Privacy policy
Your data, in plain words
Last updated 25 October 2026
This policy explains what personal data Cooky collects, why, who sees it, how long we keep it and the rights you have over it. Cooky can be used in many countries, so the policy is written to meet the main data protection laws that may apply to you, such as the EU and UK General Data Protection Regulation (GDPR), India’s Digital Personal Data Protection Act, 2023, and US state privacy laws.
The short version: we collect what we need to connect pet parents and hosts, we don’t sell your data or show you ads, we never handle money for stays, and you can delete your account at any time. This website itself collects nothing about you: no forms, no cookies, no analytics.
This is a draft. The full policy is being finalised with a lawyer before Cooky launches, and this page will be updated then.
Who we are
Cooky (“Cooky”, “we”, “us”) is an app and website made by Ivies and run by [Company legal name], [Registered office address]. We decide how and why the personal data described here is used, which makes us its controller (called the data fiduciary under India’s law).
This policy covers the Cooky app on Android and iPhone and this website. Cooky connects pet parents with hosts who look after pets in their own homes. Cooky isn’t part of any stay: the pet parent and host agree it and settle it directly. Cooky doesn’t check hosts or pet parents, and it never takes, holds or processes money for stays.
What we collect
When you sign in
You sign in with Google, or on iPhone with Google or Apple. We receive your name, email address, profile photo (from Google) and an account identifier. We never see or store your Google or Apple password. If you use Sign in with Apple and choose to hide your email, we receive a relay address that Apple forwards to you.
Your profile and your pets
- Whether you use Cooky as a pet parent, a host or both.
- Pet profiles you add: species, name, breed, size, date of birth, temperament, feeding and medicine routines, and vaccination records, including any photos of vaccination cards you upload.
If you host
- Photos of your home, your listing description, home facts, house rules, availability and nightly rate.
- Your home’s exact location. Search and the map only ever show an approximate area; the exact address is shared only with a pet parent whose request you accept.
When you use the app
- Requests to connect (dates, pets, status), chat messages, reviews, reports and blocks.
- Your location, only if you allow it, to show homes near you. We don’t collect your location in the background. You can type an area instead.
- Photos you choose with your phone’s photo picker. Cooky sees only the photos you pick, and removes the location details stored inside photo files (such as GPS coordinates) before anyone else can see them.
- A device token so we can send you notifications, plus your device type, operating system and app version, and crash reports that help us fix problems.
When you buy Cooky Plus
Purchases go through Google Play or the App Store. They handle payment; we never receive your card or bank details. We receive a purchase record (which product, when, and whether it’s active, renewed, cancelled or refunded) so we can unlock what you paid for.
When you contact us
What you write to us and your contact details, so we can reply.
What we don’t collect
We don’t ask for government ID numbers, bank details or payment details. Pet parents may see a host’s ID in person when they visit; Cooky never sees or stores it.
Why we use it
We use your personal data to:
- create your account and sign you in;
- show listings, run requests, chat and reviews, and send you notifications about them;
- look at photos, act on reports, and keep Cooky safe from fraud, abuse and misuse;
- check Plus purchases with the store and unlock what you paid for;
- answer your questions and complaints;
- keep the records the law requires, and respond to lawful requests from the authorities.
Depending on where you live, the law asks us to name the reason we’re allowed to do each of these. Ours are: to provide Cooky to you, as you asked (our contract with you); your consent, for example to use your location; our legitimate interest in keeping people and pets safe, for example when we review a report; and our legal obligations.
We don’t sell your personal data, we don’t use it for advertising, and we don’t build profiles of you for anyone else. Where we rely on your consent, you can withdraw it at any time, as easily as you gave it, by changing the setting in the app, deleting your account or writing to us. Withdrawing consent doesn’t affect anything we did before, but we may no longer be able to provide the parts of Cooky that need that data.
What other people see
- Everyone using Cooky can see a host’s listing: photos, description, home facts, house rules, rate, approximate area and reviews, along with the host’s first name and photo.
- A host you send a request to sees your name, photo, the dates and the pet profiles you include, including vaccination records.
- Once a host accepts, you can both chat, and the pet parent can see the home’s exact address.
- Reviews you write after a stay are shown with your first name.
Reports are private: the person you report doesn’t see who reported them.
Who we share it with
We share personal data only with service providers who process it for us under contract, and with others only when the law requires it:
| Who | What for |
|---|---|
| Amazon Web Services | Hosting our servers, databases, photo storage and email. |
| Sign-in with Google, Google Play purchases, push notifications on Android (Firebase Cloud Messaging) and maps in the app. | |
| Apple | Sign in with Apple, App Store purchases and push notifications on iPhone. |
| Authorities | Police, courts or government agencies, when the law requires us to share information, for example under a lawful order. |
If we add a service provider that handles your personal data, such as a crash-reporting service, we’ll list it here first. If Cooky is ever sold or merged, your data would pass to the new owner only under this policy, and we’d tell you first.
Where it’s stored
Cooky’s data is stored with Amazon Web Services, currently in its Mumbai region in India. If you use Cooky from another country, your data is transferred there. Where the law requires safeguards for international transfers, such as the standard contractual clauses used under the GDPR, we put them in place. Google and Apple may process data you share with them, such as sign-in and purchases, in other countries under their own terms.
How long we keep it
| Data | How long |
|---|---|
| Account, profile and pet profiles | While your account is open. Deleted within 30 days of you deleting your account, except basic registration details (below). |
| Basic registration details: name, email, account identifier and sign-in provider | Up to 180 days after you delete your account, where a law requires us to keep them (India’s IT Rules, for example), then deleted. Used for nothing else. |
| Listings and home photos | Until you remove them or delete your account; then deleted within 30 days. |
| Requests, chat messages and reviews | While your account is open; deleted, or de-identified so they can’t be linked to you, within 30 days of you deleting it. |
| Reports and moderation records | Up to 180 days after a matter is closed, or longer if a court or authority requires it, so we can protect others and meet our legal duties. |
| Plus purchase records | As long as tax and accounting laws require. These never include card or bank details. |
| Server and security logs | Up to 30 days. Our logs record what went wrong, not who: no names, emails or sign-in tokens. |
| Backups | Encrypted backups roll over within 35 days, so deleted data leaves them by then. |
We may keep data longer if the law requires it or it’s needed for a legal claim, and only for that purpose. See how to delete your account.
Your rights
Depending on where you live, you can:
- See the personal data we hold about you, what we do with it and who we’ve shared it with;
- Correct data that’s wrong or out of date;
- Delete your data, by deleting your account or asking us;
- Withdraw consent you’ve given, at any time;
- Object to or limit some uses of your data, such as those based on our legitimate interests;
- Get a copy of data you gave us, in a format you can take elsewhere;
- Name someone to use these rights for you if you die or become unable to;
- Complain to us, and then to the data protection authority where you live if you’re not satisfied with our answer.
Most of this you can do in the app. For anything else, write to us (details below) from the email address you use with Cooky. We may ask you to confirm your identity, and we’ll answer within the time the law that applies to you sets. We won’t treat you differently for using your rights.
This policy is in English. You can ask us for a copy in another language by writing to us.
Children
Cooky is only for adults aged 18 or over. We don’t knowingly collect personal data from anyone under 18. If you think a child is using Cooky, tell us and we’ll delete the account and its data.
Security
- Data travels encrypted (HTTPS) and is encrypted where it’s stored.
- There are no Cooky passwords to steal: you sign in through Google or Apple, and the app keeps its sign-in token in your phone’s secure storage.
- Only the people who need it can reach personal data, admin access needs two-step verification, and moderation decisions are logged.
- Location details are removed from photos, and a host’s exact address stays hidden until they accept a request.
No system is perfectly secure. If a breach affects your personal data, we’ll tell you without delay, with what happened and what you can do, and report it to the authorities as the law requires.
Cookies and tracking
This website uses no cookies, no analytics and no advertising or tracking scripts, and it loads nothing from other companies’ servers. Our hosting provider keeps standard request logs (such as IP address, browser and the page requested) to keep the site secure, for up to 30 days. The app stores your sign-in token, settings and safety checklist progress on your phone. We don’t track you across other apps or websites.
Changes to this policy
We’ll update this page when our practices change and show the date at the top. If a change matters, we’ll tell you in the app or by email before it takes effect, and ask for your consent again where the law requires.
Contact and complaints
For questions about this policy or your personal data, or to use your rights, write to:
[Name of the person who handles complaints]
[Company legal name]
[Registered office address]
Email: [Their email address]
For anything else, email support@theivies.in or see the contact page.