Privacy Policy

Last updated: May 2026

01

Introduction

PawDoc ("we", "our", or "us") is operated by PawDoc ("the Company"), accessible at pawdoc.co. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the PawDoc mobile application and website.

By creating an account or using PawDoc, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the app.

02

Who we are

PawDoc is the data controller for the personal data you provide when using our services.

Contact: hello@pawdoc.co

03

What information we collect

3.1 Information you provide directly

  • Account information: Your name and email address when you create an account.
  • Pet profile: Your dog's name, breed, date of birth, sex, weight, and optional photo.
  • Activity logs: Meals, walks, bathroom breaks, medications, weight entries, notes, and photos you log within the app.
  • Caregiver information: Names and email addresses of caregivers you invite to your family hub.
  • Communications: Any messages you send to us via email or support channels.

3.2 Information generated by your use of the app

  • Milestone completions: Which puppy milestones you have marked as complete.
  • Reminders: Reminders and their schedules that you set within the app.
  • Subscription status: Whether you are on the free or Companion plan, managed via RevenueCat.
  • Device tokens: Your device's push notification token, used to send you health alerts and reminders.

3.3 Information collected automatically

  • Authentication data: Session tokens and refresh tokens managed by Supabase Auth, stored securely in your device's encrypted keychain.
  • Usage data: Basic app functionality logs for debugging purposes. We do not use third-party analytics SDKs.

3.4 Information we do NOT collect

  • We do not collect your precise GPS location
  • We do not collect advertising identifiers (IDFA/GAID)
  • We do not sell your data to third parties
  • We do not use your data to serve you advertisements
  • We do not use your pet's health data to train AI models
04

How we use your information

  • Provide the service: Create and manage your account, store your pet's activity logs, and sync data across caregivers in your family hub.
  • Generate AI insights: Send your activity log data to our AI provider (DeepSeek) via a secure server-side proxy to generate health insights, pre-vet briefs, and symptom checker responses. Your data is not stored by DeepSeek and is not used to train their models.
  • Send notifications: Deliver push notifications for health alerts, reminders, and caregiver activity updates based on your preferences.
  • Send transactional emails: Send caregiver invitation emails via Resend. We do not send marketing emails without your explicit consent.
  • Process payments: Manage your Companion plan subscription via RevenueCat, which interfaces with Apple App Store and Google Play billing.
  • Improve the service: Fix bugs and improve performance based on anonymised usage patterns.
  • Comply with legal obligations: Retain records as required by applicable law.
05

Legal basis for processing (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data under the following legal bases:

  • Contract performance: Processing necessary to provide the PawDoc service you have signed up for (account management, activity logging, family hub sync).
  • Legitimate interests: Sending transactional notifications and emails directly related to your use of the service, and debugging/improving app stability.
  • Consent: Sending push notifications. You can withdraw consent at any time in your device settings or within the app under Settings → Notifications.
  • Legal obligation: Retaining records where required by law.
06

Third-party services

PawDoc uses the following third-party services to operate. Each has its own privacy policy:

ServicePurposePrivacy policy
SupabaseDatabase, authentication, real-time syncsupabase.com/privacy
DeepSeekAI health insights and symptom checker (server-side only)deepseek.com/privacy
RevenueCatSubscription managementrevenuecat.com/privacy
ResendTransactional email (invite emails)resend.com/privacy
Apple App StoreiOS app distribution and in-app purchasesapple.com/privacy
Google PlayAndroid app distribution and in-app purchasespolicies.google.com/privacy
ExpoPush notification deliveryexpo.dev/privacy

We do not use Google Analytics, Facebook Pixel, Mixpanel, Amplitude, or any behavioural analytics SDK.

07

Data storage and security

  • Your data is stored on Supabase infrastructure hosted on AWS in the United States.
  • All data is encrypted in transit using TLS 1.2 or higher.
  • Authentication tokens are stored in your device's encrypted keychain (iOS Keychain / Android Keystore), not in plain storage.
  • Row-level security (RLS) policies in our database ensure you can only access data belonging to your account and pets.
  • Photos you add to the timeline feature are stored locally on your device only and are never uploaded to our servers.
  • We implement reasonable technical and organisational measures to protect your data, but no system is completely secure. If you believe your account has been compromised, contact us immediately at hello@pawdoc.co.
08

Data retention

  • Account data: Retained for as long as your account is active. If you delete your account, your personal data is deleted within 30 days.
  • Activity logs: Retained for as long as your account is active and for a reasonable period after deletion to allow for data export requests.
  • Push notification tokens: Deleted when you sign out of the app or delete your account.
  • Caregiver invites: Retained for 7 days after creation or until accepted, then deleted.
  • Authentication logs: Retained by Supabase for up to 90 days for security purposes.
09

Sharing your data

We share your data only in the following limited circumstances:

  • With caregivers you invite: When you add a caregiver to your family hub, they can see your pet's activity logs, milestones, and health data for that pet. You control who you invite and can remove caregivers at any time.
  • With third-party service providers: As listed in Section 6, only to the extent necessary to provide the service.
  • For legal compliance: If required by law, court order, or to protect the rights, property, or safety of PawDoc, our users, or the public.
  • In a business transfer: If PawDoc is acquired or merges with another company, your data may be transferred as part of that transaction. We will notify you before your data is transferred and becomes subject to a different privacy policy.

We never sell your personal data.

10

Your rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request that we correct inaccurate data.
  • Deletion: Request that we delete your account and associated data.
  • Portability: Request your data in a structured, machine-readable format.
  • Restriction: Request that we restrict processing of your data in certain circumstances.
  • Objection: Object to processing based on legitimate interests.
  • Withdraw consent: Withdraw consent for push notifications at any time via device settings.

To exercise any of these rights, contact us at hello@pawdoc.co. We will respond within 30 days.

If you are in the EEA and believe we have not handled your data correctly, you have the right to lodge a complaint with your local data protection authority.

11

Children's privacy

PawDoc is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at hello@pawdoc.co and we will delete it promptly.

12

International data transfers

Your data is stored on servers located in the United States (via Supabase/AWS). If you are located in the EEA or UK, this constitutes a transfer of personal data outside the EEA. This transfer is made under appropriate safeguards including standard contractual clauses where applicable.

13

Push notifications

PawDoc sends push notifications for health alerts, reminders, and caregiver activity updates. You consent to receive these during onboarding. You can disable notifications at any time via:

  • Your device's Settings → Notifications → PawDoc
  • Inside the app: Settings → Notifications → toggle individual notification types

Disabling notifications does not affect your ability to use the app.

14

Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice in the app or sending an email to the address associated with your account. Your continued use of PawDoc after the effective date of the updated policy constitutes your acceptance of the changes.

15

Contact us

If you have any questions about this Privacy Policy or how we handle your data:

Email: hello@pawdoc.co

PawDoc — Smart Dog Care

Terms of Use · hello@pawdoc.co