This policy applies to the Pat Pet Core mobile app, the websites at patpetcore.com and its subdomains, the web platform at app.patpetcore.com, and the partner tools for vet clinics, breeders and rescue organisations (together, the Services). The Services are operated by Pocket Canopy Pty Ltd of Launceston TAS, Australia (we, us).
We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth) as if they applied to us, the UK GDPR where you are in the United Kingdom, the Privacy Act 2020 (NZ) where you are in New Zealand, and the Personal Data (Privacy) Ordinance where you are in Hong Kong.
1. What we collect
Account information. Email address, display name, sign-in identity (email, Apple or Google), region, language and unit preferences, and the date you created the account.
Pet and care records. Everything you or your household enter about your pets: names, species, breed, date of birth, microchip and insurance details, daily logs (meals, water, toilet, walks, weight), medications and reminders, vaccinations and parasite treatments, documents you scan or upload (for example vaccination certificates, lab results and invoices), photos and memories, expenses, and notes. Records show who in your household created them.
Household and organisation information. Who is in your household, their permissions per pet, invite codes, and, for partner organisations, the organisation’s name, registration numbers, staff and verification evidence.
Public page and lost & found information. The fields you choose to show on a QR tag page, care card or buyer page; messages, photos and the approximate location a finder chooses to share when they scan a tag.
Location. Your approximate location when you search the vet directory or use lost & found, only while you use those features. Locations attached to found reports are rounded before they are stored.
Purchases. Your subscription status, plan, expiry date and the store or payment provider it came from, plus provider transaction identifiers. We do not receive your card number. From 2027, web subscriptions are processed by Stripe.
Device and usage information. App version, device type and operating system, push notification tokens, crash reports, and product analytics events (screens viewed, features used). Analytics events use a pseudonymous identifier and never include free-text health notes or photos.
Communications. Messages you send to support or through community and messaging features, and partner-interest or newsletter forms on the website.
Optional contributions. If you opt in, anonymised stool photos you contribute to improve the on-device stool-scale model. This is off by default.
Phone permissions
- Camera and photos: to scan documents and add photos. Only the photos you choose are uploaded.
- Calendar (read/write): only if you turn on calendar export. We write reminder titles, times and the pet’s name to the calendar you choose. We do not read your other calendar events or export notes or photos.
- Location: only while using vet search or lost & found.
- Notifications: for reminders, household activity, found reports and subscription status.
2. Why we use it
We use personal information to provide the Services (including syncing records across your household’s devices), keep them secure and prevent abuse, process subscriptions and codes, send transactional emails and notifications, provide support, comply with the law, and understand how the Services are used so we can improve them.
Where the UK GDPR applies, our legal bases are performance of a contract (providing the Services), legitimate interests (security, abuse prevention, product improvement), consent (marketing, optional contributions, location) and legal obligation.
We do not use your records to make automated decisions with legal or similarly significant effects. Health-reference content shown in the app (for example triage guidance and vaccine schedules) is general information reviewed by a veterinarian and is not a diagnosis; see the medical disclaimer.
3. Who we share it with
Your household and people you authorise. Household members see the pets and records you give them access to. Sitters with a care card, finders who scan a tag, buyers with a buyer page and clinics you authorise see only the fields you chose to share.
Service providers (processors). We use these providers to run the Services:
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database, authentication, file storage, serverless functions | Australia (Sydney region) |
| Cloudflare | Website hosting, content delivery, bot protection (Turnstile), short links | Global edge network; data in transit |
| Apple and Google | App distribution, in-app subscriptions, push notification delivery, sign-in | United States and global |
| Stripe (from 2027) | Web subscriptions and invoices | United States, Australia |
| Resend | Transactional email and newsletters | United States |
| Sentry | Crash and error reporting | European Union |
| PostHog | Product analytics (pseudonymous) | European Union |
Legal and safety. We may disclose information where required by law, to respond to lawful requests, to enforce our terms, or to protect the safety of a person or animal.
Business transfers. If we sell or transfer the business, personal information may be transferred to the new operator under this policy.
We do not sell personal information and we do not share it with advertisers.
4. Overseas disclosure
Your records are stored in Australia. Some providers listed above process limited data outside Australia (the United States for email and payments, the European Union for error reporting and analytics, and Apple’s and Google’s global infrastructure for notifications and purchases). We use providers that commit to appropriate safeguards, including standard contractual clauses where required.
5. Security
Records are protected by row-level security so that each person can only read what they are authorised to. Photos and documents are stored in private buckets and served through links that expire after five minutes. Traffic is encrypted in transit. Administrative access is restricted, logged and protected by multi-factor authentication. No system is perfectly secure; if a data breach is likely to cause serious harm we will notify you and the relevant regulator as required by the Notifiable Data Breaches scheme, the UK GDPR (72 hours) and other applicable laws.
6. Retention and deletion
- We keep your information while your account is active.
- Deleting your account in the app removes your profile, your pets, records, reminders, documents, photos and memories, and your sign-in identity immediately. Records you added to another person’s household stay with that household with your name removed. A deletion receipt is kept for 7 days and then removed. Aggregated statistics that cannot identify you are retained.
- Requesting deletion on the website (for people who no longer have the app) is completed within 30 days of confirmation.
- Found-report messages are kept for 90 days unless you delete them earlier.
- Backups are rotated within 30 days.
- We keep transaction records for as long as tax and consumer law require (generally 7 years in Australia).
7. Your rights
You can access, correct, export and delete your information from the app or by emailing privacy@patpetcore.com. You can withdraw consent to marketing at any time using the unsubscribe link or in Settings. We respond within 30 days (one month under the UK GDPR, extendable where permitted).
If you are not satisfied with our response you can complain to the Office of the Australian Information Commissioner (oaic.gov.au), the UK Information Commissioner’s Office (ico.org.uk), the Office of the Privacy Commissioner New Zealand (privacy.org.nz) or the Hong Kong Privacy Commissioner for Personal Data (pcpd.org.hk).
United Kingdom. [PLACEHOLDER: UK GDPR Article 27 representative name and address, if required.]
Hong Kong. At sign-up we show a Personal Information Collection Statement. Direct marketing (newsletter and promotional notifications) is only sent with your explicit, separate opt-in, which you can withdraw at any time free of charge.
8. Children
The Services are for people aged 16 and over. Paid plans and public listings require you to be 18 or over. We do not knowingly collect information from children under 16; if you believe we have, contact privacy@patpetcore.com and we will delete it.
9. Cookies and analytics
The website uses cookieless analytics (Cloudflare Web Analytics) and stores your region and language preference in your browser. See the cookie policy. The app’s product analytics can be turned off in Settings → Privacy.
10. Changes
We will post changes here with a new version date and, for material changes, tell you in the app or by email before they take effect.
11. Contact
Privacy Officer, Pocket Canopy Pty Ltd — privacy@patpetcore.com — Launceston TAS, Australia.
查詢
Pocket Canopy Pty Ltd · privacy@patpetcore.com · support@patpetcore.com