Privacy policy
PawTabs is a pet care log. It holds the things you record about your animals, and the account that lets you and the people you share with see the same record.
Last updated 5 September 2026
The short version.
We collect what you type into the app and the account details needed to sign you in. There is no advertising in PawTabs, no analytics or tracking software of any kind, and your data is never sold or shared for marketing. The only people who can see your pet’s record are you and whoever you have invited to share that pet.
Who we are
PawTabs is the data controller for the information described here. You can reach us at privacy@pawtabs.com about anything on this page.
What we collect
Your account
- Your email address, used to sign in, to send password resets, and to contact you about the app.
- Your password, stored only as a salted hash — we cannot read it.
- A display name, so the other people in your household know who logged what.
What you record about your pets
- Pet profiles: name, dog or cat, breed, date of birth, photo, and whether they are diabetic.
- Log entries: what happened, when, and any note you add — meals, walks, potty breaks, litter, yard time, medication doses, care and health events.
- Health records: medications and their schedules, weight, and readings such as blood glucose.
- Documents you upload, such as vaccine certificates, insurance cards and vet records.
- Photos you add to a pet’s journal or profile.
- Reminders you set, and who they should notify.
Walks and location
A timed walk records only its duration. If you start a GPS walk, the app records the route while that walk is running, so it can draw the map afterwards and show the weather where you are.
- Location is collected only during an active walk, and only while the app is open. PawTabs does not track your location in the background or when no walk is running.
- You are asked for location permission the first time, and can refuse or revoke it — timed walks still work without it.
- The route is stored with that walk, and deleted when you delete the walk.
Notifications
If you turn notifications on, we store a push token for that device — an identifier issued by Apple or Google that lets a message reach your phone — along with your notification preferences. If you never turn notifications on, no token is stored.
What stays on your phone
Some things never leave your device and never reach our servers: your theme and layout choice, which pet you had selected, whether you have seen the tutorial, and any logs waiting in the offline queue until the app can send them.
What we do not collect
- No analytics, no usage tracking, no advertising identifiers, no third-party trackers — the app contains no such software.
- No contacts, no calendar, no microphone, no browsing history.
- No payment details. If a paid plan launches, purchases will go through Google Play or the App Store, and card details will go to them and never to us.
Why we hold it
| What | Why | Lawful basis |
|---|---|---|
| Email, password, display name | To create your account, sign you in, and let your household see who logged what | Performance of a contract |
| Pet profiles, logs, health records, photos, documents | This is the service — it is the record you asked the app to keep | Performance of a contract |
| Walk routes | To map the walk you chose to record with GPS | Consent, given by granting location permission |
| Push token and preferences | To deliver the notifications you turned on | Consent, given by enabling notifications |
| Support emails | To answer you | Legitimate interest |
Who else sees it
The people you share with
Inviting someone to a pet gives them the whole record for that pet — its profile, every log entry, health records, documents and photos — and shows them your display name against the entries you make. Removing them from the household ends that access. Sharing is the point of the app, so it is worth being deliberate about who you invite.
The services we run on
We use a small number of providers to run PawTabs. They process data on our instructions and are not permitted to use it for their own purposes.
| Provider | What it does | What it receives |
|---|---|---|
| Supabase | Hosts the database, sign-in, and the files you upload | Your account and everything you record |
| Expo | Sends push notifications and delivers app updates | Your push token and the text of the notification |
| Google (FCM) and Apple (APNs) | Deliver notifications to Android and iPhone | Your push token and the text of the notification |
| Open-Meteo | Supplies the weather shown during a walk | Approximate coordinates only — no account, no identifier |
| OpenFreeMap | Supplies the map background on walk screens | Which map tiles your device asks for |
| Google Play and the App Store | Distribute the app | Whatever their own policies describe — we receive no personal data from them |
Nobody else
We do not sell your data, do not share it with advertisers, and do not hand it to anyone else except where the law requires it.
Where it is stored
Data is held on Supabase infrastructure and may be processed in the United States and other countries where our providers operate. Where data leaves the UK or EEA, it is transferred under the standard contractual clauses those providers have in place.
How long we keep it
- Your pet’s record is kept for as long as your account exists — that is the point of a health record.
- Anything you delete in the app — a log, a photo, a document, a pet — is removed from our database.
- When you delete your account, everything you own goes with it. See deleting your account.
- Support emails are kept for up to two years.
Your rights
Depending on where you live, you have some or all of the following rights over your data. Email privacy@pawtabs.com from the address on your account and we will act on it within 30 days.
- Access — a copy of what we hold about you.
- Correction — most of it you can edit in the app directly.
- Deletion — see deleting your account.
- Portability — your data in a machine-readable file.
- Objection and restriction — ask us to stop or limit a particular use.
- Withdrawing consent — turn off notifications, or revoke location permission in your phone’s settings, at any time.
If you are in the UK or EEA and think we have got this wrong, you can complain to your national data protection authority.
Children
PawTabs is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has created an account, email us and we will remove it.
Security
Traffic is encrypted in transit. Passwords are hashed, never stored in readable form. Access to a pet’s record is enforced at the database level, so an account that has not been invited to a pet cannot read it even if the app asked. No system is perfect, but this is the standard we hold ourselves to.
Changes to this policy
If this policy changes in a way that matters, we will update the date at the top and, for anything significant, tell you in the app. The current version always lives at https://pawtabs.com/privacy/.
Contact
privacy@pawtabs.com for anything on this page, or the contact page for everything else.