Privacy Policy
Last updated: 2026-10-22
Carino is a small virtual pet you care for alone or together with one other person. This policy explains what we store, what stays on your device and what your duo can see.
1. Data controller
Carino (heycarino.com) is operated by Keenvo Tech OÜ, registered in Estonia (17457927), Kotkapoja tn 2a-10, 10615 Tallinn, Estonia. Keenvo Tech OÜ is the data controller responsible for your personal data under applicable data protection laws (including the GDPR and the LGPD). Advertising, traffic acquisition, and monetization services are provided by ActiveView OÜ, registered in Estonia (16639782), Kotkapoja tn 2a-10, Tallinn 10615, Harju, Estonia. You can reach the controller at support@heycarino.com.
2. What we collect
- On your device only: your habit list and which habits you ticked each day stay in your browser. They are never sent to us.
- Your pet: the name and color you choose, its energy, shared streak, rest tokens and stage.
- Care moments: when each check-in happened, its type (care, snack or blanket) and the points it gave. Never which habit it was.
- Duo: when you joined or left a duo, the nudges you sent or received, blocks and reports.
- What you tell your pet (optional): a nickname of up to 16 characters for how it calls you, and your birthday as month and day only, never the year. You can change or remove them at any time.
- Memories and the dream: the days your pet keeps in its memory book (such as the day you met or the first day you both cared), whether your duo dreams of adopting a real dog and whether one came home. They belong to the pet, not to a person.
- Account (optional): your e-mail address once you confirm it with a code, whether you declared you are 18 or older (we keep the result, not your birth date), your time zone, language, consents and e-mail preferences.
- Duo Plus, where available: the plan you chose, its status and its dates. Payments are handled by Stripe; we never see your card.
- Device: a device credential in a cookie your browser keeps private from scripts, and an anonymous visitor id, so your pet stays with you on this browser.
- Usage: pages viewed, buttons tapped and check-ins counted. Never your pet's name, your habits, your e-mail or invite codes.
3. How we use it
We use this data to run Carino: keep your pet and your duo in sync, count check-ins, keep the memory book, write your pet's thoughts, send the e-mails you turn on, show rewarded videos where available, run Duo Plus, measure what works and keep the service safe. We do not sell, rent or trade your personal information.
4. Duo mode and age (18+)
Carino is meant for adults. Before you invite someone, accept an invite or turn on e-mails, we ask for your birth year and month and keep only the result. Under 18, duo mode and e-mails stay off. If you believe someone in a duo is a minor, report them from your account page and we will review it.
5. What your duo sees
Your duo sees whether you cared for the pet today, whether you have been away for 3 days or more, the nudges you send, when you joined, the nickname you gave your pet and, on your birthday, that it is your birthday (never the date). The memory book, the thoughts and the dream belong to the pet, so both of you see them. Your duo never sees how many habits you have or which ones, never a year of birth and never your e-mail.
6. Third-party services
Hosting and server functions run on Cloudflare. Our database is hosted by Supabase. E-mail is sent through Resend. Your pet's thoughts are written by Google Gemini through OpenRouter. Duo Plus payments, where available, are processed by Stripe. Where rewarded videos are available, ads are served through ActiveView with Google Ad Manager and certified partners. The link to PickClue Adopt, shown in the US to duos who dream of adopting, carries only campaign tags, never data about you or your pet. We do not sell, rent or trade your data.
7. Advertising
Free accounts may be shown ads served through Google’s ad network (Google Ad Manager) and certified ad partners. These third-party vendors use cookies and similar technologies to serve ads based on your prior visits to this and other websites. Opting out disables interest-based targeting only; you may still see non-personalized, contextual ads. Paid subscribers are not shown ads.
You can opt out of personalized advertising at Google My Ad Center or aboutads.info. To learn how Google uses information from sites that use its services, see How Google uses information from partner sites.
8. Availability by country
Carino is not available in some countries yet. There the site shows a notice, and no pet, invite, e-mail or rewarded video can be created.
9. Weather where you are
To show Carino curling up under a blanket when it is cold, the Worker that serves the app reads the approximate location of your connection, which our network provider (Cloudflare) estimates, rounds it to an area of about 50 km and asks MET Norway, the Norwegian Meteorological Institute, for the temperature there. Only that rounded area leaves our edge; your location is not stored, logged or linked to you, and the app only learns whether it is cold. Weather data from MET Norway, licensed under CC BY 4.0.
10. Your pet's thoughts, written with AI
During a new pet's first 7 days, and every day with Duo Plus, your pet shares a short thought written by an AI model and marked as written with AI. To write it we send only structured facts about the pet: its name, stage, days together and streak, whether each member cared today, the nicknames you chose, whether it is cold where you are, its latest memories and the dream of adopting. Never free text, an e-mail, an id or your location. The request goes through OpenRouter to Google Gemini, only to providers that do not keep it or train on it. Both of you read the same thought, and it is deleted after 30 days. When the model is not available, your pet says a line we wrote by hand.
13. Data retention
Check-ins are kept for 180 days; invites and archived pets for 120 days; your pet's thoughts for 30 days; reports until they are reviewed. Nicknames and birthdays stay on your seat, and the memories and the dream with the pet, until you delete your data or the pet is deleted. Deleting your data from the account page removes your rows at once; a pet you shared stays with your duo. Sign-in codes expire after use, and reminder records are kept for 90 days.
14. Your rights
You can access, update, or delete your account at any time from the app, or request a data export or deletion by emailing support@heycarino.com. Depending on where you live, the following data protection laws grant you additional rights:
GDPR (European Union, EEA & United Kingdom)
General Data Protection Regulation (EU 2016/679) and UK GDPR
We process your personal data on the legal bases of contract performance (providing the service you signed up for), consent (push notifications, marketing emails), and legitimate interest (security, product analytics). You have the right to access, rectify, erase, and receive a portable copy of your data, to restrict or object to its processing, and to withdraw consent at any time without affecting prior processing. You may lodge a complaint with your local supervisory authority.
LGPD (Brazil)
Lei Geral de Proteção de Dados (Law No. 13,709/2018)
You have the right to confirmation that we process your data, access to it, correction of incomplete or outdated data, anonymization or deletion of unnecessary data, portability to another provider, information about who we share data with, and revocation of consent. Requests are handled by the data controller identified above. You may also file a complaint with the ANPD (Autoridade Nacional de Proteção de Dados).
CCPA/CPRA (California, United States)
California Consumer Privacy Act, as amended by the CPRA
California residents have the right to know what personal information we collect and how it is used, to request its deletion or correction, to opt out of its sale or sharing (we do not sell personal information), to limit use of sensitive personal information, and not to be discriminated against for exercising these rights.
15. Children's privacy
Carino is not intended for users under 18. We do not knowingly collect information from children; if you believe a child has provided us personal information, contact us and we will delete it.
16. Security
We use industry-standard measures including encryption in transit (TLS) and database row-level security. No method of transmission over the internet is 100% secure.
17. Changes to this policy
We may update this policy from time to time and will post the updated version here with a new "Last updated" date. Continued use of Carino after changes constitutes acceptance.
18. Contact
Questions about your data or these terms? Write to support@heycarino.com.