PawLog ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share your information when you use our Service. This policy applies to all users globally, including those in the European Economic Area (EEA), United Kingdom, and other jurisdictions with data protection laws.
PawLog is the data controller for your personal data. For questions about this policy or your data, contact us at privacy@pawlog.pet.
We collect the following categories of data:
We record a small log of how the app itself is used, so we can tell which parts work and which do not. An entry records what happened and where (for example, that an invite card was shown, shared, or dismissed), which platform you were on, your user ID, and your household ID.
These entries never contain your pet's name, your notes, your photos, or any other text you wrote. They stay in our own database, are readable only by us, and are never sent to an advertising network or sold. See section 12 for the legal basis and how to object.
We use your data for the following purposes:
Under GDPR, we process your data based on:
We share your data only in these circumstances:
We do not sell your personal data. We do not share your data with advertisers.
Your data is stored securely using Supabase, with servers located in the European Union (Frankfurt, Germany). We implement industry-standard security measures including encryption in transit (TLS), row-level security policies, and secure authentication. Photos are stored in private storage buckets accessible only to authorized household members.
We retain your data for as long as your account is active. When your account is deleted, your personal data and your uploaded photos are permanently deleted within 30 days, and so is your dog's profile and its full record if you were the last member of the household.
Where other members remain in your household, the care entries you contributed stay in that household with your name removed from them, so the shared record of the dog's care is not broken for the people who rely on it. Those entries keep their dates, notes and photos, so removing your name is not the same as making them anonymous: a person who was in the household at the time may still recognise which entries were yours. Ask us and we will remove specific notes or photos by hand. Aggregated statistics that identify no individual may be retained for service improvement.
When you confirm deletion, PawLog records the request. We process recorded requests within 7 days. Your account continues to work until deletion is completed, and no data has been removed yet. All normal PawLog emails stop when the request is recorded. After removal is verified, we send one final confirmation listing what was removed. See the account deletion page for the full sequence.
Depending on your jurisdiction, you have the right to:
To exercise any of these rights, contact us at privacy@pawlog.pet or use the account management features in the Settings page.
Your data may be transferred to and processed in countries other than your country of residence. When we transfer data outside the EEA/UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions recognized by the European Commission.
The Service is not intended for children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
We use browser local storage to maintain your authentication session and theme preferences. We do not use tracking cookies or any cross-site tracking, and nothing we run follows you across other websites or apps.
Vercel Analytics counts page views without cookies and without identifying you. Our own product usage log (section 3) records which features are used, linked to your user and household ID so we can tell whether a change actually helped.
Email engagement. Our account and care emails are delivered by Resend (section 6), which records whether a message was opened and whether a link in it was clicked. Opens are detected by loading a small image from Resend when the message is displayed. We use this to see whether our emails are useful and to spot delivery problems such as an address that keeps bouncing. This data is used only by us to run and improve PawLog, and section 6 applies to it in full: it is never sold and never shared with advertisers. If you would rather your email images did not load, most email apps can block remote images, and doing so leaves everything else about the message working.
The legal basis for the analytics and the email engagement above is our legitimate interest in operating and improving the Service (GDPR Article 6(1)(f)). No information is stored on or read from your device for these purposes, so no consent banner is required. You can object to this processing at any time under Article 21 by emailing us at the address in section 14, and we will stop recording product usage events for your account and email engagement for your address.
Crash and error reports. If the app hits an unexpected error, a report is sent to Sentry (section 6) so we can fix it. That report includes your account ID, which lets us tell how many accounts are affected by a given problem instead of guessing from an anonymous count. These reports never include your pet's name, your notes, or your photos. The legal basis is the same legitimate interest in keeping the Service reliable and secure (GDPR Article 6(1)(f)); questions or objections can be sent to the address in section 14.
We may update this Privacy Policy from time to time. We will notify you of material changes via the Service or email. The "Last updated" date at the top of this page indicates when the policy was last revised.
For privacy-related questions or concerns, contact us at privacy@pawlog.pet.
If you are in the EEA/UK and are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.