Privacy Policy
The short version. Petwellio stores your account, your pet's records and the photos you add to them so they survive a lost phone and reach your other devices. It has no advertising and no tracking of any kind, and it never sells or shares your information. It does collect anonymous usage statistics and crash reports, which you can switch off in Settings. Deleting your account in the app deletes the records and photos with it.
What the app collects
Account information
When you create an account we store an account identifier and, depending on how you sign in, your email address. Sign in with Apple may give us a private relay address instead of your real one; that is Apple's choice and we treat whatever we receive the same way. If you sign in with Google we receive the email address and display name on that account. We never receive your password for Apple or Google sign-in, and passwords for email sign-in are handled by Firebase Authentication and are never visible to us.
What you enter about your pet
Pet profiles (name, profile photo, species, date of birth, sex, neuter status, weight, conditions you select), daily check-ins, symptoms, timed episodes and incidents with their descriptions, medications and dose history, vaccinations, weights, your notes, and the care instructions you write for a pet sitter. These are stored on your device and, so they are not lost with the phone, synced to your account in Google Cloud Firestore.
Photos
You can add up to four photos to an incident or an episode — taken with the camera or chosen from your library — so the vet can see what happened. Each photo is reduced to at most 2048 pixels on its longest side and uploaded to your account in Firebase Cloud Storage; a small thumbnail is kept with the entry in Cloud Firestore, along with the date the photo was taken if the file records it. Photos appear in the vet report you create. Your pet's profile photo is synced with the pet as a reduced copy, a few hundred pixels across.
Deleting a photo, the entry it belongs to, the pet or your account deletes the stored file as well. The app sees only the photos you pick in the system photo picker — it has no access to the rest of your library — and uses the camera only while you are taking a photo. If you save a photo from the app to your library, iOS asks for permission to add it; the app never reads the library.
What stays on your device
Generated PDF reports are written to the app's own storage on your device and are shared only when you choose to share one. Copies made for the share sheet are temporary and are removed when you sign out.
Location
Location is requested only when you open the nearby-clinic search, and only for as long as that screen needs it. The search runs through Apple Maps on your device. Your location is not stored by the app and is never sent to us or to our servers.
Purchases
Subscriptions are sold and billed by Apple. We never see your card, bank or billing details. A subscription belongs to the Petwellio account it was bought from, so that it follows you to your other devices whatever Apple Account they use. To make that work:
- A one-way identifier derived from your account id travels with the purchase; it cannot be turned back into your email address.
- A copy of the purchase record Apple signs — the plan, purchase and expiry dates and Apple's transaction numbers, no payment details — is stored with your account. It is deleted with your account.
- For a purchase that carries no account identifier, a record of which account claimed it is stored under Apple's original transaction number, so the same purchase cannot unlock a second account. It holds only that number, the account's random identifier and the date. Because it exists to stop a purchase moving between accounts, it is kept after the account is deleted; by then the identifier no longer leads to any person or data.
Usage statistics and crash reports
To find out which parts of the app are actually used and when it breaks, Petwellio records events such as "a tab was opened", "a check-in of this kind was saved", "a reminder was answered", "a pet of this species was added", along with crash reports. These carry categories and counts, never content: no pet names, no notes, no symptom text you typed, no weights, no email address. They are not linked to your account.
The analytics and crash reporting software generates its own random install identifier to count events and group crashes; it is not the advertising identifier and is not tied to your account. All of this can be switched off in Settings → Privacy → "Help improve Petwellio". Turning it off stops collection on that device rather than collecting quietly and discarding.
What the app does not collect
There is no advertising, no advertising identifier, no cross-app tracking, no tracking pixels and no third-party trackers. The app's privacy manifest declares tracking as disabled and lists no tracking domains. Notifications are scheduled locally on your device — the app has no push server and holds no push token.
Why we hold it
- To run the app you asked for — your records have to exist somewhere to be shown, charted and printed into a report.
- To keep your records across devices and reinstalls — that is what an account is for.
- To sell and restore a subscription — a purchase has to attach to an account to survive a new phone, and must not be usable by someone else's account.
- To keep the service from being abused — Firebase App Check confirms requests come from a genuine copy of the app.
Where the GDPR applies, the legal basis is performance of a contract with you (running the app and your subscription) and our legitimate interest in keeping the service secure and in understanding how it is used — the last of which you can withdraw at any time with the switch in Settings.
Who else processes it
Google LLC, through Firebase Authentication, Cloud Firestore, Cloud Storage for Firebase, App Check, Google Analytics for Firebase and Crashlytics, stores the data on Google Cloud infrastructure in the United States on our behalf. Apple processes your purchase and, if you use Sign in with Apple, your sign-in. We use no other processors, and we do not sell, rent or share personal information with anyone for their own purposes.
How long we keep it
Your records and photos are kept while your account exists. A record you delete is replaced by a marker without its content, so your other devices learn of the deletion; the marker is removed automatically after 90 days. Deleting your account in the app — Settings, the subscription screen, or during first-run setup — erases the account's documents and photos and then the account itself, revokes Sign in with Apple if you used it, and clears that device's copy. Deleting the account does not cancel a subscription, which Apple bills until you cancel it in your Apple Account settings. Backups held by our infrastructure provider may retain deleted data for a short period before they age out. Deleting the app alone does not delete the account, because the records are meant to survive a reinstall.
Your rights
You can see everything the app holds about your pet inside the app, export it as a PDF report, correct it by editing, and delete it — either record by record or by deleting the account. Write to dchuev.apps.support@gmail.com if you would rather we did it, or if you want a copy of your account data in another form.
If you are in the EU or the UK you also have the right to object to or restrict processing, to data portability, and to complain to your data protection authority. If you are a California resident: we do not sell or share personal information, we do not use it for cross-context behavioral advertising, and exercising your rights will never get you worse service.
Children
Petwellio is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has created an account, write to us and we will delete it.
Security
Traffic between the app and Firebase is encrypted in transit. Server-side security rules restrict every record to the account that created it, so one account cannot read another's. No system is perfect, and we would rather say that plainly than promise otherwise.
International transfers
The developer is in Belarus, and the infrastructure that stores your records is operated by Google. Your data may therefore be processed outside your country, including in the United States and the European Union.
Changes
If this policy changes, the new version is posted here with a new effective date. Material changes will also be announced in the app.