Privacy Policy

Information We Collect

Account information: your name, email address, password (stored only as a secure hash by our authentication provider), and optional profile details such as phone number, country, and avatar.

Pet and health information you provide: pet names, species, breed, birthday, microchip numbers, weight, allergies, medical conditions, vaccination and reminder data, journal entries, photos, and documents you upload to your health vault.

Sharing preferences: the per-field settings you choose for public pet profiles, QR passports, emergency cards, and lost-pet alerts.

Payment information: when you subscribe, our payment processors (Razorpay and Stripe) collect and process your payment details. We do not store full card numbers on our servers; we retain only subscription status and transaction metadata.

Usage and device data: pages viewed, features used, approximate location derived from IP address, browser and device type, and analytics events, collected through Google Analytics 4 and our own logs.

Communications: messages you send to other owners through the Service, contact-form submissions, waitlist and newsletter sign-ups, and support requests.

How We Use Your Information

To provide and operate the Service — store your records, generate QR passports and emergency cards, send reminders, power AI guidance, and process subscriptions.

To secure the Service — authenticate logins, detect and prevent abuse, apply rate limits, and investigate security events.

To communicate with you — send transactional emails (verification, password reset, reminders, receipts) and, where you have opted in, product updates.

To improve the Service — understand feature usage and performance through aggregated analytics.

To comply with legal obligations and enforce our Terms of Service.

Public Pet Profiles and Sharing

Public pet profiles are off by default. When you enable one, only the fields you explicitly turn on (such as photos, passport, emergency card, owner name, phone, or email) are shown. Private medical records are never exposed through a public profile.

You control search-engine indexing of your public profile with an opt-in toggle. You can disable a public profile or lost-pet alert at any time.

AI Features

When you use AI features, the text you submit and relevant pet context are sent to our AI provider (Google Gemini) to generate a response. Do not submit information you do not wish to process this way. AI responses are informational only and are not veterinary advice.

Service Providers and Subprocessors

We share information with vendors that help us run the Service, under agreements that limit their use of your data: Supabase (authentication, database, and file storage), Vercel (hosting and content delivery), Google Gemini (AI responses), Razorpay and Stripe (payment processing), Resend (transactional email), and Google Analytics 4 (usage analytics).

We do not sell your personal information. We may disclose information if required by law, to protect our rights, or in connection with a merger or acquisition.

Data Retention

We retain your account and pet data for as long as your account is active. When you delete your account, we delete or de-identify your personal data, except where we must retain limited records to meet legal, tax, accounting, or security obligations.

Your Rights and Choices

You can access and update your information in your account settings, export your data from the Export Center, and permanently delete your account and associated data from the account-deletion page.

Depending on where you live, you may have additional rights under the GDPR, UK GDPR, or CCPA/CPRA — including rights to access, correct, delete, port, or restrict processing of your data, and to object to certain processing. See our GDPR and CCPA notices, or contact us to exercise these rights.

You can opt out of marketing emails using the unsubscribe link; transactional emails necessary to operate your account will still be sent.

Data Security

We protect your data with encryption in transit (HTTPS), row-level access controls, private storage for medical records, same-origin and rate-limit protections, and restricted server-side access to sensitive keys. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

International Data Transfers

PetVault AI is available globally and our providers may process data in countries other than yours, including the United States and the European Union. Where required, we rely on appropriate safeguards such as standard contractual clauses.

Children's Privacy

The Service is intended for adults and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it.

Cookies and Analytics

We use essential cookies to keep you signed in and to secure the Service, and analytics cookies (Google Analytics 4) that load only after you accept our cookie banner. See our Cookie Policy for details and choices.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above and, where appropriate, by additional notice.

Contact Us

For any privacy question or to exercise your rights, contact us at petvaultai@gmail.com.