Oruqo Privacy Policy

Last updated October 19, 2026. Effective October 19, 2026.

This Privacy Policy explains how Oruqo (“Oruqo,” “we,” “us”), operated by Inga Washington in Sunny Isles Beach, Florida, USA, collects, uses, shares and protects information when you use oruqo.com, the Oruqo app, and related pages such as pet QR scan pages, lost-pet pages, emergency cards and shared pet links (together, the “Service”).

Short version: we use your information to run Oruqo for you. We do not sell your personal information, we do not share it for targeted advertising, and pet records stay private unless you share or publish them (for example, a lost-pet page). Two things work differently and are explained in section 3: anyone who scans your pet’s Oruqo QR code sees a short public page, and Oruqo Providers that Oruqo has registered see the part of your pet’s information that fits their kind of work when they scan it.

1. Information we collect

• Account information: email address, password (stored only in hashed form by our authentication provider), and profile details you add, such as your name and an optional phone number.
• Pet information you add: pet profiles and photos, health, medication, vaccination and vet-visit notes, allergies, weight, reminders, documents, emergency contacts, sitter details, trips and memories.
• Lost & Found information: when you report a lost pet you choose what to publish: the pet’s photo and description, where and when it was last seen (street, landmark, city and zip code), an optional map pin, and an optional phone number. People who use “Found a pet?” or scan a pet tag can send a message with their name, contact details and where they saw the pet.
• Location: we only use your device’s location if you tap a button such as “Add map pin from my location” and allow it in your device. We store the pin rounded to roughly a city block, not your exact spot. We also use the zip code you enter to send nearby lost-pet alerts and, if you join it, to show the Oruqo Circle Hub feed for your area. We do not track your location in the background.
• Community posts and the community chat: if you use the Oruqo Circle Hub, the photos and text you post, the messages you send in Oruqo Circle Chat, whether you are a member of the chat, your display name, your zip code, the record that you agreed to the Circle Hub Group Rules (rules version, date and time), the members you block, and the reports you make (the reason, any note you add and a copy of the reported text). If someone reports you, we keep the report, the reason and a copy of the reported content, and a record of any removal or ban.
• Messages and support: information you send us by email or through forms.
• Memberships and payments: Oruqo memberships are sold inside the Oruqo iPhone app as Apple in-app subscriptions, and Apple handles the payment. Apple tells us your plan, subscription status, transaction ID and renewal and billing dates, including through App Store Server Notifications when a subscription starts, renews, changes or ends. We never see or store your card number or other payment details. The oruqo.com website does not take new payments. A small number of early memberships were started on the website through Stripe before web sign-up was paused; for those, we keep the Stripe customer and subscription ID and status, and Stripe holds the payment details. Early website members cancel by emailing support@oruqo.com, and we cancel the Stripe subscription for them.
• Shop activity: when you are signed in and tap a product, store or partner in the Oruqo shop, we save that click to your account (the item, the store and the link) so we can show your “Buy again” and “Order again” lists. Items you save to those lists yourself are saved to your account too. You can remove saved items in the shop, and all of this is deleted with your account. We do not receive what you buy from partner stores.
• QR scans and messages: when someone opens your pet’s QR page, we process the request to show the page. When an Oruqo Provider scans it, we record the provider, the pet and the time (the “scan log”); you can ask us for this list for your pet. If a finder uses “Message the owner” or “Call the owner”, the message and any contact details the finder types are passed to you; the call button looks up the phone number you typed on the Wallet Card on our server.
• Oruqo Provider accounts: for businesses and freelancers Oruqo adds as providers, we keep the business name, the group Oruqo assigned (Medical, Grooming, Care or Behavior), listing details they add, when they accepted the provider agreement, the pets they scanned, and, if a paid provider membership is ever turned on, billing status from Stripe.
• Referral links: if you open a provider’s Oruqo referral link or QR code, we record the visit and set a cookie called oruqo_ref for 30 days so that, if you create an account, it can be counted for that provider. We record which provider referred your new account. The provider sees only totals, never who signed up.
• Device and usage information: basic technical data such as browser and device type, pages visited, approximate region derived from IP address, and error logs. See “Analytics and cookies” below.
• Face ID: if you turn on Face ID (or Touch ID), the check happens only on your device and is handled by Apple. On the website, your device may create a passkey for this, and it stays on your device. Oruqo never receives or stores your face, fingerprint or any other biometric data, and nothing biometric is sent to us.
• Notifications: if you enable phone alerts, we store a push token for your device so reminders and alerts can reach you. In the iPhone app, alerts are delivered through Expo’s push service and Apple Push Notification service.

2. How we use information

• To provide the Service: store your pet records, send reminders and alerts, publish lost-pet pages you create, show QR scan pages, deliver sighting and finder messages to owners, show registered Oruqo Providers the information for their group so they can care for the pet, and show community posts.
• To run the Oruqo Provider program: register and manage providers, keep scan logs so owners can see who scanned, and count referral sign-ups for each provider.
• To run subscriptions, free trials and billing, and to send any notices the law requires.
• To answer support requests, keep the Service secure, prevent fraud and abuse, and moderate community content.
• To understand, in aggregate, how the Service is used and to fix problems.
• To comply with the law and enforce our Terms of Service.

We do not sell personal information, we do not share it for cross-context behavioral (targeted) advertising, and we do not use your pet’s health information or your location for advertising.

3. What other people can see

• Private by default: your account and pet records are visible only to you, except as described in this section.
• Your pet’s QR code (Wallet Card and Pet Passport): each pet gets its own QR code automatically when you add the pet. Anyone who scans it, without signing in, sees a public page with the pet’s photo, name and breed, the word “Microchipped” if a chip number is saved (never the number), and your first name. If you typed a phone number on the Wallet Card, the page shows a “Call the owner” button. The number is not printed on the page, but it appears in the caller’s phone app when the call starts. The page also has a “Message the owner” form. Your account phone, last name, email, address, birthday, vet, chip number and health records are never shown on this public page. Scanning does not send you a notification; a message does.
• Oruqo Providers: Oruqo registers and adds each provider itself (providers cannot sign themselves up) and assigns one group: Medical (vets), Grooming (groomers), Care (sitters, walkers, boarding and daycare) or Behavior (trainers). When a signed-in provider scans your pet’s QR code, they see only the information Oruqo has set for their group, so they can care for your pet safely (for example, a groomer sees grooming notes and a vet sees vaccines, health records and medications). Owners do not choose these settings for each provider; Oruqo sets them for each group. Providers must accept an agreement to use the information only to care for the pet and to keep it confidential (see the Provider Terms). They can reopen a pet they scanned for 30 days. Email support@oruqo.com to get the list of providers who scanned your pet. This is different from Share links (below), where you choose the information and how long it is shared; each pet’s Wallet Card is on when you add the pet, and the app explains how provider access works when you add a pet, when you first open its Wallet Card and before you turn a card back on. Turning the pet’s Wallet Card off takes effect right away: the Wallet Card QR page stops working, and providers can no longer see any of your pet’s information through Oruqo, including its name, breed, species and scan history (the pet disappears from their provider list). What remains is only what anyone can see: the public Pet Passport QR page (photo, name, breed and the word “Microchipped”), plus anything a provider already learned or wrote down while caring for your pet, which Oruqo cannot take back. The scan log stays visible to you and to Oruqo until you delete the pet or your account. To also turn off the Pet Passport QR page, or to have a pet’s data removed, email us. “Registered Oruqo Provider” means only that Oruqo added the business and its contact email. Oruqo does not check providers’ licenses, qualifications, insurance, background or safety, or the quality of their services.
• Share links (sitters, family, vets): when you use the Share button, you choose the pet, which sections to share and how long the link works. Anyone with the link can see those sections without an account until it expires or you turn it off. If you choose “Let them help with care”, they can also mark medications and reminders as done (this updates your pet’s records) and leave notes for you. They cannot edit or delete your pet’s profile or records.
• Emergency cards: anyone with the card link can see what you chose to include. You can turn a card off at any time.
• Lost-pet pages are public. Anyone with the link, and people you share it with on social media, can see the details you chose to publish. By default, Oruqo does not show your phone number, home address or email; finders contact you through private Oruqo messages unless you choose to show a phone number. Please do not type your home address as the “last seen” place. Once a page is shared on social media, copies may stay on those sites even after you mark your pet as found.
• Oruqo Circle Hub: your posts, photo and display name are visible to other members near your zip code. In Oruqo Circle Chat, the community chat for everyone in Oruqo Circle, every member can see your display name, that you are a member, and every message you send there, including what you say about your pets. The chat never shows your phone number, email, address or zip code, and there are no private messages. Reports are private: the member you report is not told who reported them, and only Oruqo administrators can see reports, blocks and bans.

4. Service providers and other companies

We use providers who process data for us under contract and only to run Oruqo:

• Supabase — database, sign-in and file storage (United States).
• Vercel — website and app hosting, and privacy-friendly Web Analytics.
• Apple — the App Store, TestFlight, in-app subscription billing and App Store Server Notifications (which tell us when a membership starts, renews, changes or ends), on-device Face ID, and push notifications on Apple devices. Google may deliver push notifications on Android or Chrome.
• Expo — delivers push notifications (reminders and lost-pet alerts) to the Oruqo iPhone app. Expo receives your device’s push token and the alert text.
• Resend — sending account, reminder, trial and membership emails (it receives your email address and the email content).
• Stripe — billing for early memberships started on the website before web sign-up was paused (the website takes no new payments), and, if Oruqo ever turns on paid provider memberships, provider billing.
• OpenStreetMap — if you open a map link on a lost-pet page, you leave Oruqo and OpenStreetMap’s policy applies.

Affiliate and partner links: when you click a link to a store or service (for example Amazon or partners we work with through networks such as CJ, Awin, Impact or Rakuten), you go to that company’s site and its privacy policy applies. That company or network may use cookies to record that you came from Oruqo so a commission can be credited. We may receive reports of clicks and commissions from those networks, which do not identify you to us by name. Separately, Oruqo itself saves shop clicks to your account as described in section 1 (“Shop activity”). See our Affiliate Disclosure.

Other disclosures: we may disclose information if required by law or valid legal process, to protect the rights, safety or property of users, pets, the public or Oruqo, or as part of a merger, sale or transfer of Oruqo, in which case this policy continues to apply.

5. Analytics and cookies

We use essential storage to keep you signed in and remember your settings. Vercel Web Analytics counts page visits in aggregate without advertising cookies and without building a profile of you across other websites. Optional in-app feature analytics (which app screens you open) run only if you agree, and never include pet records, health notes or document contents. You can withdraw your consent at any time in Settings → Privacy choices. It takes effect immediately: we stop collecting optional analytics and delete the optional usage events already saved for your account. Saying no or withdrawing does not change how Oruqo works for you. We also record one sign-up event when an account is created. The provider referral cookie oruqo_ref is described in section 1. We do not use advertising cookies. Details are in our Cookie Policy.

6. How long we keep information

• Account, pet records, files and photos: while your account is open. When you delete your account, our server first removes every file and photo you uploaded, in all of our storage areas (pet photos, documents, memories, lost-pet photos and Circle photos), checks that none are left, and then deletes your account and records from our active systems. You see a success message only when this is complete. If any step fails, you see an error instead, our team is alerted, and we finish the deletion within 30 days (you can also try again or email us). A deletion-failure record holds only your account ID and the step that failed, and is deleted within 90 days.
• Lost-pet pages and sighting messages: until you delete them or your account. A pet marked as found stops appearing in nearby searches.
• Provider scan logs and referral counts: while the pet, the provider account or the referred account exists. They are deleted with the pet or your account.
• Community posts and community chat messages: until you remove them, we remove them under our rules, or you delete your account. Removed chat messages are deleted within 90 days.
• Circle Hub rules agreements, chat membership and blocks: while your account is open; deleted with your account.
• Reports and moderation records: while a report is open, and deleted 2 years after it is closed. Reports you made are deleted when you delete your account. Reports about you are unlinked from your account when you delete it, but the reported content copy may be kept until the report is deleted, to keep the community safe. Ban history is kept for 2 years so we can recognize repeat violations, and is deleted with your account.
• Shop activity and saved “Buy again”/“Order again” items: until you remove them or delete your account.
• Backups: our database provider keeps encrypted database backups for disaster recovery that are overwritten on a rolling basis within 30 days. Uploaded files and photos are not kept in those backups. We do not restore deleted accounts from backups; if a backup ever has to be restored after a system failure, we delete any deleted accounts again.
• Information held by other companies: deleting your Oruqo account does not delete what Apple (App Store purchases and subscriptions), Stripe (payment records for early website memberships) or affiliate stores and networks (your purchases and their cookies) keep under their own privacy policies. Ask them directly. Apple subscriptions must be cancelled in your Apple account; Oruqo cancels an active Stripe website membership when you delete your account.
• De-identified records: billing event records from Apple and anonymous provider referral totals may be kept without your account ID linked to them.
• Billing and consent records: kept as long as the law requires (for example, proof that you agreed to subscription terms is kept for at least 3 years, as California law requires).
• Support emails: up to 2 years, unless needed longer for a legal reason.

7. Your choices and rights

Wherever you live, you can see and edit your information in the app, download a copy of your main pet records in Settings, and delete your account at any time in Settings or on our account deletion page. The Settings download covers pet profiles, health, medication, vaccination and vet-visit records, allergies, weight, reminders, document details, memories, trips and emergency and sitter details; it does not yet include photos and files or other records such as lost-pet pages, Wallet Card settings, scan logs or Circle posts. For a complete copy, or to ask us to delete a pet’s data or turn off a pet’s QR code, email support@oruqo.com. You can also email us to ask for access, a copy, correction or deletion.

U.S. state privacy rights. Depending on where you live (for example California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah or Virginia), you may have the right to: know and access the personal information we have about you; correct it; delete it; get a portable copy; opt out of sale, targeted advertising and certain profiling; and not be treated differently for using these rights. Oruqo does not sell personal information or use it for targeted advertising or profiling, and we offer these rights to all U.S. users whether or not a particular law applies to a business of our size.

Sensitive information. We only use precise location (the optional map pin) when you choose to add it, and only to show where your pet was last seen. We do not use sensitive information to infer characteristics about you.

California residents (CCPA/CPRA). In the last 12 months we collected these categories: identifiers (email, display name, optional phone number, account ID and device push token); customer records (account and billing status); commercial information (subscription plan, and products and stores you tap in the Oruqo shop); internet activity (pages visited, error logs); approximate and, if you choose, precise geolocation (zip code, optional rounded map pin); audio/visual information (photos you upload); and other information you choose to add about your pets. Sources: you, people who send you sighting or tag messages, Oruqo Providers who scan your pet’s QR code (the scan log), and our service providers. Purposes and recipients are described above. We do not sell or “share” personal information, and we do not knowingly sell or share information of consumers under 16.

EEA, UK and Swiss users (GDPR). We process your data to perform our contract with you, with your consent (for example optional analytics, notifications and the map pin), to meet legal obligations, and for our legitimate interests in running and securing the Service. You may access, correct, delete, restrict or object to processing, request portability, withdraw consent at any time, and complain to your local data protection authority. Your data is processed in the United States using safeguards our providers offer, such as the European Commission’s Standard Contractual Clauses.

How to make a request. Email support@oruqo.com from the address on your account. We verify requests by confirming that email address. You may use an authorized agent; we will ask for proof of permission and may ask you to confirm your identity directly. We respond within 45 days (30 days for EU/UK requests) and will tell you if we need more time. Requests are free unless clearly excessive. If we decline a request, you may appeal by emailing support@oruqo.com with “Privacy appeal” in the subject; we will answer within 60 days, and if you are not satisfied you may contact your state Attorney General.

8. Your privacy choices, Global Privacy Control and Do Not Track

Because we do not sell or share personal information, no opt-out is needed, but we treat a Global Privacy Control (GPC) browser signal as a valid opt-out request. There is no common standard for “Do Not Track” signals, so we do not respond to them separately. We do not track you across other companies’ apps or websites.

9. Emails, notifications and texts

We send service emails needed to run your account, such as sign-in and account emails. Apple sends receipts for App Store memberships. Marketing emails, if we send any, will include a working unsubscribe link and our postal address, and we honor opt-outs within 10 business days. Phone alerts and calendar access are optional and can be turned off in your device settings. Oruqo does not currently send SMS text messages; if that changes, we will ask for your consent first.

10. Children

Oruqo is for people 13 and older and is not directed to children under 13. Consistent with the Children’s Online Privacy Protection Act (COPPA), we do not knowingly collect personal information from children under 13. If you believe a child has given us information, email support@oruqo.com and we will delete it.

11. Pet health information

Oruqo stores the pet health details you add but does not check them for accuracy. Pet health information is not human medical information and is not covered by HIPAA. Oruqo is not veterinary advice; see Not Veterinary Advice.

12. Security and breaches

We use encryption in transit, access controls and row-level security so each account can reach only its own private records. No system is perfectly secure, so please use a strong, unique password. If a security incident affects your personal information, we will notify you and authorities as required by law, including Florida law (section 501.171, Florida Statutes).

13. California “Shine the Light”

We do not disclose personal information to third parties for their own direct marketing purposes.

14. Links to other websites

Oruqo links to independent stores and service providers. We are not responsible for their privacy practices; please read their policies before giving them information.

15. Changes to this policy

We may update this policy. We will post the new version here with a new date and, for material changes, notify you by email or in the app before they take effect.

16. Contact

Questions or requests: support@oruqo.com. Oruqo, Sunny Isles Beach, Florida, USA.