PetCare is operated from India by the developer of petcareapp.org. This policy describes what the app actually stores. It does not mention analytics, advertising or tracking, because the app does none of those things.
Who is responsible
The developer of PetCare is the Data Fiduciary under India’s DPDP Act 2023, and the Data Controller under UK and EU GDPR where those apply to you. Contact: support@petcareapp.org
What we collect
Everything below is information you type or upload yourself. Nothing is collected in the background.
•
Account: your email address, your name, and a password we only ever hold as a cryptographic hash.
•
Pets: name, species, breed, age, gender, every weight you record, and a photograph if you add one.
•
Health records: vaccinations and due dates, medications and doses, illnesses, food logs, weight goals, and any symptoms you submit to the symptom checker.
•
Community: posts and comments you write, and which posts you liked or reported.
•
Settings: which reminders you have switched on, per pet.
Community posts and comments are visible to every signed-in PetCare user, along with your name and the pet’s name. Do not post anything you would not want another user to read.
What we do not collect
•
No analytics or usage tracking, and no advertising of any kind.
•
No location, contacts, calendar or microphone access.
•
No payment or card details — the app takes no payments.
•
No device push token is stored on our servers; it exists only in memory on your own device.
Where it is stored
All application data is stored with Supabase, on AWS infrastructure in the ap-south-1 region — Mumbai, India. For users in India your data does not leave the country in normal operation. For users in the UK or EU it is processed in India, on the basis of the consent you give when creating an account.
Pet photographs sit in a private storage bucket. They are not published at a public address: the app requests a temporary signed link each time it shows one, and that link expires.
Three others process data on our behalf: Supabase for the database, sign-in and files; Resend, which receives your email address in order to send the confirmation message and nothing else; and Netlify, which serves the website and sees standard web-server information such as your IP address. We do not sell your data or share it with anyone else.
How long we keep it
Until you delete it. Deleting a pet immediately removes that pet’s records and photograph. Deleting your account removes your account and everything listed above.
Security
Every request is authenticated, and the database enforces row-level security so a signed-in user can only read and write their own rows. The single exception is the community forum, which every signed-in user can read by design. Traffic is encrypted in transit, and passwords are hashed by the authentication provider and never visible to us.
No system is perfectly secure and we do not claim otherwise. If we become aware of a breach affecting your data we will notify you and the relevant authority as the law requires.
Your rights
•
See what we hold — it is all visible in the app.
•
Correct anything inaccurate — every record can be edited.
•
Delete your account and all associated data, from Settings.
•
Withdraw consent, by deleting your account.
•
Complain — in India to the Data Protection Board, in the UK to the ICO, in the EU to your national authority.
For anything not available in the app, email support@petcareapp.org. We will respond within 30 days.
Deleting your account also deletes the community posts you wrote and the replies other users left on them, because those replies would otherwise hang off a post with no author. Comments you left on other people’s posts are deleted too. This cannot be undone.
Children
PetCare is not intended for anyone under 18, and we do not knowingly collect data from children.
Changes
If this policy changes materially we will say so in the app before the change takes effect.