Privacy Policy

1. Who is responsible

Petnote is operated by Codezun, established in Honduras, which is the data controller for the personal data described here. Write to codezun@gmail.com about anything on this page. It is the only channel; there is no contact form.

2. What we collect

Account details

Your username, email address and password. The password is never stored in a form we can read — authentication is handled by Supabase, which stores a one-way hash. Your email address lives in the authentication system rather than in our own tables.

Owner profile

What you choose to add: your name, phone number, an emergency contact's name and number, and your veterinarian's name, clinic and number. All of it is optional, and all of it exists so that Emergency Mode has something to show whoever finds your pet.

Pet records

Names, species, breed, sex, date of birth, weight history, microchip numbers, photographs, allergies, medications, vaccination and deworming records, medical entries and free-text notes, plus any documents you upload. This is information about an animal, not about a person — but it sits alongside your contact details, so we treat the whole record with the same care.

Subscription details

Your plan, its status, the current billing period and the identifiers Paddle gives us for your subscription. We never see, receive or store your card number or bank details. Those go to Paddle directly and never touch our systems.

Technical data

Ordinary server and security logs generated by our hosting provider — IP address, browser user agent, the page requested, and the time — kept briefly to keep the service running and to investigate abuse. We do not build profiles from them.

There is no analytics package, no advertising pixel and no third-party tracker anywhere in Petnote. See the Cookie Policy.

3. Why we hold it, and on what basis

• To provide the service — storing your records, showing them back to you, generating QR codes, publishing Emergency Mode when you turn it on. Legal basis: performance of our contract with you.
• To send you reminders about vaccinations and treatments falling due, which you can switch off. Legal basis: performance of the contract; consent where local law requires it.
• To send transactional email — password resets, address confirmations, billing notices. Legal basis: performance of the contract.
• To take payment and keep your plan correct. Legal basis: performance of the contract, and our legal obligation to keep tax records.
• To keep the service secure — rate limiting, abuse investigation, error logs. Legal basis: our legitimate interest in a service that is not being attacked, and yours in an account nobody else can reach.

We do not use your data for automated decision-making or profiling, and we do not use it to train machine-learning models.

4. Emergency Mode is publication, by design

The published page contains a fixed list and nothing else:

• the pet's name, photograph, species and breed;
• allergies and current medications;
• your name and phone number, your emergency contact, and your veterinarian's details — whichever of these you have filled in.

Medical history, weight entries, uploaded documents and notes are never exposed there. The public page reads through a restricted database function that can only return the fields above; it cannot reach the rest of your record.

We ask search engines not to index these pages and they generally comply, but an unlisted URL is not a secret one: a printed tag can be photographed and a link can be forwarded. You can switch the page off, or issue a new code that instantly retires the old one, at any time from the pet's Emergency Mode screen.

5. Who else processes it

We use a small number of providers to run the service. They process data on our instructions, under contract, and for no purpose of their own:

• Supabase — database, authentication and file storage. Everything you store lives here.
• Vercel — application hosting, serving the site and its server logs.
• Paddle — payments, as merchant of record. Paddle is an independent controller of the payment data you give it, under its own privacy policy, and it — not us — holds your card details.
• Resend — delivery of transactional and reminder email. It handles your email address and the contents of those messages.

Beyond these, we disclose personal data only where the law compels it, where it is necessary to establish or defend a legal claim, or as part of a merger or sale of the business — in which case you would be told before your data moved.

We do not sell personal data, and we never have.

6. International transfers

Our providers operate globally and your data may be processed outside the country where you live, including in the United States. Where such a transfer is subject to European or United Kingdom data protection law, it relies on the safeguards those providers offer — typically Standard Contractual Clauses within their data processing agreements.

7. How it is protected

• Row level security on every table. The database itself enforces that a record is reachable only by the account that owns the pet it belongs to. It is not a check in application code that could be forgotten on one screen.
• Uploaded documents are private. They are served only through links that expire after sixty seconds, generated for you at the moment you ask for them.
• Pet photographs are stored in a publicly readable bucket, because the Emergency Mode page has to display one to a stranger who has no account. Anyone with the exact file URL can therefore open that photograph. Writing to the bucket is still restricted to you.
• Everything is served over HTTPS, and the site sets a strict security policy.
• Changing your email address requires your current password, so a stolen session cannot be used to take the account over.

No system is perfectly secure, and we do not claim otherwise. If a breach affects your personal data and the law requires it, we will notify you and the relevant authority within the applicable deadline.

8. How long it is kept

Your data is kept while your account exists. There is no inactivity purge — a dormant account keeps its records.

Deleting your account deletes it. Settings → Delete account removes your profile, your pets, every record under them and your stored files, immediately and irreversibly. Stored files are deleted first, deliberately: an orphaned photograph left in a public bucket could not be recovered from afterwards, whereas an account that survives a failed deletion can simply be deleted again.

Two things outlive the account. Backups roll off on their provider's own schedule over a short window rather than being erased the same instant. And records of payments are kept by us and by Paddle for as long as tax and accounting law requires, typically several years — we cannot delete those on request.

9. Your rights

Depending on where you live, you can ask us to:

• confirm what we hold about you, and give you a copy;
• correct anything inaccurate — most of it you can edit yourself in the app;
• delete it, which you can do yourself from Settings;
• export it in a portable form;
• restrict or object to certain processing;
• withdraw consent where processing rests on it, such as reminder emails.

Email codezun@gmail.com and we will respond within one month. We may need to confirm you are the account holder before acting. There is no charge for this.

If you are in the European Economic Area or the United Kingdom you also have the right to complain to your national data protection authority. We would rather you told us first, at codezun@gmail.com.

10. Children

Petnote is not intended for anyone under 18 and we do not knowingly collect data from children. If you believe a child has created an account, write to codezun@gmail.com and we will remove it.

11. Changes

We may update this policy. The date at the top changes with it, and anything that materially affects how your data is handled will be announced by email or in the app before it takes effect.