Privacy Policy

1. What we collect

We collect only what Fluffbook needs to look after your pets:

• Account: your name and e-mail address (or Apple's private relay address), from Sign in with Apple, Google or e-mail. It is the same account you may use in Foodoo and Potpal.
• Your pets: species, breed, name, birth month, sex, weight, food, chronic conditions, allergies, your vet clinic, the care calendar, what was done and by whom, and the conversation with each pet.
• Health records you add: vaccinations, treatments, medicine courses, symptoms you describe, lab results and vet documents.
• Photos you take or choose: of your pet (to recognise it and draw its character), of symptoms, and of documents.
• Food labels you photograph, and the questions you ask in "Can my pet eat this?" (words or a photo of the food).
• Trips you plan: the country and the dates, to make the travel checklist.
• What a sitter does with a link you gave them: the name you gave them, what they marked as done and the photos they send.
• If your pet is lost: what you choose to show on the lost page, and the messages finders send you.
• Settings: language, time zone, quiet hours, and your device's push token if you allow notifications.
• Purchases: whether you have Premium, from Apple, Google and our payment partner RevenueCat. We never see your card.

2. How we use it

To build your pet's calendar, remind you, keep its medical card, read documents you send, sort a symptom you describe by urgency, write its messages, show your family what was done, and provide Premium. We do not use your data for advertising and we do not sell it.

3. AI processing

Photos and messages you send are processed by Google's Gemini models to recognise the animal, draw the character, write the pet's replies, read documents and food labels, answer "Can my pet eat this?" and sort symptoms by urgency. Google processes them on our behalf under its paid API terms and does not use them to train its models.

Signs of an emergency are recognised without AI and answered at once. "Can my pet eat this?" checks a fixed list of dangerous foods first and asks Gemini only about foods that aren't on it. Routine reminders, portions and the travel checklist are worked out without AI.

4. Your family

If you invite people into your household, they see the same pets, chats, calendar, medical card and history, and who did what. Anyone can leave; the owner can remove people.

5. Links, tags and widgets

Some features work outside the app. Here is what each one shows and stores:

• A link for a sitter (caretaker link): whoever opens it — without an account — sees the pets you chose (names, faces, what's due, how to look after them, food and portion, medicines with dose and times), your vet clinic's name and phone, your first name and your note, only between the dates you set. The name you give the sitter is stored with the link. When they tap Done or send a photo, it is saved in the pet's history and chat with that name, and the photo is stored like your own photos. You can delete the link at any time.
• The collar tag: it holds only a link with a random code — no personal data. While lost mode is off, anyone who scans it sees the pet's drawn face and name and can send you a message. While lost mode is on, the page also shows its latest photo, breed, colour and markings, the area and since when, your note and reward, and your phone number only if you choose to show it. Lost mode is off until you turn it on.
• Finder reports: a finder's message, and — only if they add them — their contact and their location (their browser asks them first) are sent to your household as a message in the pet's chat, with an immediate notification.
• A report for the vet contains only the sections you choose, and your name only if you tick it. Its link works for 30 days; anyone you send it to can open it.
• Growth timelapse: made on our server from your pet's photos and kept for 24 hours behind an unguessable link, then deleted.
• Widgets, the Live Activity, Siri and Shortcuts: the widget's snapshot (names, faces, what's due, who fed whom, the medicine course) is stored on your device. A course shown on the lock screen shows the medicine's name, dose and next time to anyone who can see your lock screen; you can turn Live Activities off in iOS Settings. So that widgets and Siri can mark tasks without opening the app, your device keeps a separate key valid for 90 days; our server stores only a fingerprint (hash) of it, and the key can't be used to sign in to your account. What you say to Siri is handled by Apple; we receive only the action.
• People who open these pages need no account. The pages set only a language cookie, and requests are rate-limited by IP address to protect them from abuse.

6. Sharing

We share data only with service providers that help us run Fluffbook — cloud hosting, Google (AI processing), Expo (push notifications), RevenueCat, Apple and Google (purchases) — bound to use it only for that; when required by law; or in a business transfer, with notice to you. We never share your pet's health records with anyone else, except where you share them yourself (a sitter's link, a report for the vet).

7. Retention and deletion

Your pets, photos, documents and history are kept while your account exists. A pet you delete disappears from the app at once and its data is erased within 30 days. A sitter's link stops working at the end date you set, a report link after 30 days, and a timelapse is deleted after 24 hours.

You can delete your whole account in the app (You → Delete account). This deletes the account shared with Foodoo and Potpal and everything in it; a household you share with others passes to them. You can also write to us.

8. Your rights

Depending on where you live (for example GDPR in the EU/UK, CCPA in California) you can ask to access, correct, export or delete your data, or object to its processing. Write to the address below; we answer within 30 days.

9. Security

Data is encrypted in transit; access is limited to the people who run the service. Photos and documents are served through unguessable links.

10. Children

Fluffbook is not directed at children under 13, and we do not knowingly collect their data.

11. International transfers

Our servers and providers may be outside your country. Where required, transfers rely on standard contractual clauses.

12. Changes

We will post any change here and update the date above; for material changes we will tell you in the app.

13. Contact

Questions or requests: hello@fluffbook.app.