Privacy Policy
A plain description of what we collect, why, who we share it with, and the choices you have — written to match exactly what the app does today.
Everything below is information you or a caregiver you've invited enters directly into the app. We don't buy data about you from anyone else.
Your email address, and however you chose to sign in — email & password, or Sign in with Apple / Google.
Whatever you choose to record for each pet: name, species, breed, sex, birthdate, microchip ID, vaccination history, medications and dose logs, and weight entries.
Files or photos you upload — vet records, receipts, certificates — and any photo you attach to a pet's profile.
If you invite a caregiver, their email becomes visible to your household, and yours becomes visible to theirs. We also record who logged each medication dose and when, by design — it's how the app prevents two caregivers from double-dosing a pet.
Whether your household has an active Premium subscription. Billing itself is handled entirely by Apple, Google, and our subscription platform (RevenueCat) — we never see or store your card details.
No third-party analytics or advertising SDKs are integrated into this app. Reminder notifications are scheduled locally on your device — they aren't routed through a remote push server, so no push token is collected or transmitted.
We do not use your data to serve ads, and we do not sell it.
We share data in two situations only:
Anyone you explicitly invite into a pet's care team can see the records for that household, scoped to the access level you give them — full access as a Caregiver, or read-only as a Sitter. Nothing is visible to anyone outside a household you've chosen to share with.
| Provider | What they handle |
|---|---|
| Supabase | Database, authentication, and file storage (hosted in Singapore) |
| RevenueCat | Subscription and purchase status |
| Apple / Google | Sign-in (if you choose it) and app store billing |
These providers process data on our behalf under their own security commitments — none of them are permitted to use your data for their own purposes.
Your records live in a Postgres database with row-level security enforced at the database layer, not just in the app — meaning a request for data outside your own household is rejected by the database itself. Uploaded documents sit in a private storage bucket and are only ever served through short-lived, authenticated links, never a public URL.
VetTidy isn't directed at children, and we don't knowingly collect information from anyone under 13. If you believe a child has created an account, contact us and we'll remove it.
If this policy changes in a way that matters, we'll update the date at the top of this page. Continuing to use the app after a change means you've seen it.
Questions, requests, or a deletion request — reach us at privacy@vettidy.com.