Legal
User Data Deletion Policy
Effective Date: May 2025 · Version 1.0 · petikah.com/deletion
PetikAh respects your right to erasure. This policy explains exactly what gets deleted, what must be legally retained, and how to request deletion — with no ambiguity.
1. Purpose and Scope
This User Data Deletion Policy governs how PetikAh handles requests to delete personal data associated with a user account. It applies to all users of the PetikAh platform across all seven roles: Pet Owner, Store Owner, Veterinarian, Courier, Shelter, Dog Walker, and Pet Hotel.
This Policy is issued in compliance with Mexico's LFPDPPP, specifically the right of Cancellation (one of the ARCO rights), and is incorporated by reference into the PetikAh Privacy Policy.
2. What "Deletion" Means on PetikAh
Deletion does not always mean every byte is erased immediately. Mexican law and operational necessity require us to distinguish between two categories:
2.1 Personal Data — Deleted
Data that directly identifies you will be permanently deleted within 30 days of your confirmed deletion request:
- Full name and display name
- Email address
- Profile photo
- Password hash
- Pet profile information (species, breed, name, age, health notes)
- Business configuration data (store name, hotel capacity, pricing settings)
- OAuth tokens and social sign-in links (Google, Facebook)
- Push notification tokens
- In-app preferences and settings
- PawCoin balance
2.2 Data Retained for Legal Reasons
Some data must be retained after account deletion due to legal, regulatory, or safety obligations. This data is isolated, access-restricted, and permanently deleted once the retention period expires:
- Transaction and financial records — 7 years (SAT tax law)
- Dispute and complaint records — 3 years (civil claims limitation period)
- Veterinarian license records — 3 years post-closure (regulatory compliance)
- Courier GPS delivery logs — 90 days post-last delivery (dispute resolution)
- Dog Walker GPS route logs — 30 days post-last walk (dispute resolution)
- Fraud and abuse flags — 5 years (platform safety)
2.3 Anonymized Data
Usage analytics and aggregate statistics that have been fully anonymized (i.e., cannot be linked back to you by any means) are not considered personal data under the LFPDPPP and may be retained indefinitely for platform improvement purposes.
3. Deletion Process — Step by Step
| Step | Action | What Happens | Timeframe |
|---|---|---|---|
| 1 | Submit deletion request | Request is logged and a confirmation email is sent. | Immediate |
| 2 | Identity verification | PetikAh verifies your identity to prevent unauthorized deletion. | Within 24 hours |
| 3 | Pending activity check | Platform checks for active orders, bookings, or deliveries. | Within 24 hours |
| 4 | Grace period begins | Account is deactivated (not deleted). You may cancel within this window. | 0–30 days |
| 5 | Personal data deletion | All deletable personal data is permanently removed from active systems. | Day 30 |
| 6 | Backup purge | Data is purged from encrypted backups on the next scheduled backup cycle. | Within 90 days |
| 7 | Confirmation sent | A final confirmation email is sent confirming completion of deletion. | Within 90 days |
You may cancel your deletion request at any time during the 30-day grace period by signing back in to your account or emailing deletion@petikah.com. After Day 30, deletion is irreversible.
4. How to Request Deletion
In-App (Recommended)
- Open the PetikAh app
- Navigate to your Profile
- Tap Settings › Account › Delete Account
- Confirm your identity and review what will be deleted
- Tap Confirm Deletion
You will receive a confirmation email within minutes.
Email Request
Send an email to deletion@petikah.com with:
- Subject: Account Deletion Request
- Your registered email address
- Your full name as it appears on your account
- The role(s) registered on your account
- A brief statement confirming you authorize the deletion
4.3 Third-Party Platform Requirements
If you signed up via Google or Facebook, those platforms may also require you to revoke PetikAh's access through their own settings. This does not automatically trigger account deletion on PetikAh — a separate deletion request to us is still required.
- Google: myaccount.google.com › Security › Third-party apps with account access
- Facebook: facebook.com/settings › Apps and Websites
5. Role-Specific Deletion Blockers
Account deletion may be temporarily blocked if you have unresolved obligations tied to your active role(s):
| Role | Deletion Blocker | Resolution Required |
|---|---|---|
| Pet Owner | Active bookings or pending orders | Cancel or complete all active bookings |
| Store Owner | Unfulfilled orders or pending payouts | Fulfill all orders; wait for payout settlement |
| Veterinarian | Upcoming confirmed appointments | Cancel or reassign appointments with 48h notice |
| Courier | In-progress delivery assignment | Complete or formally abandon the active delivery |
| Shelter | Pending adoption applications | Close or transfer all open adoption cases |
| Dog Walker | Upcoming confirmed walk bookings | Cancel with required notice to Pet Owners |
| Pet Hotel | Active or upcoming guest stays | Complete stays or arrange transfer of care |
6. Data Deletion Reference Table
| Data Category | Deleted at Day 30? | Retained For | Reason |
|---|---|---|---|
| Name, email, profile photo | ✓ Yes | — | No legal basis after closure |
| Password hash | ✓ Yes | — | No legal basis after closure |
| Pet profiles | ✓ Yes | — | No legal basis after closure |
| OAuth tokens | ✓ Yes | — | Revoked on deletion request |
| Transaction records | No | 7 years | SAT tax law requirement |
| Dispute records | No | 3 years | Legal claims window |
| Vet license number | No | 3 years post-closure | Regulatory compliance |
| Courier GPS logs | No | 90 days post-last delivery | Dispute resolution |
| Walker GPS logs | No | 30 days post-last walk | Dispute resolution |
| Anonymized analytics | No | Indefinite | No personal link remains |
| Financial payout records | No | 7 years | SAT tax law requirement |
| Abuse/fraud flags | No | 5 years | Platform safety |
7. Firebase and Third-Party Data
PetikAh uses Firebase (Google LLC) as its primary backend. When your account is deleted:
- Your Firebase Authentication record is permanently deleted within 30 days.
- Your Firestore user document is permanently deleted within 30 days.
- Firebase Cloud Storage files (profile photos, uploaded documents) are permanently deleted within 30 days.
- Firebase Analytics events associated with your device are anonymized and cannot be linked to you after deletion.