Privacy Policy

This is a working draft. The final policy will be lawyer-reviewed before public launch. Use this for direction; don't rely on it as the legal record.

What we collect

• Account: email, name, sign-in provider sub (Apple/Google).
• Pet records: species, breed, DOB, microchip, photos, vaccine and travel documents you upload.
• Trip data: destinations, travel dates, completed checklist items.
• Device: push token, OS version, app version, IP address (transient for security).
• Payment: handled by Stripe and RevenueCat; we don't see card numbers.

Sub-processors

• Convex (database + functions)
• OpenAI (OCR — your record images are sent for processing; not used for training)
• Stripe and RevenueCat (payments)
• Lulu xPress / partnered binderies (Gold passport printing)
• Lob (downgrade-path mailings)
• Resend (transactional email)
• Cloudflare (CDN + analytics — privacy-friendly, no cookies)
• Sentry (error tracking — scrubbed of PII)
• PostHog (product analytics — events only, never raw record content)

Your rights

• Export every byte we have on you (one-tap from Profile → Privacy → Export).
• Delete your account and all associated data (one-tap, ≤ 7 days hard-delete).
• Correct inaccuracies any time.
• Opt out of analytics in Settings.

Contact

For data requests: privacy@savi.pet. We respond within 30 days as required by GDPR / CCPA.