Vetalio

Privacy Policy

Version 2.0 · Last updated 19 August 2026

The short version

We collect what the app needs to work and nothing else. We do not sell your data, we do not advertise, and we do not track you across other apps or websites. Your pet's records are visible only to you and to household members you invite. You can delete everything yourself, immediately, from Settings.

Who is responsible

Pet Longevity is the data controller for the information described here. Contact: [email protected]

What we collect

Account data: your email address, your display name if you set one, and your subscription status. Pet data: name, species, breed, birth date, weight, chronic conditions, your vet's name and email if you add them, and an optional photo. Health records: your daily observations, vitals, weight history, quality-of-life assessments, medications, doses given, stock levels, any reactions you log, your AI conversations, and vet visits including recordings, discharge sheet photographs and transcripts. Usage data: how much of your AI and vet visit allowance you have used, so we can show it to you and enforce it. Diagnostics: basic crash and error information.

What we do not collect

We do not collect your location, your contacts, your device identifiers for advertising, your browsing outside the app, or any information about your own health. We have no advertising SDKs and no third-party analytics trackers.

Why we process it

To provide the service you asked for, which is our contract with you. To keep it secure, working and free from abuse, which is our legitimate interest. And — for AI processing specifically, including transcribing a vet visit — on the basis of your explicit consent, which is separate, optional and withdrawable at any time.

Where it is stored

Your data is stored in the European Union on infrastructure provided by Supabase. Access is restricted by row-level security so that only you and household members you invite can read your pet's records. Recordings and discharge sheet photographs are held in private storage that is not publicly reachable. We chose EU hosting because it is the strictest standard we could apply to everyone; it does not change your rights wherever you live.

If you are outside the European Union

Storing your data in the EU means it is transferred out of your own country. Neither United States law nor Canadian federal law requires personal information to stay onshore, and we remain accountable for it wherever it is held. If you are in Quebec, this is the notice that your information is stored outside Quebec, in the European Union, and is protected there by the General Data Protection Regulation.

Who else sees it

Supabase, for hosting, database, authentication and file storage, in the European Union. OpenAI, for AI processing, in the United States — only if you have given AI consent, and only the data described in that notice. Expo, for delivering app updates and collecting crash diagnostics. Apple and Google, who process your subscription payment and never send us your payment details. We do not sell personal data, share it for advertising, or disclose it to anyone else except where the law compels us — in which case we will tell you unless we are forbidden to.

Transfers to the United States

Sending data to OpenAI moves it out of the European Economic Area. That transfer is made under the European Commission's Standard Contractual Clauses within our data processing agreement with them. It happens only if you have given AI consent, and stops the moment you withdraw it.

How long we keep it

Health records, pets and conversations: until you delete them, or until you delete your account. Vet visit audio: deleted as soon as it has been transcribed, and never kept beyond seven days regardless — the transcript remains with the visit until you remove it. Discharge sheet photographs: kept with the visit until you delete it. Account data: for as long as you have an account. Diagnostics: a short rolling window.

Deleting your account

Settings → Your data → Delete account & data. This is a full erasure, not anonymisation and not a soft delete: your account, pets, health records, medications, doses, assessments, conversations, visits, recordings and photographs are removed. It is immediate and there is no backup we can restore from, so please use Export my data on the same screen first if you want to keep a copy. If you are a household member rather than the owner of a pet, that pet's records belong to the owner and stay with them.

Security

Data is encrypted in transit and at rest by our hosting provider. Access to your records is enforced in the database itself rather than only in the app. Requests to the AI provider are made from our server so that no API key is ever present in the app. No system is perfectly secure; if a breach affects your data we will notify you and the relevant regulator as the law requires.

Your rights

You can access, correct, export or erase your data, withdraw consent, object to processing, and ask us to restrict it. Export and deletion are both under Settings → Your data and take effect immediately. For anything else, contact [email protected]. If you are in the United States, see the separate notice on US state privacy rights, which sets out the same rights in the terms your state uses and how to appeal a refusal.

Complaining

If you are in the European Union or the United Kingdom you may complain to your local data protection authority. In Canada you may complain to the Office of the Privacy Commissioner, or to the Commission d'accès à l'information if you are in Quebec. In the United States you may complain to your state Attorney General. We would rather you told us first, so we can fix it.

Affiliate links

Where the app recommends pet care products or hardware, some links may earn us a commission at no extra cost to you. Recommendations are not paid placements and do not affect the guidance the app gives.

Children

The service is not directed at children and is for adults aged 16 or over. We do not knowingly collect data from anyone under 16, and we do not knowingly collect data from children under 13 in the sense of the US Children's Online Privacy Protection Act. If you believe a child has given us their data, contact [email protected] and we will delete it.

Changes to this policy

When we change this policy we raise its version and update the date below. If a change materially affects your rights we will ask you to review it in the app rather than relying on you to notice. Last updated 19 August 2026.