Security & privacy
Your pet's data, handled like it matters.
This page collects every claim we're willing to make, in plain words: what the AI provider may do with a document, why the AI can never diagnose, how you take your data out and what deletion actually deletes. Nothing here is a badge or a slogan — if it isn't on this page, we don't claim it.
01
AI data handling
Documents processed by the AI provider are covered by a no-training commitment with a limited 30-day retention window.
We state it that way deliberately — "zero data retention" would be the easier sentence and it would not be true. There is a retention window, it is bounded at 30 days and your documents are not used to train models. Parsing is also never automatic: a document sits in your vault untouched by the AI until you choose to spend credits on it.
02
No diagnosis, by design
A server-side guardrail checks every AI response — in every language the app speaks — so the AI never diagnoses and never gives medical advice.
This is infrastructure, not a prompt instruction we hope holds. The AI's job stops at what a document says: the drug, the dose, the dates, the value printed on a lab sheet. What that value means for your pet is your vet's judgement and the product is built so the AI cannot step into it.
Will say: "This document lists ALT above the lab's stated reference range." Will never say what that means for your pet, or what to do about it.
03
Your data is portable
A free, complete, self-serve ZIP export on every plan — original documents, structured data and a manifest. Free users export the same complete archive paid users do. Paid tiers add one artifact on top: a summary PDF. Nothing about leaving is gated.

04
Deletion is real
Account deletion runs a grace period, then a hard purge — including physical file deletion, with retry logic so it actually completes.
You're told the purge date before you confirm and the grace period exists so a change of mind is possible. After it, the files are gone from storage — not flagged, not archived.

05
Everyday protections
App Lock, if you want it
An optional biometric gate in front of the app. Available, not on by default — you decide.

No personal data in logs or analytics
Diagnostics record that something happened, not whose pet it happened to.
Downgrades soft-lock, never delete
Items over a lower tier's limits are locked and fully restore on upgrade.
See the plans →What we don't claim
No compliance certifications, no "military-grade encryption." Offline: your pet's passport is kept on your device and opens without a connection; on paid plans insurance and any pinned document do too. Everything else — adding records, AI, sharing — needs a connection.