Privacy Policy

EverPet is run by Illia Pohorielov, an individual developer based in Italy. For your account and your pets' records, that is who decides how the data is handled — the data controller, in the language of the GDPR.

There is one exception worth stating plainly. For records you create about other people — a buyer's contact details, or someone you invite to family access — you are the controller and we act on your behalf. Deleting your account removes your copy of those records; it does not delete a person who independently has their own EverPet account.

Write to everpet.info@gmail.com about anything in this policy or about the data in your account.

Account data: your email address and authentication details, the display name and photo you choose (imported once from Google or Apple if you sign in that way), your language, and your device's country setting — the OS region code, not GPS or IP location, used for per-country usage counts.

Pet data you enter or upload: pet profiles, documents (photographs and PDFs), reminders, timeline entries, notes, and — for breeder accounts — litters, buyers' contact and purchase records, payments and expenses.

Device features you choose to use (breeder accounts): if you tap "Pick from contacts", the app asks for contacts access at that moment and reads only the one contact you select in the system picker; its name, email address and phone number are stored as a buyer record that you control and can edit or delete at any time. We never read, enumerate or upload your address book. If you tap "Add to calendar", the app asks for calendar access (write-only on iOS) and opens your phone's own new-event form prefilled with the date; we never read, edit or delete your calendar events and keep no record of them.

Technical data needed to run the service: device and app version, push notification tokens, crash diagnostics, and request logs. Request logs carry no personal data and no document contents — URLs are masked and bodies are never recorded.

Product analytics and crash reports, only if you opt in: these are off by default and stay off until you say yes. When you do, events are linked to your account identifier so we can tell one session from another. They never carry pet names, document names or document contents.

If you write to us: feedback you send from inside the app (including any screenshot you attach), and messages sent through the contact form on this website.

We do not buy data about you, and we do not sell or rent your data to anyone.

Running your account, your pets, your documents, the AI features and your subscription is performance of our contract with you.

Keeping financial records and the security audit log is a legal obligation.

Security, abuse prevention and keeping the service working are our legitimate interests.

Product analytics and crash telemetry rest on your consent, which you can withdraw at any time in the app.

Documents are only sent to our AI provider when you explicitly choose to parse one. Uploading and storing a document never triggers AI processing on its own.

Our provider is Anthropic. What we send is the document itself and your pet's name, so the extraction can tell whose record it belongs to. A second pass over the extracted medical fields produces the plain-language insights you see in the app. Nothing else from your account is sent.

The AI extracts and explains what a document says. A server-side guardrail checks every response so it does not diagnose or give medical advice. Extraction results are only written into your pet's record after you review the suggestions and commit them. If a parse fails, the document remains usable and the credit charge is returned automatically.

Our observability tooling records only identifiers, token counts and cost — never your prompts, your document contents or the extracted medical data.

Family access: people you invite see only what you scope to them — per pet and per category (medical, documents, reminders, timeline), as Viewer or Editor. You can change or revoke access at any time, and members are notified when their own access changes.

Transfers: when a breeder sends a transfer pack, the receiving owner must be signed into the app and actively claim it. What travels is what the sender included: the pet record, the litter snapshot and the selected documents.

Public pages generated by the app: a breeder's kennel business-card page and a litter share page contain only what the breeder publishes. They carry no buyer data, and prices on a litter page are hidden unless the breeder turns them on.

Each of these handles data only on our instructions, and only for the purpose listed.

Anthropic — AI parsing and insights, as described above. Cloudflare R2 — file storage for your documents and photos. Neon — the main database. Railway — hosting for our servers. Upstash — the background job queue, which carries references rather than content. Gotenberg — converting uploaded office documents to PDF. Resend — transactional email, and messages from this website's contact form. Expo, with Apple and Google push services — delivering notifications to your device. Sentry — crash reports. PostHog — product analytics, only if you opted in. Langfuse — AI cost and performance metrics, with no content. RevenueCat — subscription state, keyed to your account identifier. Apple and Google — the stores that take the payment.

This website additionally uses Google Analytics, loaded only after you accept analytics cookies in the banner, and never otherwise.

We are based in Italy and our database and servers run in the European Union. Several of the providers above are based in the United States, so some data reaches them there. Those transfers rely on the European Commission's standard contractual clauses, which form part of our agreement with each of them.

Your pet data is retained while your account exists, because that is the point of a record. Storage capacity depends on your plan: 700 MB on Free, 2 GB on Starter, 5 GB on Pro, 10 GB on Breeder.

Downgrading a plan never deletes data: items over the new limits are locked and restore when you upgrade again.

Everything else has a shorter life. Document-parse job payloads are trimmed after about 90 days, keeping only the billing record. Delivered notifications are kept about 180 days. A generated export expires after 7 days. The security audit log is kept for a year. Financial records are kept as long as the law requires, and are anonymized once your account is gone.

Every plan, including Free, has a complete self-serve ZIP export: the original documents, the structured data and a manifest. Breeder financial records are included on every plan too — an access request is not something we put behind a paywall. Paid plans add a summary PDF alongside the same archive. Requesting an export does not require contacting us.

Account deletion starts a grace period of about 30 days, and the exact purge date is shown to you before you confirm. Signing back in during that period cancels the deletion.

You can start it from inside the app (Settings → Delete account) or, if you can no longer sign in, from https://everpet.app/en/legal/delete-account — that page emails a one-hour, single-use confirmation link to the account's address, and nothing is deleted until you open it and confirm.

After the grace period the purge is real: your pets, documents, files, reminders, litters, buyers, notifications and tokens are permanently deleted from the database and from file storage, with retry logic so it completes.

Two things survive on purpose, and neither identifies you any more. Your account row is anonymized rather than removed, and the billing and audit records attached to it are kept for as long as the law requires. Records you transferred to another owner stay with that owner, because they are now their pet's record. Deleted data also ages out of our disaster-recovery backups within about 30 days.

Data is encrypted in transit and at rest. Two-factor secrets and transfer share tokens carry a second layer of encryption on top of that. App Lock — an optional biometric gate in front of the app — is available and off by default.

We do not hold security certifications we have not earned, and this policy contains no claim we cannot support.

Depending on where you live you may have rights to access, correct, export or delete your personal data, to restrict or object to certain processing, and to withdraw a consent you gave. Export and deletion are self-serve in the app; for anything else, write to everpet.info@gmail.com and a person will answer.

If you think we have handled your data badly, you can complain to a data protection authority — in our case the Italian Garante per la protezione dei dati personali, or the authority where you live.

We do not make automated decisions that have legal effects for you. The AI suggests; you review and decide what is written into a record.

EverPet is for adults and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has created an account, write to us and we will remove it.

The website and the app are separate systems with no shared accounts or database.

If you accept analytics cookies in the banner, the site loads Google Tag Manager, and Tag Manager loads the measurement tools configured in it — today that is Google Analytics, which records page views. Decline and none of it loads: no tag, no cookie, no request. You can change your mind at any time from the Cookie settings link in the footer.

If you write through the contact form, we store your name, email address, message and language so we can reply, and the message is emailed to us through Resend. Write to us if you want that record deleted.

If we change something that matters — particularly anything about AI processing, sharing or retention — we will say what changed and when, not only bump the date at the top.

Questions about this policy, or about the data in your account: everpet.info@gmail.com. You can also use the in-app Feedback screen, or the form on our Contact page.