Privacy policy

This Privacy Policy describes how Pawpoy ("we," "us," or "our") collects, uses, and discloses information about you when you use our services, including our website at pawpoy.com and our application at app.pawpoy.com (collectively, the "Service").

Information we collect

Information you provide directly

Account information: Email address and password (or Google OAuth token) when you create an account.
Pet profiles: Information you enter about your pets — name, species, breed, date of birth, weight, health conditions, medications, vaccinations, and vet visit records.
Scan data: Images of pet food labels or barcodes you submit for analysis.
Communications: Messages you send us via email or support channels.

Information collected automatically

Usage data: Pages visited, features used, scan results viewed — collected in aggregate for product improvement.
Device information: Browser type, operating system, IP address, general location (country/region).
Cookies: Session cookies to maintain your login state. We do not use third-party tracking cookies.

How we use your information

To provide and operate the Service
To process pet food label scans and generate safety verdicts
To send product updates, reminders (vaccinations, medications) — only if you opt in
To improve the ingredient database and AI accuracy using aggregated, anonymized data
To comply with legal obligations

What we do not do

We do not sell your personal data or your pet's health data to third parties
We do not share scan data with pet food manufacturers or brands
We do not use your data for advertising targeting
We do not build profiles for advertising purposes

Data storage and security

Your data is stored on Supabase (PostgreSQL, hosted on AWS infrastructure). We use TLS encryption in transit and AES-256 encryption at rest. Access to personal data is restricted to authorized personnel only.

Food scan images are processed by our AI pipeline and are not stored indefinitely. Scan results (text verdicts) are stored to your scan history.

Shared reports

When you generate a shareable vet report, a token-authenticated link is created. Anyone with the link can view the read-only report. You can revoke access at any time from your pet's profile. Revoked links immediately become invalid.

Data retention

We retain your data for as long as your account is active. You can delete your account — and all associated data — from the Settings page in the app. Deletion is permanent and processed within 30 days.

Your rights

Depending on your jurisdiction, you may have rights to access, correct, export, or delete your personal data. To exercise these rights, email us at privacy@pawpoy.com.

Children's privacy

The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13.

Changes to this policy

We will notify registered users of material changes to this policy via email. Continued use of the Service after changes constitutes acceptance of the updated policy.

Contact

For privacy questions: privacy@pawpoy.com