Privacy Policy

Universo Pet ("we", "our" or "Platform") is committed to protecting your privacy and personal data. This Privacy Policy has been prepared in accordance with the General Data Protection Law (LGPD - Law No. 13.709/2018) and transparently describes how we collect, use, store, share and protect your personal information when using our Dr. Paws veterinary consultation services, training guides and pet health management. By creating an account or using the Platform, you expressly agree to the terms of this Privacy Policy. If you do not agree, please do not use our services.

Under the LGPD, the controller of your personal data is: Legal Name: Universo Pet Tecnologia Ltda. Address: Esplanada, Bahia, Brazil Corporate Email: studio.kodaai@gmail.com Data Protection Officer (DPO): For questions related to data protection, you can contact our DPO via email: studio.kodaai@gmail.com

The processing of your personal data is carried out based on the following legal grounds provided for in the LGPD: a) Consent (Art. 7, I): By creating your account, you expressly consent to the collection and use of data necessary to provide our services. b) Contract Performance (Art. 7, V): Processing is necessary to perform the service contract (Premium subscription, Dr. Paws consultations, training guides). c) Legitimate Interest (Art. 7, IX): To improve our services, prevent fraud, ensure Platform security and send relevant communications. d) Life Protection (Art. 7, VII): In cases of veterinary emergencies reported via Dr. Paws consultation, we may process sensitive data to protect the pet's health. e) Legal Obligation Compliance (Art. 7, II): To meet tax, accounting and regulatory requirements.

We retain your personal data only for as long as necessary to fulfill the purposes described in this Policy, except if there is a legal obligation to retain for a longer period: • Registration data: While your account is active + 5 years after deletion (tax/legal obligation). • Dr. Paws consultation history: 2 years after last consultation (for pet medical history purposes). • Payment data: 5 years (tax requirement and Consumer Protection Code). • Access logs: 6 months (Brazilian Internet Civil Rights Framework). • Pet health data: While account is active + 1 year after deletion. After retention periods, data will be anonymized or permanently deleted.

You have the following rights guaranteed by the LGPD, which can be exercised at any time via email studio.kodaai@gmail.com: a) Confirmation and Access (Art. 18, I and II): Confirm the existence of processing and access your personal data. b) Correction (Art. 18, III): Correct incomplete, inaccurate or outdated data. c) Anonymization, Blocking or Deletion (Art. 18, IV): Request anonymization, blocking or deletion of unnecessary, excessive or non-compliant data. d) Portability (Art. 18, V): Request portability of your data to another service or product provider, upon express request. e) Deletion of Consent-Based Data (Art. 18, VI): Delete data whose processing was based on consent. f) Information about Sharing (Art. 18, VII): Obtain information about public and private entities with which we share your data. g) Information about Consent Refusal (Art. 18, VIII): Know the consequences of not providing consent. h) Consent Revocation (Art. 18, IX): Revoke consent at any time (may limit functionality). Response Time: We will respond to requests within 15 calendar days. In complex cases, we may extend for an additional 15 days, with prior notice.

We adopt rigorous technical and organizational measures to protect your data against unauthorized access, loss, destruction or alteration: • Encryption: Sensitive data (passwords, tokens) are encrypted at rest and in transit (TLS 1.3). • Secure Authentication: Firebase Authentication with optional two-factor authentication (2FA). • Access Control: Only authorized employees have access to personal data, under confidentiality. • Firewall and Monitoring: Protection against DDoS attacks, SQL injection and other threats. • Regular Backups: Automated daily backups with 30-day retention. • Audits: Periodic security and LGPD compliance reviews. Despite our efforts, no system is 100% secure. In case of a security incident that may pose a risk to your rights, we will notify you and ANPD as required by LGPD.

We use cookies and similar technologies to improve your experience on the Platform. For detailed information about which cookies we use, their purposes and how to manage them, see our complete Cookie Policy at: /cookies Types of Cookies: • Strictly Necessary: Essential for Platform operation (login, session). • Functional: Remember preferences (language, theme). • Analytical: Google Analytics 4 for usage metrics (anonymized). You can manage cookies through your browser settings.

Universo Pet is not directed to minors under 18 years of age. We do not intentionally collect personal data from children or adolescents without the consent of parents or legal guardians, as required by Art. 14 of the LGPD. If we identify that we have collected data from minors without authorization, we will delete this information immediately. If you believe a minor has provided data without consent, contact: studio.kodaai@gmail.com

Your personal data may be transferred and stored on servers located outside Brazil, especially in the United States (Firebase/Google Cloud, Stripe). These transfers are carried out in accordance with Art. 33 of the LGPD and include adequate protection guarantees, such as: • Standard Contractual Clauses (SCC): Contracts approved by the European Commission. • Certifications: Partners certified in international data protection standards (ISO 27001, SOC 2). • Adequacy: Countries with adequate level of data protection recognized by ANPD. You can request more information about specific safeguards through the DPO email.

We may update this Privacy Policy periodically to reflect changes in our practices, legislation or services. When we make material changes, we will notify you by email or through a prominent notice on the Platform, with at least 15 days' advance notice. Last update date: December 16, 2025 We recommend reviewing this page regularly to stay informed about how we protect your data.

For questions, requests or exercise of rights related to this Privacy Policy and the LGPD, contact: DPO Email: studio.kodaai@gmail.com Subject: "LGPD - [Your Name] - [Request Type]" Physical Address: Universo Pet Tecnologia Ltda. Esplanada, Bahia, Brazil Related Pages: • Terms of Use: /termos • Cookie Policy: /cookies • Legal Notice: /aviso-legal We are available to clarify any questions about how we process your personal data.