Privacy Policy

PawLog ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share your information when you use our Service. This policy applies to all users globally, including those in the European Economic Area (EEA), United Kingdom, and other jurisdictions with data protection laws.

PawLog is the data controller for your personal data. For questions about this policy or your data, contact us at privacy@pawlog.pet.

We collect the following categories of data:

Account Data

• Email address (required for account creation)
• Display name (optional)
• Password (hashed, never stored in plain text)

Pet Data

• Pet name, breed, birthdate, and notes
• Activity logs (feeding, walks, sleep, training, health records, etc.)
• Photos you upload of your pet
• Vaccination and health records

Household Data

• Household name and membership information
• Member roles (owner, admin, member)

Technical Data

• Browser type and version
• Device type
• IP address (for security and abuse prevention)
• Usage patterns (pages visited, features used)

We use your data for the following purposes:

• Providing the Service: Storing and displaying your pet care data, enabling household sharing
• AI Insights: Analyzing your pet's activity patterns to generate care recommendations (your data is sent to our AI provider for processing)
• Account Management: Authentication, password resets, account security
• Service Improvement: Understanding how the Service is used to improve features
• Communication: Sending important updates about the Service (we do not send marketing emails without consent)

Under GDPR, we process your data based on:

• Contract: Processing necessary to provide the Service you signed up for
• Legitimate Interest: Service improvement, security, and fraud prevention
• Consent: Where required, such as for AI-generated insights and optional analytics

We share your data only in these circumstances:

• Household Members: Pet data is shared with members of your household (you control who joins)
• AI Provider: Pet activity data (not your email or personal identity) may be sent to Anthropic to generate weekly insights
• Infrastructure Providers: We use Supabase (database/auth/storage), Vercel (hosting and analytics), OneSignal (push and email notifications), Resend (transactional email delivery), Sentry (error monitoring), and Stripe (payments) to operate the Service
• Legal Requirements: We may disclose data if required by law or to protect our rights

We do not sell your personal data. We do not share your data with advertisers.

Your data is stored securely using Supabase, with servers located in the European Union (Frankfurt, Germany). We implement industry-standard security measures including encryption in transit (TLS), row-level security policies, and secure authentication. Photos are stored in private storage buckets accessible only to authorized household members.

We retain your data for as long as your account is active. When you delete your account, all your personal data, pet data, and uploaded photos are permanently deleted within 30 days. Anonymized, aggregated data may be retained for service improvement purposes.

Depending on your jurisdiction, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data via your account settings
• Deletion: Delete your account and all associated data
• Export: Export your data in CSV or JSON format via the Settings page
• Restriction: Request restriction of processing in certain circumstances
• Objection: Object to processing based on legitimate interest
• Portability: Receive your data in a structured, machine-readable format
• Withdraw Consent: Where processing is based on consent, withdraw at any time

To exercise any of these rights, contact us at privacy@pawlog.pet or use the account management features in the Settings page.

Your data may be transferred to and processed in countries other than your country of residence. When we transfer data outside the EEA/UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions recognized by the European Commission.

The Service is not intended for children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

We use browser local storage to maintain your authentication session and theme preferences. We do not use tracking cookies. If we introduce analytics in the future, we will update this policy and obtain your consent where required.

We may update this Privacy Policy from time to time. We will notify you of material changes via the Service or email. The "Last updated" date at the top of this page indicates when the policy was last revised.

For privacy-related questions or concerns, contact us at privacy@pawlog.pet.

If you are in the EEA/UK and are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.