Legal

Privacy Policy

Effective July 2026

Pawdex keeps your pets' medical records in one place. Those records are sensitive, and so is your trust. This policy explains what we collect, why, who we share it with (a short list of infrastructure providers, and no one else), and the rights you have over your data. We wrote it to be read, not to be survived.

Notice at collection

When you use Pawdex we collect the following categories of personal information, for the purposes described:

• Account identifiers such as your name, email address, and household details. We use these to create and secure your account, sign you in, and communicate with you about the service.
• Pet medical documents and recordsthat you upload, forward by email, or photograph (vaccine certificates, SOAP notes, lab reports, invoices, and the structured facts we extract from them). We use these to build and organize your pet's medical history, keep it searchable, and surface what is due or overdue. This can include information about you where it appears in those documents (for example, an owner name or contact detail on a vet record).
• Usage and device data such as pages viewed, actions taken, approximate performance timings, and basic device or browser information. We use this to operate the service, fix problems, and understand which features are worth building.

We collect this information directly from you, from the documents you provide, and, in the case of usage data, automatically as you use the product. We do not buy personal information about you from data brokers.

How we use your information

We use your information to provide Pawdex: to store and organize your records, extract and cite the facts inside them, send reminders and transactional email you ask for, respond to support requests, keep the service secure, and improve how it works. We only take outbound actions on your behalf (such as emailing a vet clinic to request records) with your explicit, per-feature consent, and you can withdraw that consent at any time.

We do not sell or share your personal information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under California law. We have not done so in the past and we have no plans to. There is no advertising network inside Pawdex.

Because we do not sell or share your personal information, a Global Privacy Control (GPC) signal has nothing to opt you out of. We honor GPC as a matter of course: even if your browser sends one, our answer is the same, because selling and sharing are simply not part of how Pawdex works.

De-identified research (separate opt-in, off by default)

Pawdex is building an optional program to contribute de-identified, aggregate records to veterinary and animal-health research. This is entirely separate from using the product, and here is exactly how it works:

• Off by default. You are never enrolled automatically. Nothing is contributed unless you make a distinct, explicit choice to participate.
• Revocable. You can turn participation off at any time, going forward, from your account.
• De-identified. Before any data is used for research, direct identifiers (such as your name, email, and contact details) are stripped. Contributions are aggregate and de-identified.
• Never re-identified. We publicly commit that we will not attempt to re-identify de-identified data, and we will not permit others to do so. We maintain de-identified data as de-identified. This commitment is a condition of treating the data as de-identified under California law, and we hold ourselves to it.

Service providers

We rely on a small set of infrastructure providers to run Pawdex. They process personal information only to provide services to us, under contracts that prohibit using it for their own purposes. They are service providers, not parties we sell or share data with:

• Vercel — application hosting and delivery.
• Supabase — database, authentication, and document storage.
• OpenRouter — access to the AI models that read and structure your documents.
• Resend — sending and receiving email (reminders, transactional messages, and forwarded vet records).

Data retention

We keep your account information and records for as long as your account is active, so your pet's history stays intact and available to you. You can delete individual records at any time, and you can delete your account, which removes your personal information and documents from the active service. We may retain limited information where the law requires it, and backups are purged on a rolling schedule. De-identified data, once de-identified, is not subject to these deletion mechanics because it no longer identifies you.

Your California privacy rights

If you are a California resident, the CCPA/CPRA gives you the right to:

• Know what personal information we have collected about you and how we use it.
• Delete the personal information we hold about you, subject to legal exceptions.
• Correct inaccurate personal information.
• Opt out of the sale or sharing of personal information. We do not sell or share, so there is nothing to opt out of, but the right stands.
• Non-discrimination. We will never charge you a different price or give you a lesser service for exercising these rights.

You can exercise any of these rights by emailing [email protected]. You may also use an authorized agent to make a request on your behalf; we will ask for proof of the agent's authorization and may need to verify your identity directly. We will not discriminate against you for exercising any of these rights.

Children

Pawdex is a product for pet owners and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, email [email protected] and we will delete it.

Changes to this policy

If we make a material change to this policy, we will update the effective date above and, where appropriate, notify you in the product or by email. Continuing to use Pawdex after a change means you accept the updated policy.

Contact

Questions, requests, or concerns about privacy go to [email protected]. We read every one.