Privacy Policy

1. Data we collect

We collect the following categories of information:

• Account data — your name, email address, and password (stored hashed).
• Pet & care data — the pets you create and everything you record about them: health, diet, training, reminders, journal entries, documents, expenses, and photos.
• Household & sharing data — the people you invite to a pet and their roles, and caretaker sessions.
• AI chat data — messages you exchange with Pilot, our AI copilot, and the actions it takes on your behalf.
• Billing data — subscription status and history. Card details are handled by our payment processor (Stripe) and are never stored on our servers.
• Technical data — device, log, and basic usage information needed to operate and secure the Service.

2. How we use your data

• To provide, maintain, and improve the Service.
• To power Pilot's AI guidance and chat-driven logging.
• To send reminders, digests, and service-related notifications you enable.
• To process subscriptions and prevent fraud and abuse.
• To comply with legal obligations.

PawPilot provides general care information and is not a substitute for professional veterinary care. We do not use your data to make medical decisions for you.

3. AI processing

To generate Pilot's responses, relevant chat content and pet context may be sent to our AI model providers under contractual terms that prohibit using your data to train their general models. Pilot can take actions (like logging a vaccination) only within your own records.

4. How we share data

We do not sell your personal data. We share it only:

• With people you explicitly invite to a shared pet or caretaker session.
• With service providers (hosting, database, AI model, payment, email) acting on our behalf under confidentiality obligations.
• When required by law, or to protect the rights, safety, and security of users and the public.
• In connection with a merger, acquisition, or asset sale, subject to this policy.

5. Your rights

Depending on where you live (including under the EU/UK GDPR and the CCPA), you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing.

You can exercise the core rights yourself, at any time, from your Account page:

• Export — download a complete JSON copy of your data.
• Delete — permanently erase your account and the data you own.

To make any other request, contact us at privacy@pawpilot.ai.

6. Data retention

We keep your data for as long as your account is active. When you delete your account, we delete the data you own promptly, except where we must retain limited records to comply with legal, tax, or security obligations. Backups are purged on a rolling schedule.

7. Security

We use industry-standard measures — encryption in transit, row-level access controls, and least-privilege access — to protect your data. No system is perfectly secure, so we cannot guarantee absolute security.

8. Children

The Service is not directed to children under 13 (or the minimum age in your jurisdiction), and we do not knowingly collect their data.

9. International transfers

Your data may be processed in countries other than your own. Where required, we rely on appropriate safeguards such as standard contractual clauses.

10. Changes to this policy

We may update this policy from time to time. Material changes will be notified in-app or by email. Continued use of the Service after an update means you accept the revised policy.

11. Contact

Questions about privacy? Email privacy@pawpilot.ai.