Privacy Policy

Effective date: 22 June 2026

This Privacy Policy explains how Notepet (“Notepet”, “we”, “us”) collects, uses, and shares information. It applies to the Notepet mobile app for iOS and Android, the website at notepet.io, and the Notepet web app (together, the “Service”).

We try to keep this readable. In short: we collect the pet and health information you choose to record, plus the limited account and technical data needed to run the Service. We do not sell your personal information. Notepet is a record-keeping and reminder tool, not a source of veterinary advice — see the medical disclaimer in our Terms of Service.

1. Information you provide

• Account information. Your email address, name, and password, managed through Firebase Authentication. You can start with an anonymous (guest) account that requires no personal information; you only provide an email and password if you later upgrade it to a permanent account.
• Pet and health records you enter. Pet profiles (name, gender, birthday, species/breed, microchip number, neuter status); medications and dosages; medication stock and inventory; vaccination records (including batch number and the name of who administered the vaccine); measurements and health scores (weight, body condition, itch, fecal, mood, activity, temperature); trackers and schedules (measurement, pet-activity, and vet-appointment); and notes (including symptoms and vet visits).
• Contacts you store. Names, phone numbers, email addresses, and addresses for vets, clinics, groomers, and others. You are responsible for the details of any third party you enter, and you confirm you may store them.
• Group and sharing data. Email addresses of members you invite to a group, and the entries recorded by each member (entries are attributed to the member who recorded them).

2. Information collected automatically

• Usage and device data through Firebase Analytics (how you interact with the app, plus device and operating-system identifiers).
• Device information (device model, OS version, and device identifiers) and your locale and time zone.
• Crash and diagnostic data through Firebase Crashlytics.
• Push tokens (Firebase Cloud Messaging device tokens) so we can deliver notifications.
• Network and offline state to power the offline indicator.

Consent and withdrawal. This automatic collection is based on your consent. You can withdraw it at any time: disable analytics where the option is offered, manage notification and other permissions through your device settings, or close your account to stop collection entirely.

3. Purchase information

Notepet Plus subscriptions are processed by Apple (App Store) and Google (Google Play). RevenueCat manages your subscription entitlement and stores your subscription status and transaction identifiers. Notepet does not receive or store your payment-card numbers.

4. How we use information

We use information to:

• provide, sync, and maintain the Service;
• send medication and vaccination reminders;
• manage subscriptions and entitlements;
• diagnose crashes and fix problems;
• understand usage and improve the product; and
• comply with legal obligations.

5. Third-party services we use

We rely on the following processors to operate the Service. Each link goes to that provider’s privacy policy.

• Google Firebase — Authentication, Cloud Firestore (data storage and sync), Cloud Functions, Cloud Messaging, Analytics, Crashlytics, and Remote Config. See Firebase privacy and the Google Privacy Policy.
• RevenueCat — subscription management. See the RevenueCat Privacy Policy.
• Apple App Store — payment processing for subscriptions. See the Apple Privacy Policy.
• Google Play — payment processing for subscriptions. See the Google Privacy Policy.

6. How information is shared

• With other users you invite to a group, according to their role (Admin, Editor, or Viewer).
• With the processors above, only as needed to operate the Service.
• When required by law, or to protect the rights, safety, or property of Notepet or others.

We do not sell your personal information.

7. Website cookies and analytics

The marketing website at notepet.io uses Google Analytics. These analytics cookies load only after you accept them through the cookie-consent banner shown on the site; if you do not accept, they are not loaded. You can withdraw consent by clearing the site’s cookies in your browser. See the Google Privacy Policy for how Google processes this data.

8. Data retention and deletion

We retain your data while your account is active and for as long as needed to provide the Service.

• In-app account closure. You can close your account from within the app using Close Account. This marks your account for deletion and signs you out permanently; you will no longer be able to access it.
• Guest accounts. If you use an anonymous (guest) account and sign out or lose the device without upgrading it to a permanent account, that data cannot be recovered.
• Requesting deletion. To request deletion of your account and associated personal data, email us at notepet.io@gmail.com with the subject “Data deletion request” from the email address on your account. We will action verified requests and aim to delete your personal data within 30 days.
• What may survive deletion. Aggregated or anonymized analytics, crash logs that no longer identify you, and time-limited backups may persist for a short period before being overwritten, and we may retain limited records where the law requires.

Data deletion requests. You can request deletion of your Notepet account and its data at any time by emailing notepet.io@gmail.com from your account email address with the subject line “Data deletion request”. This is the web-accessible path for requesting account and data deletion. We will verify and process the request and aim to complete deletion of your personal data within 30 days, subject to the limited exceptions described above.

9. Access and correction

You can access and review most of your personal data directly in the app, and you can edit or delete your records there. To access a copy of the personal data we hold about you, or to correct it, email notepet.io@gmail.com and we will help.

10. Security

We use commercially reasonable safeguards to protect your information, and we rely on Google Firebase’s infrastructure for storage and processing. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a data breach affects your personal data, we will notify you and the relevant authorities as required by law.

11. Children’s privacy

The Service is not directed to or intended for children under 13, and we do not knowingly collect personal data from them. Where local law sets a higher minimum age for digital consent (up to 16 in parts of the European Union), that higher age applies. Notepet is not listed in any store’s Kids Category.

12. International data transfers

Your data may be processed on Google and RevenueCat servers located outside your country. Where it is transferred internationally, we rely on these providers’ safeguards for such transfers.

13. Your choices

• View, edit, and delete your records in the app.
• Manage notification and other permissions through your device settings.
• Withdraw analytics consent as described above.
• Close your account, or request deletion by email.
• Contact us at notepet.io@gmail.com for help with any of the above.

14. Changes to this policy

We may update this policy from time to time. For material changes we will surface a notice in the app or on the website. Your continued use of the Service after an update means you accept the revised policy.

15. Contact and Data Protection Officer

For privacy questions, to exercise your choices, or to reach our Data Protection Officer / privacy contact, email notepet.io@gmail.com.

Notepet collects personal data with your consent and you may withdraw that consent as described in this policy.

Effective date: 22 June 2026.