Privacy Policy
- PillPaw works without an account. You never give us your name, email address, phone number or location.
- Your pets, medications and care logs stay on your iPhone unless you turn on household sharing.
- No ads, no tracking across other apps or websites, and we never sell your data.
- You can export everything and delete your data from inside the app at any time.
1. Who we are
PillPaw is provided by {{DEVELOPER_NAME}} ("we", "us"). We are the controller of the personal data described here. Contact: {{SUPPORT_EMAIL}}.
2. Data that stays on your device
Pet profiles (name, species, birthday, sex, weight, microchip number, allergies, vet contact, notes, photo), medication schedules, dose and care logs, weight and symptom notes are stored in the app on your device. If you do not use household sharing, we never receive this data. It is included in your device backups according to your iCloud/Finder settings.
3. Household sharing (optional)
When you create or join a household, the app creates an anonymous account (a random ID; no email or password) and syncs the following to our server so that household members see the same information:
- Your member nickname and colour (you can use any nickname) and your role;
- The household's pet profiles, including a small thumbnail of the pet photo (full-size photos are never uploaded);
- Medication and care schedules, dose and care logs (who logged what, and when), weight and symptom notes, and their edit history;
- Invitation records and, for technical operation, your app version, language, time zone and a random device ID.
Everyone in the household can see this information. Please only invite people you trust. The server uses this data only to sync it, to detect a dose that was logged twice, and to alert household members when a dose is late.
4. Notifications
Dose reminders are scheduled locally on your device. If you are in a household, we also store your device's push token (issued by Apple), language and time zone so that we can alert you when a dose is late or already logged by someone else. Push messages are delivered by Apple Push Notification service.
5. Purchases
Purchases are handled by Apple. We never see your payment details. To activate PillPaw Pro for your household, the app sends us the signed transaction information from Apple (product, transaction ID, purchase and expiry dates), which we verify and store with your anonymous account.
6. Usage statistics (you can turn this off)
To understand which features are used, the app sends a small number of usage events (for example "dose logged from a widget") to our own analytics server. Events contain only fixed values such as the feature used, never pet names, medication names, nicknames or notes. Each event includes a random installation ID, app version, device model (e.g. "iPhone16,2"), iOS version, language/region and time zone. Once the app has a sync account (household sharing or a purchase), events also carry that account ID, so they are linked to your account. You can turn this off at any time in Settings > Privacy > Share usage data; custom events stop at once and automatic app-start events from the next launch.
7. Crash reports and diagnostic logs
- Crash reports: if the app crashes, a crash report (stack trace, device model, iOS version, app state, a random Crashlytics installation ID and, if you have one, your PillPaw account ID) is sent to Firebase Crashlytics, a service of Google.
- Diagnostic logs: the app keeps technical logs on your device for 7 days. They are uploaded to our server only when we need them to investigate a problem, typically after you contact support. Uploaded logs are linked to your installation ID and PillPaw account ID so we can find them. They never contain pet names, medication names, nicknames, notes, access tokens or passwords, and push tokens are shortened. With usage statistics turned off, logs can no longer be requested by account ID right away and not at all from the next launch; they then stay on your device.
8. What we do not collect
We do not collect your name, email address, phone number, postal address, precise or approximate location, contacts, health data about you, or the advertising identifier (IDFA). We do not use your data for advertising, we do not track you across other companies' apps or websites, and we do not sell or share your personal data for cross-context behavioural advertising.
9. Service providers and international transfers
| Provider | Purpose | Location |
|---|---|---|
| Cloudflare, Inc. | Hosting of the sync server, analytics server and this website; data is encrypted in transit and at rest | USA; global network, data may be processed in the region closest to you |
| Google LLC (Firebase Crashlytics) | Crash reports | USA |
| Apple Inc. | Push notifications, in-app purchases | USA |
Your data may therefore be processed outside your country, including in the United States. Where required (for example under the GDPR), transfers are protected by the European Commission's Standard Contractual Clauses or equivalent safeguards offered by these providers. Our servers necessarily receive your IP address when the app connects; we do not store it in our sync or analytics databases.
10. How long we keep data
- Household data: while the household exists. Items you delete are removed after at most 90 days. When you delete your account, your account, push tokens and memberships are deleted immediately; a household with no remaining members is deleted with it.
- Usage statistics: up to 400 days.
- Crash reports: up to 90 days (Firebase default).
- Uploaded diagnostic logs: up to 30 days after upload.
- Data on your device: until you delete it or the app.
11. Your choices and rights
- Export: Settings > Your data > Export or import (CSV or full JSON backup).
- Delete your account: Settings > Your data > Delete my account. This removes your server data as described above.
- Delete data on this device: Settings > Your data > Delete all data on this phone, or delete the app.
- Leave a household at any time; the owner can remove members.
- Turn off usage statistics in Settings, and notifications in iOS Settings.
Depending on where you live, you may have the right to access, correct, delete, restrict or object to the processing of your data, to data portability, and to withdraw consent. Because we do not know who you are, please include your in-app account ID (Settings > About > Account ID) when you write to {{SUPPORT_EMAIL}}. We will reply within 30 days. You also have the right to complain to your local data protection authority.
12. Legal bases (EEA/UK)
We process household data, notifications and purchase verification to provide the service you request (Art. 6(1)(b) GDPR); crash reports, diagnostic logs and usage statistics on the basis of our legitimate interest in keeping the app reliable and improving it (Art. 6(1)(f)), which you can object to by turning statistics off or contacting us. Pet information is not "special category" data about you, but please do not enter information about people in free-text fields.
13. Children
PillPaw is a general-audience app and is not directed at children under 13 (or the minimum age in your country). We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.
14. Regional information
- California (CCPA/CPRA): we do not sell or share personal information and do not use sensitive personal information. You may exercise your rights to know, delete and correct as described above without discrimination.
- Japan (APPI), Korea (PIPA), China (PIPL): see the language versions of this policy for local details. By turning on household sharing you agree that your household data is stored on servers outside your country as described in section 9.
15. Changes
We will post any changes on this page and update the effective date. For material changes we will also inform you in the app.
16. Contact
{{DEVELOPER_NAME}} · {{SUPPORT_EMAIL}}