Last updated: September 28, 2026
Pet Passport is built to respect your privacy. This page explains in plain language what the app does and does not do with your information.
Your pet profiles, trips and reminders stay on your device. Starting with version 1.0.5, the app sends anonymous product-usage analytics and crash diagnostics so we can see which features help and fix problems. This data is not linked to your identity, and we do not track you across other companies' apps or websites.
The pet profiles you create (pet name, species, breed, birth date, optional microchip ID, optional rabies vaccine date), your destination choices, generated timelines and reminder contents are stored in the app's sandbox on your iPhone or iPad. They are never included in analytics and never leave your device. If you delete the app, the data is removed with it.
The app sends structured usage events to PostHog, a product-analytics processor (PostHog, Inc., US region), over HTTPS. Events describe how the app is used — for example app open, session start/end and length, onboarding steps, feature usage such as generating a timeline or scheduling a reminder, paywall views and purchase/restore results, and non-fatal error codes.
Each event carries technical context: app version and build, iOS version, device locale, App Store storefront country, days since install, whether the build is a simulator, TestFlight or App Store build, and a random identifier generated by the app for this install. We do not send your name, email address, Apple ID, pet data or any other identity to PostHog, and person profiles are disabled. As with any internet request, PostHog receives your device's IP address when events are delivered; we do not use it to identify you.
Your choice: you can turn analytics off at any time in the app under Settings → Privacy → “Share anonymous analytics”. When it is off, no analytics events are sent.
The app uses Apple's MetricKit to receive aggregate crash signatures and performance metrics (for example hangs, memory and launch time). These diagnostics are sent with the anonymous analytics above, are used only to fix reliability problems, and are not linked to your identity.
On first launch the app asks Apple's AdServices framework for an attribution token to learn, in aggregate, whether the install came from an Apple Search Ads campaign. Only the campaign-level result is recorded; no advertising identifier (IDFA) is used.
Pet Passport offers a one-time "Pro" upgrade through Apple's In-App Purchase system. Payment and entitlement verification happen through Apple. We do not see your Apple ID or payment method. Restore Purchases uses Apple's AppStore.sync() API. Analytics records only the product and the result of a purchase or restore (for example success or cancelled).
We do not collect your name, email, phone number, contacts, photos, precise location, health or financial data. We do not use the advertising identifier, we do not integrate advertising SDKs, and we do not track you across other companies' apps or websites, so the app never shows an App Tracking Transparency prompt.
Apple, Inc. (StoreKit purchases, MetricKit diagnostics, AdServices attribution) and PostHog, Inc. (anonymous product analytics). We do not sell data.
Pet Passport is intended for adults arranging travel for their pets and is not directed at children.
If we change what Pet Passport collects, we will update this page and the App Privacy details on the App Store listing.
Questions? support@mypetpassport.app