PawDoc ("PawDoc," "we," "us") provides an AI-assisted pet-health triage app that helps you decide whether and how urgently to seek veterinary care. This Privacy Policy explains what personal information we collect, why, who we share it with, how long we keep it, and the choices and rights you have.
At a glance#
| Topic | Summary |
|---|---|
| What we collect | Your account email, pet profiles, the photos/videos/text you submit, triage results, subscription status, and basic device/usage data. |
| Why | To run the triage service you ask for, keep your pet's history, operate billing, send notifications you opt into, secure the service, and improve it. |
| Selling data | We do not sell your personal information, and we do not use your pet's photos or health inputs for advertising. |
| AI | Your inputs are processed by third-party AI providers (Google Gemini and Anthropic Claude) to generate guidance. We disclose this and never present AI output as a diagnosis. |
| Your control | You can view, correct, export, or permanently delete your account and data at any time (see Account Deletion). |
1. Information we collect#
- Account information — your email address and authentication identifiers (email, or Sign in with Apple).
- Pet profiles — the name, species, breed, age, sex, weight, and notes you enter about your pet.
- Inputs you submit for triage — photos, short videos, and text describing your pet's symptoms. Images are compressed and EXIF/GPS location metadata is stripped before upload, and uploads are automatically content-moderated and rejected or deleted if they are not appropriate pet-health content.
- Analyses — the triage result (an urgency action from "get help now" through "watch and re-check"), related guidance, and metadata such as timestamps.
- Subscription information — your plan and entitlement status, provided through RevenueCat and the app stores. We never receive or store your full card number — payments are handled by Apple and Google.
- Device and usage data — app interaction events (ONLY if you opt in to analytics), language/region, and crash diagnostics (PII-stripped). Reminders are delivered by on-device notifications — no push token is created or sent anywhere.
- Support communications — messages you send us and their contents.
2. How we use your information and our legal bases (GDPR)#
Where the EU/UK GDPR applies, we rely on the following legal bases (Art. 6):
| Purpose | Legal basis |
|---|---|
| Create your account; provide triage; store your pet's history | Performance of a contract (Art. 6(1)(b)) |
| Process the photo/video/text you submit to generate guidance | Performance of a contract (Art. 6(1)(b)) |
| Operate subscriptions and keep billing/tax records | Contract (Art. 6(1)(b)) and legal obligation (Art. 6(1)(c)) |
| Product analytics | Your consent (Art. 6(1)(a)) — analytics are OFF by default and start only after you opt in (signup checkbox or the in-app toggle); withdraw any time in Account → Usage analytics |
| Crash reporting (PII-stripped) | Our legitimate interest in keeping the app working and secure (Art. 6(1)(f)) |
| Reminder notifications | Delivered ON-DEVICE at your request when you create a reminder — no server processing, no push provider |
| Keep the service secure and prevent abuse | Legitimate interests (Art. 6(1)(f)) |
3. How PawDoc's AI guidance works#
PawDoc's triage guidance is generated by artificial intelligence, not by a veterinarian. To produce it, the information you submit is sent to third-party AI providers — Google (Gemini) and Anthropic (Claude) — which process it on our behalf to return structured guidance. We disclose this third-party AI processing here and in the app, and we never present the output as a veterinary diagnosis. The guidance is decision-support that always directs you to a licensed veterinarian; it has no legal or similarly significant effect on you. For more on how the AI works and its limits, see AI Transparency & Limitations. You can contact us to ask about the logic involved.
4. Who we share information with#
We do not sell your personal information. We share it only with service providers ("processors") that operate the service under contract, and only as needed:
| Processor | Purpose |
|---|---|
| Supabase | Database, authentication, and storage metadata (EU region for EU users) |
| Cloudflare R2 | Encrypted object storage for your images and videos |
| Google (Gemini), Anthropic (Claude) | AI processing of the input you submit, to generate guidance |
| RevenueCat | Subscription and entitlement management |
| Apple App Store, Google Play | Payment processing and billing |
| PostHog | Product analytics |
| Sentry | Crash and error diagnostics |
We may also disclose information if required by law, to enforce our Terms of Service, or to protect the rights, safety, and security of users, the public, or PawDoc. The list above reflects our current processors and will be kept current.
5. International data transfers#
PawDoc is available internationally, and some of our processors are located in the United States or other countries. EU/UK users' core account data is stored in an EU region. Where personal data is transferred outside the EEA/UK, we rely on an appropriate safeguard under GDPR Chapter V — either the provider's certification under the EU–US Data Privacy Framework, or Standard Contractual Clauses where the provider is not certified. You can contact us for details of the safeguard applicable to a given transfer.
6. How long we keep it#
We keep personal information only as long as needed for the purposes above, and then delete or de-identify it. When you delete your account, your data is permanently removed (subject to limited, disclosed exceptions such as records we must keep for tax or legal-compliance reasons). See the Data Retention Policy for specifics and the Account Deletion Policy for how to delete your data.
7. Your rights and choices#
Depending on where you live, you may have some or all of these rights:
- Access a copy of your personal information.
- Correct information that is inaccurate.
- Delete your account and associated data — available in-app and on the web (see Account Deletion).
- Export / portability of data you provided.
- Restrict or object to certain processing, and withdraw consent at any time (without affecting earlier processing).
- Opt out of analytics at any time: Account → Usage analytics (analytics are off unless you opted in). PawDoc sends no marketing communications.
- Lodge a complaint with your data protection authority.
For details specific to your region, see Your GDPR Rights (EU/UK) and Your California Privacy Rights. To exercise any right, use the in-app controls or email privacy@pawdoc.app. We will verify your request and respond within the timeframes required by law.
8. How we protect your information#
- Row-Level Security isolates each user's data so users can only access their own.
- Uploads use short-lived, single-use presigned URLs — no storage credentials are ever placed in the app.
- Images have EXIF/GPS location metadata stripped before upload, and uploads are content-moderated.
- Secrets are held in a managed secrets vault, never embedded in the app.
No system is perfectly secure, but we work to protect your information using safeguards appropriate to its sensitivity.
9. A note on pet data#
Most of what you submit is about your pet. Information about an animal is generally not "special category" personal data under GDPR (which protects information about people). However, a photo or video can incidentally capture a person, a home interior, or location metadata — which is one reason we strip GPS/EXIF data and moderate uploads. Your own account and contact details are personal data and are fully protected as described here.
10. Children#
PawDoc is intended for adults and is not directed to children. See our Children's Privacy page.
11. Changes to this policy#
We may update this Privacy Policy. If we make a material change, we will notify you in-app and update the "Last updated" date above. Your continued use after an update means you accept the revised policy.
12. Contact us#
- Privacy: privacy@pawdoc.app
- General support: support@pawdoc.app
- Operator: [LEGAL ENTITY], [BUSINESS ADDRESS]
- EU/EEA representative (Art. 27): [EU REPRESENTATIVE — to be appointed]
- UK representative: [UK REPRESENTATIVE — if targeting UK users]