Privacy Policy

Who the controller is

The data controllers are two individuals acting jointly: Evgenii Bagrov and Aliaksandra Kuchynskaya.

The app is published from two developer accounts: on the App Store by Evgenii Bagrov, on Google Play by Aliaksandra Kuchynskaya. They determine the purposes and means of processing together and are responsible for it together. That is the essence of their arrangement as joint controllers within the meaning of Article 26 GDPR.

You may contact either of them, and that is enough to exercise any of your rights in respect of both. The single address for requests is [email protected].

Postal address of both: 30 Nekrasova St., Voronovo, Grodno Region, 231391, Belarus.

We reply in English and Russian.

Both controllers are established outside the European Union. A representative in the Union under Article 27 GDPR has not been appointed as of this publication; once appointed, their name and address will appear in this section.

What is collected

Account. Your email address — required, and it is also how you sign in. Your name, if you give one. You can sign in with a one-time code sent by email, or through Google or Apple; in the latter two cases we receive your email address from them, and your name if you allowed it. The product has no passwords at all.

Pet data and archive. Name, species, breed, sex, date of birth, chip number, weight, diagnoses, medications, vaccinations, reminders. Documents you upload: photos and files of clinic forms, and the values extracted from them automatically. These describe an animal, but they are tied to your account.

Family. Who is in your family, their roles, and invitations. An invitation contains the invitee’s email address.

Trips. Route, dates, checklist state.

Subscription. Subscriber identifier, plan state, purchase and refund events. Payment details never reach us: payment happens entirely inside the App Store and Google Play; we neither see nor store card or account numbers.

Technical. Application error reports. Anonymous statistics about which screens are used — only if you agreed at the “Help make the app better?” step; it can be switched off in settings at any time. A push notification token, if you allowed notifications.

Vet and sitter links. If you open a link, whoever holds it sees exactly what you put in it. We record that the link exists and when it expires.

Partner programme. If you arrived through a clinic, pet transporter or blogger link — the partner code and the fact of attribution. If you left your email on a partner page — that address, kept for 30 days.

Correspondence. The messages you send us and our replies.

Why, and on what legal basis

To make the product work — performance of our contract with you: sign-in, storing the archive, reading documents, reminders, travel checklists, vet and sitter links, subscription and its state.

Product analytics and push notifications — only with your consent. You can withdraw consent in the app’s settings; withdrawal does not affect the lawfulness of processing carried out before it.

Security and answering your messages — legitimate interest: preventing abuse, investigating failures, corresponding with you.

The product makes no automated decisions producing legal effects for you. The model extracts values from your documents and assembles a summary for a vet, but this is not a medical opinion or a diagnosis — that is stated next to every such output. Decisions remain with the owner and the treating veterinarian.

Who processes the data

We do not sell data and do not share it for anyone else’s advertising. Processing is carried out by contractors, each for a specific task and under contract.

In the European Union: Supabase — database and files, Frankfurt; Railway — background document processing, Western Europe; PostHog — anonymous statistics, EU servers; Sentry — application errors, Germany; Resend — product email (sign-in codes, notifications), Ireland; Cloudflare — serving the website and shared pages.

In Switzerland: Migadu — the [email protected] mailbox that receives requests about this policy.

Outside the EU: Anthropic (USA) — recognising and interpreting uploaded documents; this is the only transfer of the medical documents’ own content outside the EU. RevenueCat (USA) — subscription accounting: subscriber identifier and purchase events. Google Firebase Cloud Messaging — push delivery only; no archive content goes there. Apple and Google — payment processing under their own rules.

Transfers outside the EU rest on contracts with those processors that include the European Commission’s standard contractual clauses.

How long data is kept

For as long as your family exists in the product. Deleting a family erases everything belonging to it: pet cards, documents and the files themselves, the timeline, reminders, trips and links. Files are removed by a background service on its next pass.

The internal device-synchronisation log is kept for 90 days and then deleted automatically.

After erasure a record of the erasure itself remains — date and volume. It holds no content; it exists so that the deletion can be proven.

Subscription and payment events are kept for as long as the stores’ accounting and tax rules require.

Your rights

You have the right to: access your data and obtain a copy; correct what is inaccurate; erase it; restrict processing; object to processing based on legitimate interest; receive your data in a portable form; and withdraw consent where it was given.

Some of these work directly in the app and need no request: the archive can be exported in full at any time, originals included, and it stays available even after a subscription ends. An owner’s data is never locked away — that is a product rule, not a courtesy.

For everything else, write to [email protected]. We answer within one month. If our answer does not satisfy you, you may complain to a data protection supervisory authority — in the EU, the one in your country of residence.

Children

The product is not intended for children. We deliberately do not collect data of people under 16 and do not create accounts for them. If such data reached us by mistake, write to [email protected] and we will delete it.

Changes to this policy

Material changes get a new effective date at the top of this page, and those affecting your rights are announced by email to your account address. Earlier versions are not rewritten after the fact.