Amaroo Privacy Policy

We collect only what the marketplace needs to work. The categories below are the complete list.

Your name, phone number, and email address, and the sign-in method you choose (an emailed one-time code, Google or Apple sign-in, or an email/phone and password). If you allow notifications, we store a push token so we can notify you about your bookings and chats. We keep a list of the devices you are signed in on, which you can review and revoke in the app.

The pet profiles you create (name, species, breed, notes, photo) and your bookings: the service, the schedule, the price, and the booking's status history. Sitters may also submit service reports (for example feeding or walk updates, with photos) during an active booking.

Payments are processed by our payment provider, Xendit. We store the payment's status and a payment reference — not your card, e-wallet, or bank credentials. For sitter payouts, your bank account and tax details stay with the payment provider; we keep only a masked reference (such as the last four digits) and a verification status, never the full numbers.

Messages between an owner and a sitter are attached to a booking and stored so both sides keep their conversation. Photos you send — picked from your library or taken with the camera — are stored in our file storage.

Location is collected in the background, and only from a sitter. During a confirmed booking's active service window, the sitter's app posts its position every 15 to 30 seconds — including while the phone is pocketed and the screen is off — so the owner can watch the service live on a map. That is the point of the tracking: a walk is exactly when the phone is not in the sitter's hand. Updates stop when the booking completes, is cancelled, or its window ends, and our server refuses location updates outside an active booking. Location is never collected from pet owners, and never collected while a sitter has no active job. Sitters also set a service base location so owners can find sitters near them. We do not sell location data and we do not use it for advertising.

Sitters are identity-verified before they can be found in search or paid out. The verification itself — your ID document and selfie — is captured by and stays with our identity verification provider. Amaroo never stores your ID document or its scan. What we keep is the outcome: the verification verdict, a reference to the provider's check, your verified legal name and date of birth, and a one-way hash of your national ID number, used only to prevent duplicate accounts and to refuse a suspended sitter's ID number when it is used to verify a new account. Sitters also provide photos of the home where they host pets, and complete an in-person branch visit whose result we store.

After a completed booking, owners can review sitters; those reviews are public on the sitter's profile. Sitters can also rate owners after a completed booking; those ratings are used internally for trust and safety and are not displayed in the app.

We share data only with the processors that make the service work: our payment provider (Xendit) for payments, refunds, and sitter payouts; our identity verification provider for sitter KYC; our push-notification service for delivering notifications; and our hosting and file-storage infrastructure. We do not sell personal data, and we do not share it with advertisers.

Your data is kept while your account exists. You can delete your account at any time from inside the app (Settings, then Delete account), or — if you no longer have the app — by following the steps on our account deletion page at /delete-account. Deletion is immediate and permanent. It erases your personal details and anonymises the records other people and our legal obligations still need: your bookings, payments, reviews, and messages stay on record as “Deleted user”. That page lists what is erased, what is kept and why (including the deletion record, which keeps your email and phone only as a one-way hash), and the cases where unsettled money blocks deletion. Two honest caveats from the same page apply here too: files you uploaded are not yet purged automatically from our file storage — ask us and we will remove them — and routine database backups kept for disaster recovery age out on rotation.

Data moves over encrypted connections, and every request to our API is scoped to the signed-in account — one user cannot read another's bookings, chats, or payment records. You can turn on two-step verification, and review and revoke the devices you are signed in on, from Privacy & Security in the app.

Questions about this policy or about the data we hold: [email protected].