Privacy Policy

Summary

PetTrack does not collect any personal data by default. All your data is stored exclusively on your device. No sign-up, email registration, or login is required to use the app locally. If you choose to connect to your veterinarian or backup your data (opt-in), only limited pet data is securely synchronized to our cloud infrastructure.

1. Local Mode (Default)

PetTrack keeps the following data strictly on your device's local app memory:

• Pet profiles (name, species, breed, birth date, weight, optional photo)
• Vaccination logs (name, date given, next due date, clinic name)
• Prescription & medication logs
• Manual reminders (title, date, category)
• App preferences (notification permissions, language)
• App preferences (notification permissions, language)

In local mode, none of this data is sent to our servers, third parties, or analytics tools. When you delete the app, all local data is permanently removed.

2. Connecting to Vet Portal & Cloud Backup (Optional)

Only if you explicitly choose to enable cloud backup or connect to a vet in the app:

• A secure login link (magic link) is sent to your email to create an optional cloud profile.
• The pet profiles and medical logs you choose to share or backup are securely stored on our cloud servers (using TLS + encrypted storage). Since our servers are hosted in the European Union (Frankfurt, Germany), we request your explicit consent for cross-border data transfers (GDPR/KVKK Article 9) during registration.
• Your paired veterinarian can only see the logs of the specific pets you share. Explicit sharing consent is requested inside the app before pairing with any clinic.
• You can revoke this vet connection at any time, instantly blocking access.
• You can permanently delete your cloud account inside the app, which instantly purges all your data from the cloud database.

3. Special Provisions for Veterinarian and Clinic Accounts

The following provisions apply to veterinarians and clinic staff who register and use the PetTrack Vet Portal:

• Data Collected: For registering and verifying clinic accounts, we collect name-surname, clinic name, email address, phone number, and system audit logs (IP address, action timestamps, and actions taken).
• Roles (Data Controller vs. Data Processor):
  • For pet owner information and pet medical records entered by the veterinarian, the Clinic/Veterinarian acts as the "Data Controller"; PetTrack acts solely as the "Data Processor" hosting the data. The clinic is responsible for obtaining necessary consents from pet owners.
  • For the veterinarian's own profile and account credentials, and system audit logs, PetTrack acts as the "Data Controller".
• Cross-Border Data Transfer: All vet portal data is hosted on secure Supabase (AWS) servers located in the EU (Frankfurt, Germany). Explicit consent is requested from veterinarians during sign-up for this transfer.

4. Notifications

We request notification permissions to schedule local alerts on your phone 7 days before, 1 day before, and the morning of (09:00 AM) any due vaccination. These alerts are calculated and triggered entirely on-device. If connected, we use a push notification service for vet-triggered alerts. No sensitive medical content is included in the notification text.

5. Third-Party Services

• Ads: None
• Analytics (GA, Mixpanel, etc.): None
• Crash Reporting (Sentry): Sentry is used to detect crashes and runtime errors to improve application stability. No personal identity or pet medical logs are shared with Sentry; only technical trace data (device model, OS version, and error logs) is transmitted. Sentry servers are hosted in the Germany/EU region.
• Ad Tracking (IDFA): Not used
• App Distribution: Apple App Store and Google Play — for app distribution and updates.
• Cloud Infrastructure (Supabase): Optional vet synchronization and backup; PostgreSQL database + authentication, hosted in the European Union region (Frankfurt, eu-central-1).
• Web Dashboard (Vercel): Content delivery infrastructure hosting the veterinarian web dashboard.
• Email Delivery: One-time secure magic-link emails are sent via Supabase Auth (only if opted-in).
• Push Delivery (Expo Push): Notifications for records added by your vet are relayed through Apple (APNs) and Google (FCM); no sensitive content is included in the notification text.

6. Your Rights (GDPR / KVKK)

You have the right to access, rectify, port, and delete your data. In local mode, you can exercise these rights directly by clearing the app data or uninstalling the app. If you have an active cloud account, you can use the "Delete Account" button in the settings, or contact us at kaptan3k@gmail.com. We will process any requests within 30 days.

7. Children's Privacy

PetTrack is rated for ages 4+. We do not knowingly collect personal data from children under 13.

8. Data Security

Local data is stored securely within the iOS/Android sandbox environment. Cloud data is transmitted using secure TLS protocols and protected in the database via Row-Level Security (RLS) rules, ensuring only authorized users and vet clinics can read or write data.

9. Policy Changes

Any updates to this policy will be communicated on this page and inside the next app update.

10. Contact

For questions: kaptan3k@gmail.com