Privacy Policy

Last Updated: March 24, 2026

1. Introduction

Vetilis Limited ("we", "us", "our") is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use the Scapp mobile application and website ("the App").

This Policy is intended to comply with the Personal Data (Privacy) Ordinance (Cap. 486) ("PDPO") of the Hong Kong Special Administrative Region. By using the App, you acknowledge that you have read and understood this Policy.

2. Data Controller and Contact Details

The data controller responsible for your personal data is:

  • Vetilis Limited
  • Registered office: Unit 2904–05, 29/F, Universal Trade Centre, 3 Arbuthnot Road, Central, Hong Kong
  • Email: privacy@catscapp.com

For any questions, data access requests, or correction requests, please contact us at privacy@catscapp.com.

3. Personal Data We Collect

We collect personal data only for purposes directly related to the operation of the App. The types of personal data we may collect include:

  • Account Information: When you register, we collect your name, email address, and a password (hashed).
  • Profile Information: If you choose to provide, a profile picture and a username.
  • Location Data: If you grant permission, we collect your approximate or precise location to help you report sightings and to display street cat locations on a map.
  • User Content: Photos, text descriptions, and comments you upload. (Note: Photos may contain metadata or inadvertently include personal data of third parties.)
  • Device Information: Device model, operating system, app version, and unique device identifiers for troubleshooting and analytics.
  • Usage Data: Information about how you interact with the App, such as features used, timestamps, and frequency of use.
  • Communication Data: If you contact us via email or in-app support, we collect the content of your communication and your contact details.

4. How We Collect Personal Data

We collect personal data through:

  • Direct interactions (when you register, submit content, or contact us).
  • Automated technologies (via cookies, log files, and similar technologies when you use the App).
  • Third‑party services (e.g., if you sign in via a social media account, we may receive your basic profile information from that platform; we will obtain your consent before doing so).

5. Purposes of Collection and Use

We use your personal data for the following purposes, which are directly related to our function:

  • To create and manage your user account
  • To enable you to report street cat sightings and share information with the community
  • To display location‑based information on maps
  • To communicate with you about your account, the App, or support inquiries
  • To improve the App, fix bugs, and analyse usage trends (aggregated or anonymised)
  • To ensure the security of the App and detect fraudulent or unauthorised activity
  • To respond to legal requests, enforce our Terms and Conditions, or protect the rights and safety of users and the public
  • To send you marketing communications only if you have given explicit consent

We will not use your personal data for any "new purpose" (i.e., a purpose not disclosed in this Policy) without first obtaining your consent.

6. Disclosure and Sharing of Personal Data

We do not sell, rent, or trade your personal data. We may share your personal data only in the following circumstances:

  • With your consent: We may share information with third parties when you explicitly direct us to do so.
  • Service providers: We engage third‑party companies to perform services on our behalf, such as cloud hosting, analytics services, and customer support tools. We impose contractual obligations on these service providers to ensure they handle personal data in compliance with the PDPO.
  • Legal requirements: We may disclose personal data when required by law, court order, or government regulation, including compliance with lawful requests from the Hong Kong Police, the Office of the Privacy Commissioner for Personal Data, or other authorities.
  • Defamation and doxxing: If we receive a court order or a valid legal complaint alleging defamation, we may disclose the identity of the user who posted the content to the aggrieved party or to the authorities as permitted by law.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, and in compliance with our legal obligations. Retention periods are as follows:

  • Account data: Retained for the duration of your account. If you close your account, we will delete your personal data within 30 days, unless retention is required for legal or legitimate business reasons.
  • User Content: Photos and posts remain visible to other users until you delete them or your account is closed. Deleted content may remain in backups for a limited period.
  • Location data: Stored only as part of your reports; retained with the report until you delete it or your account is closed.
  • Logs and analytics: Aggregated or anonymised data may be retained longer for trend analysis; personally identifiable logs are deleted after 12 months.

We will securely delete or anonymise personal data when it is no longer needed.

8. Data Security

We take all practicable steps to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our security measures include:

  • Encryption of data in transit using TLS/SSL.
  • Encryption of sensitive data at rest (e.g., passwords are hashed).
  • Access controls restricting internal access to personal data to authorised personnel only.
  • Regular security reviews and updates.
  • Incident response procedures in case of a data breach.

If a personal data breach occurs that may cause harm to individuals, we will notify affected users and the Privacy Commissioner for Personal Data as required by the PDPO.

9. Cookies and Tracking Technologies

The App may use cookies and similar technologies to enhance user experience and analyse usage. You can manage your cookie preferences through your device settings. Disabling cookies may affect certain functionality.

We do not use cookies for direct marketing without your consent.

10. Your Rights Under the PDPO

Under the Personal Data (Privacy) Ordinance, you have the following rights:

  • Right of Access (DPP6): You have the right to request access to your personal data held by us. We will respond within 40 days after receiving a valid access request. We may charge a reasonable fee for processing access requests.
  • Right of Correction (DPP6): You have the right to request correction of any inaccurate personal data. Correction requests will be processed promptly.
  • Right to Withdraw Consent: Where processing is based on your consent, you may withdraw your consent at any time.
  • Right to Opt‑out of Direct Marketing: You may opt out of receiving marketing communications at any time by clicking the "unsubscribe" link in any email or by contacting us.

To exercise these rights, please contact us at privacy@catscapp.com with the subject line "Data Access Request" or "Data Correction Request". We may ask for proof of identity to ensure we are responding to the rightful individual.

11. Direct Marketing

We will not use your personal data for direct marketing unless you have given your explicit opt‑in consent. If you have given consent, you may withdraw it at any time free of charge.

12. Cross‑Border Data Transfer

We may transfer personal data outside Hong Kong to our service providers. When we do so, we ensure that the transfer is for a purpose directly related to the operation of the App, and the recipient provides a standard of protection comparable to the PDPO.

13. Children's Privacy

The App is not directed to children under the age of 13. We do not knowingly collect personal data from children under 13. If we become aware that we have collected personal data from a child under 13 without parental consent, we will delete that information promptly.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via the App or by email. The "Last Updated" date at the top of this Policy will reflect the effective date. Your continued use of the App after the changes constitutes your acceptance of the updated Policy.

15. Language

This Privacy Policy is written in English. If it is translated into any other language, the English version shall prevail in the event of any inconsistency.

16. Contact Us

For any questions, to exercise your rights, or to report a privacy concern, please contact:

  • Vetilis Limited
  • Email: privacy@catscapp.com