Як ми обробляємо та захищаємо ваші дані.
Last Updated: October 1, 2026
This Privacy Policy describes how Pet Health+ ("we," "us," or "our") collects, uses, and protects your information when you use the Pet Health+ mobile application on iOS (iPhone, iPad, Apple Watch) and Android (phone, tablet) (collectively, the "App"). Where iOS and Android behave differently — for example, storage, sync, and payment processing — we call out those differences inline.
The data controller responsible for your personal data under the EU General Data Protection Regulation (GDPR) is PE Denys Rudiak (Private Entrepreneur / Приватний підприємець), registered in Ukraine.
You can reach us at support@pethealthplus.app.
EU representative (Art. 27 GDPR): We have not appointed an EU representative. EU residents can send data-protection enquiries to the support email above; we will respond within the GDPR one-month window.
Data Protection Officer: We are not required to appoint a DPO under GDPR Art. 37 (we are a small operation, we do not carry out large-scale systematic monitoring, and we do not process special categories of personal data at scale). The developer handles data-protection questions personally.
When you use the App, you enter the following information:
We do not collect: your real name, email address, phone number, physical address, card details, or any other direct identifier. The App does not require an account or login. Pro purchases are handled by Apple or Google (see § 4 below).
On iOS (App Store builds), Firebase Analytics and Firebase Crashlytics are active by default, except in the European Economic Area, the United Kingdom and Switzerland (decided from your App Store country): there both are off until you agree, and the app asks once, after setup, whether you want to share anonymous usage data. Nothing is sent before that choice. You can turn either off (or on) at any time in Settings → Privacy inside the app; turning analytics off also deletes the app-instance analytics identifier on the device, and turning crash reports off deletes reports not yet sent.
They collect the following categories — none of which include your pet data, pet names, record contents, photos, documents, or any identifier we could use to contact you:
On Android (release builds), Firebase Analytics and Firebase Crashlytics are active by default. They collect the following categories — none of which include your pet data, pet names, file content, or any identifier we can tie to you personally:
session_start, first_open, screen_view, app_removeOn iOS, you can turn off usage statistics and crash reports at any time in Settings → Privacy inside the App. Because analytics data is anonymous, we cannot look up or delete an individual user's analytics history; disabling analytics stops collection and resets the on-device analytics identifier. (The in-app switch ships on Android in v1.1. Until then, you can disable personalized ads and analytics at the device level via Settings → Google → Ads, and uninstalling the App removes all collected data from your device.)
We do not use your information for advertising, cross-site tracking, profiling, marketing, or any purpose other than those listed above.
Some features touch data that the rest of the App never sees. This is what each one does.
When you tap "Pick from Contacts" on a vet field, the system contact picker opens. Only the contact you choose is read, and only the vet's name or company, phone number, email, and address are copied into the pet's profile. Your contacts are never uploaded by us; the copied vet details are stored with the pet, sync through your iCloud, and are visible to anyone you share that pet with through Family Sharing.
"Scan a record" uses the system document camera and Apple's on-device text recognition to pre-fill a vaccination record from a printed certificate. The captured image is processed in memory on your device and discarded after recognition; it is not saved and not uploaded. Only the fields you confirm are stored in the record.
The AI Insight card on Pet Today is generated on your device by Apple's Foundation Models framework. The model receives a short, structured summary (pet name, species, weight trend, next reminder, overdue count, recent vet visits, active medications) and returns three sentences. Nothing is sent to Apple, to us, or to any third party. The generated text is cached on your device and cleared when the pet is deleted.
Siri and the Shortcuts app can ask the App for a pet's next vaccine, upcoming reminders, the emergency card, or log a weight. Requests are resolved on your device against your own data. Apple processes your voice according to Apple's Siri privacy policy; we receive only the resulting action.
When you share a pet, the pet's records (vaccinations, treatments, procedures, medications, weights, notes, documents, vet details, emergency information, and photo) become readable by the people you invite, through Apple's CloudKit sharing. Stop sharing at any time from Settings → Family Sharing; participants lose access immediately.
Apple requires every Wallet pass to be signed with a certificate whose private key cannot ship inside an app. When you tap "Add to Apple Wallet" on a pet's emergency card, the App sends the fields shown on the pass to our signing service ("pethealth-wallet", hosted on Cloudflare Workers): the pet's name, type, breed, age and photo, microchip number, vet name and phone number, allergies, conditions, current medications, vaccinations, and the pass's labels in your language. The signed pass comes straight back to your iPhone. These details are used only to build that pass; they are not stored and not logged, and Cloudflare's request logs are turned off for the service.
To make sure only the genuine App can have passes signed, the App proves itself with Apple's App Attest. For each installation that uses the feature, the service keeps a small record: the App Attest public key, its counter, its environment, and how many passes it signed that day (at most 30). The record holds no pet data and is deleted after 180 days without use. To stop abuse, the service also counts requests per IP address for one minute; the address is not stored. Nothing is sent until you tap the button, and the pass itself lives in Apple Wallet on your device, where you can delete it at any time.
The "Feature requests" screen is provided by WishKit. It stores the text you submit together with a random identifier so you can see your own requests again. No email address is collected.
All pet health records, profiles, and attachments are stored locally on your device.
/data/data/com.drudyak.pethealth/, inaccessible to other apps, protected by Android File-Based Encryption.On both platforms, on-device data is protected by the operating system's per-app sandboxing. We do not add an app-level encryption layer on top of the OS in v1.0; we are evaluating this for a future release.
drive.file OAuth scope (which limits access to files the App creates — it cannot read the rest of your Drive). Enabling Drive backup requires signing in with your existing Google account; the OAuth consent flow happens between you and Google directly. We do not create, collect, or store your Google account or OAuth credentials — the access token we receive is held in memory during the upload and discarded when the App closes. The backup itself lives in your Drive, not ours; uploads are transport-encrypted (TLS 1.3) and stored encrypted at rest by Google. This is server-side encryption, not end-to-end — Google can technically access the backup. To avoid this, leave Drive backup disabled. Manual Drive backup is free; scheduled automatic Drive backup is a Pro feature.iOS (Family Sharing): you can additionally share one pet with other people through Apple's CloudKit sharing. What the recipients can see, and how to revoke access, is described in § 2.2.
Once data is in iCloud or Drive, it is subject to the cloud provider's terms and retention controls — not ours. You can disable sync at any time in your device settings (iOS: Settings → [Your Name] → iCloud; Android: App Settings → Backup → disable).
The App uses the following third-party services. Every transfer destination is TLS 1.3 in transit.
Purpose: crash reporting and error logging.
Data shared: anonymous crash data, device model and OS version, device state (such as free memory and free disk space), stack traces, app version, a random installation identifier — no pet data, no file content, no identifier we can tie to you.
Platforms: iOS (since 3.6.0: on by default, opt-out via Settings → Privacy; off until you opt in in the EEA, UK and Switzerland) · Android (on by default; opt-out via Settings → Privacy in v1.1).
Retention: 90 days.
Transfer mechanism: EU-US Data Privacy Framework + Standard Contractual Clauses.
Privacy policy: firebase.google.com/support/privacy
Purpose: aggregate usage metrics (screen views, sessions, feature usage, version adoption) and feature switches.
Data shared: anonymised usage events and category-name parameters, app version, OS version, device model, language, country-level region, a Firebase app-instance ID. No advertising identifier is collected: the Android Advertising ID is explicitly disabled, and the iOS build links the Firebase SDK variant that does not contain the advertising identifier at all.
Platforms: iOS (since 3.6.0: on by default, opt-out via Settings → Privacy; off until you opt in in the EEA, UK and Switzerland) · Android (on by default; opt-out via Settings → Privacy in v1.1).
Retention: 14 months.
Transfer mechanism: EU-US Data Privacy Framework + Standard Contractual Clauses.
Privacy policy: firebase.google.com/support/privacy
Purpose: processing Pro subscription payments.
Data shared: anonymized purchase receipts (we never see your card details, address, or tax ID — those stay with Google).
Retention: per the Google Play Developer Distribution Agreement.
Privacy policy: play.google.com/about/play-terms
Purpose: processing Pro subscription payments.
Data shared: subscription receipts. Apple handles all card and billing information directly — we never see it.
Privacy policy: apple.com/legal/privacy
Purpose: subscription receipt validation and Pro entitlement management.
Data shared: an anonymous app-user ID (not your name or email), subscription product IDs, entitlement status, receipt data received from Apple or Google.
Retention: until you request deletion via support@pethealthplus.app.
Transfer mechanism: Standard Contractual Clauses (see revenuecat.com/dpa).
Privacy policy: revenuecat.com/privacy
drive.file scope) — Android only, optionalPurpose: user-initiated backup of pet data to the user's own Drive account.
Data shared: a ZIP archive containing your on-device database and attachments, uploaded only when you enable Drive backup.
Retention: controlled entirely by you — we cannot delete Drive files on your behalf.
Opt-out: App Settings → Backup → disable, then revoke the OAuth grant at myaccount.google.com/permissions.
Purpose: in-app feature request and feedback collection.
Data shared: feature request text and basic device context, plus a random identifier so you can see your own requests again — no email address — submitted voluntarily by the user.
Opt-out: do not submit feature requests. No data is sent unless you actively use the feature request tool. Android users reach us via the support email instead.
Privacy policy: wishkit.io/privacy
Purpose: hosts our pass-signing service for the emergency card in Apple Wallet (see § 2.2).
Data shared: only when you add a pass: the pass fields and photo, processed in memory to sign the pass and not stored or logged; and a per-installation App Attest record (public key, counter, daily pass count) with no pet data, deleted after 180 days without use.
Opt-out: don't use "Add to Apple Wallet"; nothing is sent otherwise.
Privacy policy: cloudflare.com/privacypolicy
Purpose: cross-device sync of pet health records.
Data shared: all App data (pet profiles, health records, attachments) synced through your personal iCloud account; encrypted by Apple in transit and at rest (end-to-end if you turn on Apple's Advanced Data Protection). Shared pets use CloudKit sharing with the people you invite.
Opt-out: disable iCloud for the App in iOS Settings.
Privacy policy: apple.com/legal/privacy
Not third parties: the document scanner and text recognition behind "Scan a record", and the Apple Intelligence model behind AI Insight, run entirely on your device. They send nothing to Apple, to us, or to anyone else, so they are not listed above.
We do not sell, rent, or share your personal information with any other third parties. We do not use advertising networks or marketing analytics tools.
If you are in the EEA or UK, we rely on the following lawful bases:
| Purpose | Lawful basis |
|---|---|
| Storing pet records on your device (core app functionality) | Art. 6(1)(b) — contract |
| Firebase Crashlytics stability monitoring | iOS in the EEA, UK and Switzerland: Art. 6(1)(a) — consent (asked once after setup; off until you agree). Elsewhere and on Android: Art. 6(1)(f) — legitimate interest (opt-out available) |
| Firebase Analytics aggregate metrics (iOS and Android) | iOS in the EEA, UK and Switzerland: Art. 6(1)(a) — consent (asked once after setup; off until you agree). Elsewhere and on Android: Art. 6(1)(f) — legitimate interest (opt-out available) |
| Importing a vet from your contacts (iOS) | Art. 6(1)(a) — consent, given at the system contact picker |
| Sharing a pet with family members (iOS) | Art. 6(1)(a) — consent, given when you send the invitation |
| Google Drive backup upload | Art. 6(1)(a) — your explicit consent at OAuth time |
| Apple / Google Play Billing purchase | Art. 6(1)(b) — contract |
| RevenueCat subscription validation | Art. 6(1)(b) — contract |
| Signing an Apple Wallet emergency pass you ask for (iOS) | Art. 6(1)(b) — contract (providing the feature you request); App Attest abuse protection: Art. 6(1)(f) — legitimate interest |
| WishKit feature request submission (iOS) | Art. 6(1)(a) — consent |
| Ukraine storefront Pro override | Art. 6(1)(f) — legitimate interest |
Our third-party vendors (Google LLC, RevenueCat Inc., Cloudflare Inc.) are headquartered in the United States. When you use the App, the categories of data described in § 4 may be transferred to the US.
We rely on these transfer mechanisms:
All transfers are protected in transit by TLS 1.3 and at rest by vendor-level encryption.
| Data | Retention |
|---|---|
| Pet health records (on device) | Until you delete them or uninstall the App |
| iCloud / Google Drive backups | Controlled by you; follow Apple / Google retention settings |
| Firebase Crashlytics data | 90 days, then automatically deleted |
| Firebase Analytics data (iOS and Android) | 14 months |
| Scanned certificate image (iOS) | Not retained — held in memory during recognition, then discarded |
| AI Insight text (iOS) | Cached on your device until the insight is regenerated or the pet is deleted |
| Apple Wallet pass contents sent for signing (iOS) | Not retained — used in memory to sign the pass, then discarded; not logged |
| App Attest key record for Wallet signing (iOS) | Deleted after 180 days without use |
| RevenueCat anonymous app-user ID | Until you request deletion via email |
| Google / Apple billing receipts | Retained by the payment processor (typically 7 years for tax and accounting) |
| WishKit feature requests (iOS) | Until the feature is addressed or the request is withdrawn |
| Deleted pets and records (iOS) | Hidden at once (you can undo for a few seconds). Deleted pets are kept on your device and in your iCloud for 30 days so a sync mistake can't lose them, then erased. Other deleted records are erased once the undo window closes |
We take reasonable technical and organizational measures to protect your information:
No method of electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
The App is not directed at children under 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has used the App, please contact us at support@pethealthplus.app and we will take reasonable steps to comply with your request, including deleting any data you identify.
For users in the United States, we follow the COPPA threshold of 13 years old where applicable. For all other users, the GDPR threshold of 16 applies.
Regardless of your location, you can:
If you are in the EEA, UK, or Switzerland, you have the following rights:
To exercise any of these rights, contact us at support@pethealthplus.app. We will respond within one month of receipt. Where a request is complex or voluminous, we may extend by up to two further months and will tell you within the first month.
German residents may enforce the GDPR rights listed above through their state data-protection authority ( Bundesbeauftragter für den Datenschutz und die Informationsfreiheit or the relevant Landesbeauftragter). We are not required to appoint a Data Protection Officer under § 38 BDSG (our headcount and processing volumes are below the mandatory thresholds).
If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with specific rights:
Categories of personal information collected (past 12 months):
To exercise your CCPA rights, email support@pethealthplus.app. We will respond within 45 days.
California Civil Code § 1798.83 allows California residents to request information about disclosure of personal information to third parties for direct marketing purposes. We do not disclose personal information to third parties for direct marketing purposes.
If your Google Play account or Apple App Store account is registered in Ukraine, Pro features are unlocked free of charge as our way of supporting pet parents at home. We determine your storefront from your App Store or Play Billing country code, not from your IP address or device location. We do not use your storefront for any other purpose and do not retain it after the check.
Legal basis: Art. 6(1)(f) — legitimate interest in honoring a brand commitment to Ukrainian users during wartime.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach per Art. 33 GDPR, and we will inform affected users without undue delay where the risk is high (Art. 34). Because we hold no pet data at rest on our side (the Wallet signing service keeps only per-installation App Attest records), the realistic breach scenarios are limited to vendor-side incidents; we will relay those notifications to you in the same timeframe.
This website. pethealthplus.app is hosted by Cloudflare, Inc. (United States), which processes your IP address and request details to deliver the site and to block abusive traffic, and counts visits with Cloudflare Web Analytics, which sets no cookies. Google Analytics 4 (Google LLC, United States) is loaded only if you accept analytics in the cookie banner: it then sets two cookies (_ga and _ga_<id>) to count visits and see which pages are read and how far people scroll, and Google receives your IP address to do this. If you deny, Google Analytics is not loaded at all. Your cookie choice and your language are kept in your browser. You can change your choice at any time under Cookie Settings in the footer. The lawful basis for Google Analytics is your consent (Art. 6(1)(a) GDPR); for hosting and security it is our legitimate interest in running a safe website (Art. 6(1)(f)).
Do Not Track and GPC. Neither the App nor the website tracks you across other companies' apps or websites, and we do not sell or share personal information or run advertising. The website does not change its behavior for Global Privacy Control signals; to keep Google Analytics off, choose Deny in the cookie banner, or leave it unanswered.
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date at the top of this page, and for significant changes we will surface a notice inside the App before you can continue using it. Your continued use of the App after changes are posted constitutes acceptance of the updated policy.
For any questions, concerns, or rights requests under this Privacy Policy:
Pet Health+
Email: support@pethealthplus.app