Legal & Privacy

Who We Are

PawlyLife ("PawlyLife," "we," "us," or "our") is a mobile application developed and operated by Lisa Lu, an individual developer based in California, United States.

For questions, concerns, or data requests related to this Privacy Policy, you may contact us at:

Email: pawlycaresupport@gmail.com

Scope of This Policy

This Privacy Policy applies to:

• The PawlyLife mobile application available on the Apple App Store and Google Play Store
• The PawlyLife website and legal pages, including this page
• Any related services, features, or communications we provide

This Policy does not apply to third-party websites, services, or applications that may be linked from within the App. We encourage you to review the privacy policies of any third-party services you use.

Information We Collect

3.1 Information You Provide Directly

• Account information: Your email address and a password of your choosing when you register. If you sign in using Apple Sign-In or Google Sign-In, we receive your name and email address from those providers.
• Pet profile information: Pet name, species (dog or cat), breed, date of birth, weight, and an optional photo — all entered by you.
• Medication data: Prescription name, dosage, frequency, start and end dates, prescribing veterinarian name, and any personal notes you add.
• Dose logs: Date, time, and status (given, skipped, or late) of each logged dose, plus any free-text notes you add per entry.
• Refill records: Pill/dose counts you enter and refill dates you log.
• Weight logs: Weight entries with date, unit (lbs or kg), and optional notes.
• Veterinarian contact information: Practice name, veterinarian name, phone number, address, email, website, and any personal notes — entered by you.
• Support communications: Any messages you send to us via email or in-app support.

3.2 Information Collected Automatically

• Usage analytics: Anonymous, aggregated data about which features are used and how frequently (e.g., how many times the medication log screen is opened). This data is collected in a form that cannot be linked back to you individually.
• Device information: Device type, operating system version, and app version — used for technical support and to ensure compatibility.
• Crash reports: If the App crashes, an automated crash report may be sent that includes device and app state information. These reports do not include your personal data or pet health records.

3.3 Information We Do Not Collect

• Payment or financial information (handled entirely by Apple or Google)
• Precise GPS or real-time location data
• Contacts from your phone's address book
• Data from other apps on your device
• Biometric data of any kind

How We Use Your Information

We use the information we collect for the following purposes:

• To provide and operate the App: Creating and managing your account, enabling all core features including medication logging, reminders, weight tracking, and vet contact storage.
• To deliver notifications: Sending push notifications for medication dose reminders and refill alerts that you have configured. You may disable notifications at any time through your device settings.
• To sync your data: Synchronizing your pet health records securely across your devices so your data is available wherever you use the App.
• To generate PDF exports: Compiling your selected pet health data into a downloadable PDF report when you request it.
• To sync with your calendar: Adding events to your calendar application when you authorize this integration.
• To improve the App: Using aggregated, anonymous analytics to understand which features are most useful and to guide future development decisions.
• To provide customer support: Responding to your questions, bug reports, and feedback.
• To ensure security: Detecting and preventing fraudulent activity, unauthorized access, or abuse.
• To comply with legal obligations: Meeting applicable legal, regulatory, or law enforcement requirements.

We do not use your pet health data for advertising targeting, profiling, or any purpose other than providing the services described above.

Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, our legal basis for processing your personal data is:

• Contract performance: Processing necessary to provide the App's services to you under our Terms of Use.
• Legitimate interests: Processing for analytics, security, and improving the App, where these interests are not overridden by your rights.
• Consent: For optional features such as calendar integration and push notifications, where we ask for your explicit permission.
• Legal obligation: Where required by applicable law.

Data Sharing & Disclosure

We do not sell your personal data. We do not share your pet health information with advertisers, data brokers, or marketing companies.

We may share your information only in the following limited circumstances:

• Service providers: Trusted third-party vendors who help us operate the App (e.g., cloud hosting, push notification delivery). These providers are contractually obligated to use your data only for the purpose of providing services to us and are prohibited from using it for their own purposes.
• Legal requirements: If required by law, court order, or governmental authority, or to protect the rights, safety, or property of PawlyLife, its users, or the public.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of our assets, your information may be transferred as part of that transaction. We will notify you via email or in-app notice before your data is transferred and becomes subject to a different privacy policy.
• With your consent: For any other purpose with your explicit prior consent.

Third-Party Services

PawlyLife integrates with the following categories of third-party services:

• Cloud infrastructure & authentication: Used for secure data storage, account management, and syncing across devices. Data is stored encrypted at rest and in transit.
• Push notification services: Used to deliver medication reminders and refill alerts to your device. These services receive only a device token and notification content — no personal health data.
• Analytics: Anonymous, aggregated usage data only. We use analytics to understand which features are used and to improve the App. No personally identifiable information is included in analytics data.
• Crash reporting: Used to identify and fix technical errors. Crash reports do not include personal data or pet health records.
• Apple Sign-In / Google Sign-In: If you choose these login options, the respective provider shares your name and email address with us to create your account. Your use of these services is also subject to Apple's and Google's privacy policies.

Advertising (Free Tier)

The free version of PawlyLife displays limited, non-intrusive banner advertisements served by a third-party advertising network (such as Google AdMob).

• Ads are displayed only on non-critical screens. Ads will never appear during active medication logging flows, reminder interactions, or other time-sensitive actions.
• The ad network may use anonymous advertising identifiers (such as Apple's IDFA or Google's Advertising ID) to serve contextually relevant ads. These identifiers are not linked to your personal data or your pet's health information.
• You may limit ad tracking through your device's privacy settings (iOS: Settings → Privacy & Security → Tracking; Android: Settings → Privacy → Ads).
• Upgrading to PawlyLife Premium removes all advertisements entirely.

We do not share your personal data or pet health records with our advertising partners.

Calendar Integration

PawlyLife offers optional integration with Apple Calendar (via EventKit) and Google Calendar (via OAuth 2.0). If you choose to enable this feature:

• You will be asked to grant explicit permission before the App accesses your calendar.
• We write only the events you have approved — medication dose reminders and refill alerts — to your calendar.
• We do not read, access, or store any of your existing calendar events.
• You may revoke calendar access at any time through your device settings.
• Event titles are designed to be discreet and do not include sensitive health details (in case your calendar is shared with others).

Data Storage & Security

We take the security of your data seriously and implement the following measures:

• Encryption in transit: All data transmitted between the App and our servers is encrypted using TLS (Transport Layer Security).
• Encryption at rest: Your data is encrypted when stored on our servers and on your device using your device's built-in security features.
• Access controls: Access to user data on our backend is restricted to authorized personnel only and is subject to strict access control policies.
• Secure authentication: Passwords are stored using industry-standard hashing. We support Apple Sign-In and Google Sign-In as secure login alternatives.

While we implement these security measures, no system is completely immune to security risks. We encourage you to use a strong, unique password and to keep your device's operating system up to date.

In the event of a data breach that affects your personal information, we will notify you as required by applicable law.

Data Retention

We retain your personal data for as long as your account is active or as needed to provide our services.

• Active accounts: Your data is retained while your account remains active.
• Account deletion: When you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal or compliance purposes.
• Inactive accounts: Accounts with no activity for 36 consecutive months may be subject to deletion after reasonable notice.
• Backup retention: Deleted data may persist in encrypted backups for up to 90 days before being permanently purged from all systems.

Children's Privacy

PawlyLife is not directed at children under the age of 13, and we do not knowingly collect personal information from children under 13. If you are under 13, please do not use the App or provide any information to us.

If we become aware that we have inadvertently collected personal information from a child under 13 without verifiable parental consent, we will take steps to delete that information as promptly as possible.

If you believe we may have collected information from a child under 13, please contact us immediately at pawlycaresupport@gmail.com.

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Right to access: Request a copy of the personal data we hold about you.
• Right to correction: Request correction of inaccurate or incomplete data.
• Right to deletion: Request deletion of your account and all associated personal data ("right to be forgotten").
• Right to data portability: Export your pet health data using the PDF export feature in the App, or request a machine-readable copy by contacting us.
• Right to restrict processing: Request that we limit how we use your data in certain circumstances.
• Right to object: Object to processing based on legitimate interests.
• Right to withdraw consent: Withdraw consent for optional features (such as calendar sync or push notifications) at any time through your device settings.

To exercise any of these rights, contact us at pawlycaresupport@gmail.com. We will respond to verified requests within 30 days. We may need to verify your identity before processing your request.

California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to know: The right to know what personal information we collect, use, disclose, and sell.
• Right to delete: The right to request deletion of your personal information, subject to certain exceptions.
• Right to opt-out: The right to opt out of the sale or sharing of your personal information. We do not sell or share your personal information.
• Right to non-discrimination: The right not to be discriminated against for exercising your privacy rights.
• Right to correct: The right to correct inaccurate personal information.
• Right to limit use of sensitive personal information: The right to limit use of sensitive personal information to what is necessary to perform the services.

To exercise your California privacy rights, contact us at pawlycaresupport@gmail.com with the subject line "California Privacy Request."

International Users

PawlyLife is operated from the United States. If you are accessing the App from outside the United States, your data may be transferred to, stored, and processed in the United States or other countries where our service providers operate.

By using the App, you acknowledge that your information may be transferred to and processed in countries that may have different data protection laws than your country of residence.

For users in the European Economic Area (EEA) or United Kingdom, we rely on appropriate safeguards (such as Standard Contractual Clauses) for international data transfers where required.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons.

When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Notify you via a prominent in-app notice and/or email before the changes take effect

Your continued use of the App after the effective date of any updated Privacy Policy constitutes your acceptance of the changes. If you do not agree with the updated policy, you must discontinue use of the App and may request deletion of your account.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: pawlycaresupport@gmail.com
Subject line for data requests: "Privacy Request — [your name]"

We aim to respond to all inquiries within 5 business days and to complete data requests within 30 days.