Pawmetry Privacy Policy

Effective date: October 14, 2026

Pawmetry helps pet owners keep pet health records, visits, lab results, medications, reminders, documents, and AI-assisted summaries in one place.

Who Is Responsible

Pawmetry is published on the App Store by Yelena Nesterova, Republic of Kazakhstan ("Pawmetry", "we"), who decides how the personal data described here is processed. Contact for every privacy matter: pawmetry_support@icloud.com.

Most of what you enter is information about your pet, which is not personal data. Personal data in Pawmetry is mainly your Apple sign-in, purchase state, and any owner details that appear in the documents you choose to analyze.

Information You Provide

You may enter or import:

• pet profile details, such as name, species, breed, age, and weight;
• pet health records, such as visits, diagnoses, symptoms, lab results, medications, vaccinations, reminders, notes, and documents;
• photos, PDFs, lab reports, ultrasound reports, prescriptions, and discharge summaries;
• account details such as your name and email address; and
• subscription and purchase state managed by Apple and RevenueCat.

We use this information to provide the features you request. Pawmetry does not use it for advertising or advertising profiles.

Device and iCloud Storage

Pawmetry primarily stores pet records and files on your device using local app storage. When iCloud Drive is available, Pawmetry may also create backups in the app's private container in your personal iCloud account so that you can restore your records. Apple processes those backups under your iCloud account and terms; Pawmetry does not operate a server that can browse your private iCloud files.

Deleting the app or its local data does not necessarily delete an existing iCloud backup. You can manage iCloud data through Apple settings. The in-app account-deletion flow attempts to delete Pawmetry's iCloud backups as well as local data and reports if a manual iCloud cleanup is still needed.

Optional AI Analysis

AI features process selected document images, extracted text, your question, and relevant pet records through Pawmetry's Cloudflare proxy and OpenAI. Relevant context may include recorded diagnoses, lab results, weight, symptoms, visits, procedures, and veterinarian recommendations. For Pro users, saving an AI analysis may also generate or refresh a health overview from that context without a separate question. Simply attaching a file or entering a manual record does not by itself send the entire record to OpenAI.

Before upload, the app renders PDF pages and normalizes images to JPEGs; the original raw PDF is not sent. On your device, Pawmetry then masks the owner details it recognizes in each page and in its text: owner or client names next to labels such as "Owner" or "Client", phone numbers, email addresses, home addresses, and personal ID numbers. Pet, clinic, and veterinarian names are kept because the analysis needs them. Recognition is automatic and may miss details, so review documents you consider sensitive. Your saved original stays unchanged on the device.

When Cloudflare is not reachable from your network (for example in Russia, where Cloudflare is throttled), the app sends the same request through Pawmetry's relay server in Kazakhstan. The relay only forwards encrypted traffic to the Cloudflare proxy, keeps no access logs, and does not store requests or responses. It passes your IP address to the proxy solely for per-device rate limiting. Each request is limited to 20 pages or images. When the account-credit service is enabled, the proxy authenticates the account and enforces its credit balance. TestFlight configurations may use a limited pilot service without account-credit debits. The generated result is informational and does not replace veterinary diagnosis, advice, or emergency care.

Pawmetry sets `store: false` on OpenAI Responses requests, so Responses application-state storage is disabled. OpenAI's standard abuse-monitoring logs may still contain request and response content and are normally retained for up to 30 days. Longer retention may apply for legal or safety reasons under OpenAI’s data controls. Different controls apply if the project is approved and configured for Modified Abuse Monitoring or Zero Data Retention; we do not claim zero retention for ordinary requests. Pawmetry disables optional OpenAI data sharing for ordinary production user traffic.

The Pawmetry proxy may store an encrypted AI response for up to 24 hours so that an identical retry can return the same result without calling OpenAI or charging credits twice. Retryable operation metadata is removed after 30 days, and completed non-content billing, security, and idempotency metadata is retained for no more than 90 days. We do not intentionally write document contents or AI response text to application logs.

Do not upload files or enter information that you do not want processed by the AI service.

Anonymous Usage Analytics

Usage analytics is enabled by default and can be disabled in Settings. When enabled, Pawmetry uses TelemetryDeck to understand which features are used, whether onboarding and AI operations complete, and where subscription or credit offers are shown. Events contain only a fixed action name, bounded categories such as the feature or file-count range, an hour-level timestamp, the app version, general device information, and automatic session statistics. TelemetryDeck hashes the installation identifier before transmission and does not store IP addresses.

Pawmetry does not send TelemetryDeck your name, email, Apple account identifier, Pawmetry account identifier, pet details, medical records, values, diagnoses, notes, documents, file names, OCR, AI prompts, or AI responses. Analytics is not used for advertising or cross-app tracking. You can disable it at any time in Pawmetry Settings.

Account, Credits, and Payments

For server-backed AI and purchases when those features are enabled, Pawmetry uses Sign in with Apple. The server derives an opaque account identifier from Apple's account identifier; RevenueCat and the Pawmetry proxy use this opaque value to manage subscription status, credits, restores, refunds, and idempotent operations. Pawmetry does not retain your Apple identity token, Apple subject, name, or email in its operation journal. The proxy stores an encrypted Apple refresh token separately and only as long as needed to validate the Apple session and revoke Pawmetry's authorization when the account is deleted.

In configurations without a server-backed account, RevenueCat can use its own anonymous app-user identifier for purchases and restores.

When purchases are available, payments are processed by Apple using in-app purchase. Pawmetry does not receive your full payment-card details. Purchased Archive credits do not expire. Credits granted by a subscription expire at the end of the applicable billing period and are used before non-expiring Archive credits where supported by the configured balance service.

Service Providers and Data Sharing

Pawmetry does not sell your data, share it with data brokers, or use it for advertising tracking. The following providers process data only as needed to provide app functionality:

• Apple — App Store purchases, Sign in with Apple, and private iCloud storage;
• RevenueCat — purchase history, subscription entitlement, refunds, restores, and AI-credit balances associated with an opaque account ID;
• Cloudflare — authentication, security controls, billing idempotency, and the AI proxy infrastructure;
• Pawmetry relay hosting (Kazakhstan) — encrypted forwarding of requests when Cloudflare is unreachable from your network;
• OpenAI — optional AI analysis requests; and
• TelemetryDeck — optional anonymous product-usage analytics.

We require service providers to handle Pawmetry data only for the services they provide and under privacy and security protections consistent with this policy. Their own legal retention duties may also apply.

Where Data Is Processed

Records stay on your device and in your private iCloud. Data you send for AI analysis is processed by OpenAI in the United States, passes through Cloudflare's global network (usually the data center closest to you), and, when used, through the relay in Kazakhstan. RevenueCat processes purchase state in the United States, and TelemetryDeck processes anonymous analytics in the European Union. These countries may not offer the same level of data protection as your own. AI transfers happen only after you give consent in the app, and you can withdraw it at any time.

Legal Bases

We process data to provide the features you request and the purchases you make (performance of a contract), send data to AI providers only with your consent, keep security, anti-abuse, and billing records because we have a legitimate interest in a safe and fair service, and keep transaction records where the law requires it. Anonymous analytics relies on our legitimate interest in improving the app and can be switched off in Settings.

Retention and Account Deletion

Local and private iCloud records remain until you delete them, delete the related backup, or request account deletion. AI and operation retention periods are described above. Apple and RevenueCat may retain transaction, refund, fraud-prevention, tax, or legal records under their own policies even after Pawmetry requests deletion of its customer record.

If you created a server-backed account, you can initiate account deletion inside the app. Pawmetry asks for a fresh Sign in with Apple confirmation, cancels pending AI uploads, blocks old sessions, removes Pawmetry operation data, requests deletion of the RevenueCat customer, deletes local data and Pawmetry iCloud backups, and revokes the Apple authorization when a revocable Apple token is available. If Apple credentials cannot be revoked programmatically, Pawmetry still processes the data-deletion request and may direct you to remove Pawmetry manually in your Apple Account settings.

After deletion, Pawmetry may retain only a minimal opaque security record containing a one-way account identifier, session cutoff, timestamps, and a flag that prevents the one-time free AI grant from being issued repeatedly. It does not contain your Apple subject, email, pet records, documents, prompts, or AI responses.

If part of local or iCloud cleanup cannot be completed, the app tells you what must be removed manually. You can also contact pawmetry_support@icloud.com with a privacy or deletion request. We process the email address and information you include to answer that request.

Deleting the app or account does not cancel an App Store subscription. Cancel it separately in Apple subscription settings.

Your Choices

You can:

• avoid optional AI features and keep records local;
• delete imported files and pet records inside the app;
• export pet data where export features are available;
• cancel subscriptions through your Apple ID subscription settings;
• manage or delete Pawmetry backups in iCloud;
• disable anonymous usage analytics in Pawmetry Settings; and
• initiate account deletion inside the app; and
• withdraw AI data-sharing consent in Settings → Privacy, which stops future AI requests and pending background uploads.

Depending on where you live, you may also have the right to access, correct, delete, or receive a copy of your personal data, to object to or restrict its processing, and to complain to your local data-protection authority. Send requests to pawmetry_support@icloud.com; we answer within 30 days. Most records exist only on your device, so the fastest way to see or delete them is in the app.

Security

We use reasonable technical and organizational measures to protect data handled by the app and server-side services, including encrypted transport, bounded encrypted response replay, short-lived authenticated operations, and server-side purchase enforcement. No method of storage or transmission is completely secure.

Children

Pawmetry is intended for pet owners and is not directed to children under 13.

Changes to This Policy

We may update this policy when the app, service providers, or legal requirements change. The effective date above identifies the current version.

Contact

For privacy questions or deletion requests, contact: pawmetry_support@icloud.com