Privacy Policy

This policy describes how XPET Technologies, Inc. collects, uses, shares, and protects information in connection with the XPET website, application, and related services.

Document
Privacy Policy
Entity
XPET Technologies, Inc.
Effective date
July 18, 2026
Last updated
July 18, 2026
Governs
Website, app, services

By creating an account or using the Services, you agree to this Policy. If you do not agree, do not use the Services. Our terms of use are described in our Terms and Conditions, which govern your use of the Services alongside this Policy.

1

Who this Policy applies to

The Services are intended for users 18 years of age and older, as described in our Terms and Conditions. We do not knowingly collect personal information from individuals under 18. See Section 8 (Children and Minors).

The pet health data you upload describes your pet, not a person. However, that data is linked to your account and may contain personal information about you — for example, your name or your veterinarian's contact details — so we treat it as protected information under this Policy.

2

Information we collect

We collect information you provide directly, information collected automatically through your use of the Services, and information we receive from third parties.

Information you provide to us

Account information
Your name, email address, password, and profile details.
Pet profiles
Your pet's name, species, breed, age, sex, and similar details you enter.
Uploaded health data
Health information you upload or otherwise provide about your pet, including genetic and DNA test data (genetic health markers, breed and ancestry results, trait markers, and blood type), oral-health and microbiome reports, and veterinary records such as blood-test and other lab results, diagnoses, and clinical records provided by or through veterinary clinics, including the results parsed from any files you upload.
Diabetes and glucose monitoring data
Blood glucose readings you log manually, dosing and insulin records, feeding and activity notes related to diabetes management, and, where you connect a compatible device, data transmitted from a continuous glucose monitor (CGM) or other connected health device. We use this data to display trends, generate alerts, and produce insights as described in Section 3.
Communications
Messages, support requests, and survey responses you send us.
Payment information
Billing details processed by our payment provider when you subscribe to a paid tier. We do not store full payment card numbers.

Information collected automatically

When you use the Services, we collect log data, IP address, browser and device identifiers, pages viewed, and actions taken within the Services, along with cookies and similar technologies described in Section 7.

Information from third parties

We receive information from service providers that help us operate the Services, such as authentication, hosting, and payment providers, and, where you authorize it, from veterinary clinics or device manufacturers that share data with us on your behalf.

3

How we use your information

We use the information described above to:

  • create and manage your account and pet profiles;
  • receive, parse, store, and display the health reports and records you upload;
  • generate personalized insights, summaries, risk indicators, reminders, and recommendations about your pet's health based on the data you and your sources provide (automated processing);
  • support diabetes and glucose monitoring, including displaying trend charts, generating threshold-based alerts, and producing AI-assisted insights from glucose readings, insulin logs, and connected device data;
  • send you notifications and reminders — for example, glucose alerts, re-test reminders, or appointment reminders — which you can manage or turn off in your account settings;
  • provide, maintain, and improve the Services, including your subscription;
  • respond to your requests and provide customer support;
  • send service-related communications, and marketing communications only where permitted and with the ability to opt out;
  • create de-identified or aggregated data that does not reasonably identify you or your pet, which we may use to research pet health, improve our models and the Services, and for analytics — we maintain such data in de-identified form and do not attempt to re-identify it;
  • monitor, secure, and troubleshoot the Services and prevent fraud or abuse; and
  • comply with legal obligations and enforce our Terms and Conditions.

We do not use your uploaded pet health data to make decisions about you, and we do not sell it.

Not a medical or veterinary device

The insights, alerts, trend charts, and AI-generated content the Services produce are not intended to diagnose, treat, cure, or prevent any disease or medical condition in your pet, and they do not constitute veterinary advice. Always consult a licensed veterinarian before making changes to your pet's treatment, insulin dosing, or care plan, and do not rely on XPET as your sole means of monitoring a diabetic pet's condition.

3a

Diabetes and glucose monitoring

XPET's diabetes monitoring features — including manual glucose logging, trend charts, threshold alerts, AI-generated insights, and, where available, integration with continuous glucose monitors or other connected devices — are designed as supportive tracking tools for pet owners managing a diabetic pet alongside veterinary care. These features do not constitute veterinary advice and are not a substitute for professional veterinary supervision.

Glucose readings, alerts, and insights generated by the Services may not reflect real-time clinical conditions, are subject to user input error, device calibration limitations, and connectivity gaps, and should not be used as the sole basis for any treatment decision, including changes to insulin dosing, diet, or emergency care.

If your pet may be experiencing a diabetic emergency

Contact your veterinarian or an emergency veterinary clinic immediately — do not wait for an XPET alert.

When CGM or device integration is available, we will provide additional disclosures specific to that feature at the time of setup. See our full Diabetes & Glucose Monitoring Disclaimer for further detail.

4

How we share your information

We share personal information only with service providers and contractors who process it on our behalf and under contract, and only as needed to run the Services. Categories of service providers we work with include:

  • Infrastructure and hosting providers, who store and serve application data and uploaded files;
  • Automated processing and AI providers, who parse uploaded reports and generate personalized health insights on your pet's behalf;
  • Payment processors, who handle billing information for paid subscriptions — we do not store full payment card details;
  • Analytics providers, who help us understand aggregate use of the Services so we can improve them; and
  • Communications providers, who send transactional emails and in-app notifications.

Sharing at your direction

You may choose to share a pet's health reports with your pet's veterinary or care team directly from within the Services. When you do, we disclose that information as you direct.

We may also disclose personal information for legal reasons — to comply with law, respond to lawful requests, or protect the rights, safety, and property of XPET, our users, or the public — or in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. See Section 9.

5

Data retention

We retain personal information for as long as your account is active or as needed to provide the Services. When you close your account, we delete your uploaded health reports, pet records, and glucose logs within 30 days, except where a copy must be retained to comply with legal obligations, resolve disputes, or enforce our Terms and Conditions. You may request deletion sooner as described in Section 9.

6

Data security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information, including health data such as genetic reports and glucose logs. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

7

Cookies and tracking technologies

We use two categories of cookies and similar technologies:

Strictly necessary cookies

Keep you signed in, remember your session, and allow core features of the Services to function. These cannot be disabled without affecting how the Services work.

Analytics cookies

Help us understand, in aggregate, how the Services are used so we can identify problems and improve them. We do not use marketing, advertising, or cross-site tracking cookies, and analytics data is not used to serve you ads.

You can control or disable non-essential cookies through your browser settings. Because we do not use cookies for advertising or cross-context behavioral tracking, no additional opt-out is required, but you remain free to limit cookies at the browser level at any time.

For the full ledger of technologies XPET currently uses, see our Cookie Policy.

8

Children and minors

The Services are intended for users 18 and older. We do not knowingly collect personal information from anyone under 18, and account creation is not permitted for individuals under 18. If we learn that we have collected personal information from someone under 18, we will delete it. If you believe a minor has created an account or provided us information, contact us at privacy@xpet.technology.

9

California privacy rights (CCPA / CPRA)

If you are a California resident, you have the following rights regarding your personal information:

Right to know or access

The categories and specific pieces of personal information we have collected, the sources, the purposes, and the categories of third parties to whom we disclose it.

Right to data portability

To receive a copy of the personal information you have provided in a portable format. Today, the Services let you share and export a pet's health reports directly with your pet's veterinary or care team; if you would like a broader export of your account data, submit a request as described below and we will provide it in a portable format.

Right to delete

Personal information we collected from you, subject to legal exceptions. When you delete your account, we delete or de-identify your uploaded reports and pet records except where retention is legally required.

Right to correct

Inaccurate personal information.

Right to opt out of sale or sharing

We do not sell your personal information or share it for cross-context behavioral advertising, so there is nothing to opt out of; if that changes, we will update this Policy and provide a “Do Not Sell or Share My Personal Information” link.

Right to limit use of sensitive personal information

We do not use or disclose sensitive personal information for purposes beyond those permitted under the CCPA.

Right to non-discrimination

For exercising any of these rights.

Opt-out preference signals

Some browsers offer a Global Privacy Control (GPC) or similar signal. Because we do not sell or share personal information, no opt-out is currently required; if our practices change, we will honor GPC signals as a valid opt-out request.

Categories of personal information collected (last 12 months)

Identifiers

Yes

Name, email, IP address, device ID

Customer records

Yes

Account and billing details

Commercial information

Yes

Subscription purchases

Internet or network activity

Yes

Usage and log data

Geolocation

Yes

Approximate, derived from IP address

Audio/visual

Yes

Uploaded reports and support media

Sensitive personal information

Yes

Account log-in credentials

Inferences

Yes

AI-generated pet health insights

Pet genetic, health, and glucose data describes your pet and is not “genetic information” or “health information” about a human consumer under the CCPA; we nonetheless protect it as account-linked data under this Policy.

How to exercise your rights

Submit a request to privacy@xpet.technology. We will verify your request by confirming information associated with your account. You may use an authorized agent, who must provide proof of authorization. We will not discriminate against you for exercising these rights.

10

Third-party links and resources

The Services may link to third-party websites, products, or resources — for example, veterinary or pet-care resources, or connected-device manufacturers — that we do not control. This Policy does not apply to those third parties, and we encourage you to review their privacy policies.

11

De-identified and aggregated data

We may create and use de-identified or aggregated data that does not reasonably identify you or your pet, to operate, analyze, research, and improve the Services. We maintain such data in de-identified form and do not attempt to re-identify it, except as permitted by law.

12

Changes to this Policy

We may update this Policy from time to time. We will post the updated version with a new “Last updated” date and, where required, provide additional notice, such as an in-app notification or email.

13

Contact us

XPET Technologies, Inc.

1 Sansome St Suite 3500

San Francisco, CA 94104

Privacy inquiries: privacy@xpet.technology