look for a vet). We send no personal data to either.
How long we keep it
- Account, profile and documents are kept until you delete them.
- Sign-in sessions expire after 30 days.
- A Trip Watch alert is kept until you unsubscribe or delete it. After the flight date you will not receive further policy alerts for that trip.
- Push identifiers are deleted when you sign out or when Apple reports them as no longer valid.
Your rights
- You can request access, correction, deletion, restriction and portability of your data, and object to processing, by writing to info@puppyonair.com.
- In the app you can delete your whole account yourself under Profile › Delete account: we delete the account, profile, documents, alerts and push identifiers.
- You can also lodge a complaint with the Italian data protection authority (garanteprivacy.it) or the authority in your country.
Children
The service is not directed at children under 14.
Changes
Last updated: 30 September 2026. If we make a significant change to how we process data, we will say so on this page.