PURRBI
Purrbi privacy policy
Revision 2026-10-15.1. Applies when this policy version is released with Purrbi.Purrbi helps adults compare public dog and cat food labels with pet details they provide. This policy explains the information used by Purrbi, operated by Valencia Innovations LLC, and the choices available to you. It is specific to Purrbi; it does not describe Moxis or another app.
Who to contact
Contact Valencia Innovations LLC at contact@valenciainnovations.com or 35 Clinton Ave, Stamford, CT 06901, United States for privacy questions, data-access/correction requests, deletion requests or concerns about a result. Please do not email passwords or unnecessary sensitive information. We may need to verify control of an account before acting on a request.
Purrbi is intended for adults aged 18 and older in the United States. We do not intend to collect personal information from children. If you believe a child has provided information, contact us so we can investigate and arrange appropriate deletion. The age acknowledgment is a self-declaration, not independent age verification.
Information you provide
Accounts use an email address, password credentials and an account identifier through Google Firebase Authentication. Purrbi stores pet names or nicknames, dog/cat species, selected life stage, and optional breed, age, weight, sensitivities and ingredients to avoid. Do not enter human medical records or other unnecessary personal information.
When you scan or enter a barcode, Purrbi saves the barcode, retrieved product facts and sources, findings, dates and a copy of the pet profile used for that scan. Saved products/bookmarks and issue reports, including any text you submit, are associated with your account. Editing a current pet profile does not rewrite earlier scan snapshots.
The camera is used to read a barcode. This version does not upload camera frames or product photos for analysis. You can enter a barcode manually and deny camera access in your device settings.
Why we use it
We use account information to provide sign-in and account management; pet information to compare the supported profile fields with label facts; scans and bookmarks to show your history and saved products; and reports to investigate errors or inappropriate content. Technical identifiers, request timestamps, app/device verification and bounded usage records help authenticate requests, prevent abuse and control service costs.
Breed, numeric age and weight may be stored in the profile but are not used to establish breed-specific dietary requirements or prescribe a feeding amount. The fit explanation describes which fields are actually compared.
This version contains no advertising, analytics, payment or subscription SDK. We do not sell your account or pet-profile information, or use it for targeted advertising. There are no paid recommendation placements in this version.
Firebase and service infrastructure
Google Firebase and Google Cloud provide account authentication, database storage, backend processing and app verification. Your private pet profiles, scan snapshots, bookmarks and issue reports are stored under your account. The services also process operational and security information, such as IP addresses, request metadata and app/device verification information, as required to operate the service.
Access controls restrict private account data. No service can guarantee absolute security. Authorized personnel and service providers may process information to operate, secure and troubleshoot Purrbi or respond to your requests. Information may also be disclosed when required by law or necessary to address fraud, security incidents or threats to safety.
Public product lookups and earlier AI reports
New online product lookups in this revision send the public barcode to Open Pet Food Facts and use selected text facts from its exact matching record. These requests do not send your account email, pet name, pet profile, sensitivities or private scan history. The provider receives ordinary request/network information. Product images are not retrieved or included in this source-data path.
This revision does not use merchant discovery, manufacturer-page research, shared product-catalogue results or new OpenAI generation for product lookups. Missing records and unsupported fields remain unavailable. Earlier saved reports may still contain their original manufacturer, merchant or AI-assisted evidence and dates; keeping those reports does not make the earlier material newly licensed or current.
Earlier AI requests used public product context and store:false, excluding account identifiers, email and private pet profiles. That setting did not establish zero provider retention. Earlier requests remain subject to the applicable OpenAI data controls and retention settings. Reading a saved report does not start a generation request.
New source facts are saved within your private report without being added to the earlier shared product catalogue. Existing generic product/source/summary caches and the separate FDA news cache are not deleted merely because one account is deleted. When you choose Copy source facts, the app places selected public product inputs, transformed facts, source dates and licence/method information on the device clipboard. This export excludes your account, pet profile, private findings and report identifiers. Other applications may read clipboard content according to your device's controls.
FDA notices and external websites
Purrbi retrieves a limited FDA recall-news dataset. If its authenticated news service is unavailable, the app can request that fixed public dataset directly; FDA then receives your device's IP address and ordinary network metadata. This request does not send your Firebase credentials, email, pet profile, barcode or scan history.
Source links and the optional FDA email-signup link open external websites when you choose them. Their own privacy practices apply. Purrbi does not sign you up for FDA emails, share your email for that purpose, or provide native push recall alerts in this version.
Local copies and preview mode
Firebase mode keeps a bounded local copy of recent pet profiles, reports, bookmarks and products in device preferences so saved reports remain available offline. It has no additional application-level encryption. Firestore's separate disk persistence is disabled. Firebase also maintains sign-in state on your device; use Sign out when you no longer want the session active. Purrbi requests removal of its account cache on sign-out, account change or deletion; this is not a promise of secure erasure from device or operating-system backups.
Offline reports contain their saved profile, sources and dates. They do not perform a new lookup, discover a new product or check current recalls. Limits on the number of locally displayed records are not deletion schedules for cloud records.
Fictional preview mode stores preview profiles, snapshots, saved products and issue reports locally and separately from real accounts. They are not automatically uploaded into an account. Use Delete local preview data to remove them; it does not delete a Firebase account.
Retention and deletion
Private account profiles, saved analyses, bookmarks and reports currently have no automatic age-based expiry. They remain until removed through supported account operations, including account deletion. Removing the app or signing out does not delete cloud account records. Local cache size limits and public-cache refresh intervals do not guarantee deletion after a fixed time.
In Profile, choose Delete my account and confirm your password to request deletion of the Firebase Authentication account and its private Firestore account subtree. The app also requests removal of its local account cache. Earlier scan snapshots are included in account deletion, but editing a pet profile alone leaves those historical copies intact.
A minimal security record containing a hashed account identifier and deletion-start time is retained separately to stop delayed requests from recreating deleted data. It currently has no configured expiry. Generic public-product/source/summary caches and service-budget records also have no configured automatic deletion period. These are distinct from the private account subtree.
Provider security logs, infrastructure records and any provider backups are subject to their applicable retention practices and service configuration; account deletion does not promise immediate deletion from every provider system. Purrbi has not established one universal maximum retention period for these records. We do not promise instant or universal erasure.
You can also email contact@valenciainnovations.com with the subject Purrbi account deletion to request deletion without reinstalling the app. Send the request from your account email if possible; do not send your password. Contact the same address to request access or correction of account-related information or ask about rights applicable to your situation.
Changes to this policy
This revision applies when released with Purrbi. We will identify an updated revision when practices change and provide an appropriate notice or choice for material changes where required. A future subscription, different AI data-sharing flow or new feature would need corresponding disclosures; this policy does not describe those as existing features.