Privacy Policy
佩友科技（深圳）有限责任公司 provides Pethesya LINK. This policy explains how your information is used, stored and deleted. See the Data Use Summary for details.
This policy covers Pethesya LINK for iOS provided through the App Store and TestFlight, where available. It describes the app’s actual information handling. Apple’s distribution and system services, your browser and your email provider also handle information under their own rules.
No account is needed. Device information, images and videos are handled on your phone and device. The app does not upload them to us.
Opening online information pages creates access logs. If you email us, we receive what you send.
1. What information is used
- Connection and controls: Bluetooth and device identifiers, model, version, linking status, battery level, settings and content records help find, connect and manage devices. Your phone and device store credentials to verify your access.
- Images and videos: only files you select and their accompanying information are used for previews, cropping and conversion on your phone. After you confirm, content is sent to your device over Bluetooth. Syncing device content saves preview copies on your phone.
- Device images and names: help you identify your devices and stay on your phone.
- Language: your system or chosen language is used, and the preference is saved on your phone.
Bluetooth permission is needed to discover, connect to and manage compatible devices. You can refuse it or turn it off in iOS settings; related device functions may stop, while help, legal documents and demo functions that do not need Bluetooth remain available. The system photo picker provides only the image or video you select, and you may cancel. The app does not request access to your entire photo library, your geographic location, the camera or microphone, and does not alter your originals. The picker or iCloud may retrieve a selected file under your Apple settings.
Discovery and management use the system’s CoreBluetooth peripheral identifier, broadcast name, signal strength, device identifier and serial number, along with linking, configuration, content and operation status. The CoreBluetooth identifier is not a Bluetooth MAC address. The app does not read your phone’s IMEI or advertising identifier. Selected media may contain images of people or other sensitive details and is processed only for your requested operation.
Demo mode uses simulated device and content state separately from real device management. Leaving demo mode clears that session’s data. Temporary copies of selected media and language preferences are handled as described in this policy.
Standard releases do not write the app’s debug diagnostic files or contain an automatic crash-upload SDK. Apple may provide platform diagnostics under its rules and your settings; TestFlight automatically shares crash and usage information. See the separate Apple platform information below.
Personal information collection list · Personal information shared with third parties
2. Storage and deletion
- Temporary editing files: The app may create private copies of selected media and editing results. Files are cleaned up when no longer needed for editing or transfer recovery; unfinished transfers or unconfirmed results can require continued retention. Startup cleanup protects active or unresolved work before removing eligible leftover drafts. A cleanup failure can defer removal; this is not another purpose for retaining information.
- Deleting playback content: After the device confirms deletion, the selected item is removed from its playback list. The app cleans up the corresponding outdated preview after confirmation or synchronization; failed local cleanup may be deferred. Your photo-library originals are unchanged.
- Unlinking a device: Successful unlinking clears that device’s local records, associated cache, avatar and management credentials. Its playback content on the physical device remains. If a required step or cleanup fails, the app keeps the necessary recovery state and asks you to finish the operation rather than treating it as completed.
- Factory reset: When Pethesya L1 completes a factory reset, it clears playback content and personal settings on the device and revokes the previous app management authorization. System Bluetooth pairing records remain, and information on the phone needs to be managed separately.
Device records, preferences, previews and recovery state stay on your phone as needed for continued use or completing operations. In iOS, Delete App removes local app files; Offload App keeps documents and data. Neither operation erases the physical device or completes unlinking, and Keychain credentials may remain. Manage Bluetooth pairing and existing backups separately. Restoring management after reinstalling depends on available credentials and the device’s current linking state.
Local device avatars are excluded from system backup. Other local information, including device records and media files, may be included according to your system backup settings. This differs from Keychain synchronization: the app’s management credentials are stored as nonsynchronizing, device-only Keychain items. Manage existing backups through the relevant system or service. We cannot remotely erase your phone or physical device.
3. When we receive information
Opening online information pages
The website records your IP address, access time, request method, page path and response status solely for security and troubleshooting. Our hosting provider processes these in mainland China and retains them for up to 186 days. Logs contain no device records, images or videos from the app and are not used for advertising or tracking.
Emailing us
We receive your sender address, message, attachments you add and correspondence records to answer inquiries, discuss partnerships, provide product support or handle privacy requests. The app only opens your email app; it does not automatically send or attach information. You can manage devices without emailing us.
Our email provider transmits and stores emails, which we handle in mainland China. Correspondence is kept for one year after the matter is resolved, then deleted or anonymized. If law, a dispute or a security incident requires longer retention, we keep only what is necessary for the required period.
Sharing and third-party components
We do not sell your app information or use selected media for advertising, profiling or model training. The app has no advertising, analytics, push or automatic crash-upload SDK. Apple system frameworks and bundled local media and font components support Bluetooth, file selection, interface, processing and playback. This app processing does not send your media or device records to component providers. Apple’s separate platform diagnostics and TestFlight services are explained below.
Opening an online page sends a request through your browser to our website hosted by Alibaba Cloud in Hangzhou, mainland China. Contacting us by email uses NetEase Enterprise Mail for delivery and storage. These are website and email service providers, not embedded app collection SDKs. Information, purposes and links are set out in the third-party information list. Any disclosure required by law is limited to the necessary scope and handled under applicable safeguards.
Personal information collection list · Personal information shared with third parties
Apple platform diagnostics and TestFlight testing
Apple can provide relevant diagnostics and aggregated app statistics according to your analytics-sharing settings. You can manage these under iOS Privacy & Security, Analytics & Improvements. TestFlight automatically gives us crash and usage reports under its testing terms, independently of ordinary analytics-sharing settings. Reports can include testing, device and version details, plus feedback you submit. Email invitations may identify you; public-link-only testers’ names and email addresses are not shown to us.
We use reports we receive only for product support, troubleshooting and app improvement, keeping information under our control only as long as necessary before deletion or anonymization, subject to legal retention requirements. We do not share TestFlight information with third parties. Apple’s own handling and retention follow its policies.
4. Your rights
Contact us at contact@pethesya.com to request access, copies, correction or deletion of information we hold, withdraw consent, or exercise applicable rights to restriction, objection and portability. Guardians or authorized representatives may act for you. Do not send identity documents initially; we ask only for information needed to verify a request.
We handle requests and respond within 15 working days, or a shorter period required by law. Ordinary requests are free; any lawful fee is explained in advance. We explain any lawful extension or refusal and the next steps. Withdrawing consent does not affect earlier lawful processing. You may request a review or complain to the competent regulator without unjustified disadvantage for exercising your rights.
Under applicable Taiwanese law, inquiry, review and copy requests are handled within 15 days, with notice of any lawful extension.
Where EEA or UK law applies, we process information to provide requested services, with consent where applicable, for legitimate interests in service security and disputes, or to meet legal obligations. You may object to processing based on legitimate interests and complain to the authority where you habitually live or work, or where an infringement occurred. UK users may contact the ICO.
Your rights under other applicable laws remain available. Contact us about recipients, processing locations and safeguards.
There is no app account to register or close; device linking and management authorization are separate from a service account. You can change permissions, replace an avatar, delete playback content, unlink a device or delete the app as described above. Requests to us cover information we actually hold, including correspondence, website records or received testing reports. We cannot remotely clear your phone, system pairing, backups or physical device.
5. Children’s personal information protection rules
This section applies to children under 14 and to other minors protected by applicable local law. A guardian should read this policy and supervise device setup, media selection and any contact with us. The app has no child-account, age-verification or identity-document collection feature. Where guardian consent is legally required, it must be obtained before the relevant processing; this page does not replace that consent procedure.
A child’s selected media may include sensitive information such as their image. The same local processing, Bluetooth transfer, permission controls and retention rules above apply only as needed for the requested function. We do not use children’s information for advertising, profiling or model training. Guardians can cancel media selection, manage permissions and delete local or device content using the methods above.
Guardians can use contact@pethesya.com to request access, correction, deletion or withdrawal concerning a child’s information that we hold. If we learn that such information was provided to us without required guardian consent, we will verify the circumstances and delete it or stop processing as required by law, retaining only what the law requires with appropriate protection. The response periods and security-incident arrangements above also apply.
6. Security and updates
Local records and media use the app’s private storage and iOS file protection. Device management credentials are stored in the local Keychain, with access restricted to an unlocked device and synchronization disabled. These protections do not mean that all records share one storage or encryption method, or that uninstalling erases all system-held credentials. Device management requires authorization. We remedy, notify and report security incidents involving information we handle as required by law.
Important changes to purposes, information scope, recipients or your rights are explained here in advance. We seek consent separately where required. Your legal rights do not depend on the language version.