Privacy Policy — Libtail

Effective date: 2026-11-14

Libtail (the “App”) is a health record app for dog and cat owners. It is operated by Mariusz Uziębło (“we”, “us”, “our”), who is the controller of your personal data. You can reach us at mariusz.9dev@gmail.com.

This policy explains what data the App processes, why, who helps us process it, how long we keep it and what rights you have.

In short

• You can start as a guest, without an email address. There are no passwords.
• Your records and files are stored on servers in the European Union (Frankfurt, Germany).
• A vet document is sent to Google Gemini only after you give explicit consent, and only so that it can be read. You can withdraw this consent at any time.
• No ads, no tracking, no third-party analytics. We do not sell or rent your data.
• You can delete your account and all your data in the App at any time.

Data we process

Account

• User ID. When you finish onboarding, the App creates an account with a random identifier, also for guests. A guest account has no email address.
• Email address. Only if you save your guest account or sign in. You sign in with a one-time code sent to your email; we do not use passwords.
• First name (optional), shown in the App and to people you share a pet with.
• App settings, such as language and appearance.
• Consent records. When you give or withdraw consent to AI document reading, we record the decision, the time and the version of the notice you saw.

Pet records (content you add)

• Pet profiles: name, species, breed, sex, date of birth, weight, microchip number, vet’s name, allergies, notes and a photo.
• Vet documents: photos and PDF files you add, and the entries read from them or added by hand: visits, lab results with the lab’s reference ranges, vaccinations, deworming, medications, weight, notes and reminders.
• Planned vet visits.
• Emergency card: pet details and, if you enter them, your name and phone number.
• Medications and doses (Pro): medications you enter, their schedule, the stock, and the history of given or skipped doses with who saved them and when.
• Symptom notes (Pro): the time, an optional description and an optional photo. Symptom and medication summaries are counts of your own notes; they are not an assessment of the treatment.

Vet documents can contain your own personal data, for example your name, address and phone number, and details of the clinic. We protect all records the same way, whether or not they contain your data.

Shared care

The owner of a pet can invite another person with a Libtail account by entering their email address. We use it to find their account and to email them a one-time invite code. Access is created only after that person enters the code on their account. An unused code expires after 7 days, and the owner can cancel the invite before that.

People with access to a pet see its record, the first name and email address of the other caregivers, and who saved each dose. A pet sitter has read-only access, and only until the date the owner chose. The owner can remove access at any time, and any caregiver can leave the record.

Subscriptions

Libtail Pro is bought through the App Store or Google Play. We never receive your card or payment details. Our subscription provider, RevenueCat, receives your user ID, your purchase and subscription status and, for registered accounts, your email address so that we can find your purchase when you contact support. We store your current Pro status with your account.

Error reports

When something goes wrong, the App sends an error report: a description of the error with technical details (stack trace), where in the App it happened, the App version, the platform and your user ID. We use it only to find and fix problems.

Data that stays on your device

• Some data is kept on your phone so the App works offline, for example the emergency card and your settings.
• Reminders for vaccinations, visits and doses are local notifications scheduled on your phone.
• Reading a microchip number from a photo happens on your phone (Google ML Kit on-device text recognition). That photo is not sent to us.
• “Add to calendar” opens your calendar app with the visit details. Libtail does not read your calendar.
• The PDF report for your vet is created on your phone. You decide where to send it.

Permissions

The App asks for access to the camera, photos and files only when you add a photo or a document, and for notifications when you turn on reminders. You can refuse or change these permissions in your device settings; the related features then stop working.

AI document reading and your consent

We ask for your explicit consent before we send your first document. Once you agree, our server sends each photo or PDF you add to Google Gemini only to read the data for the suggested entry. Documents may contain your personal data, such as your name, address and phone number. No other data from your records is sent.

The result is only a suggestion: nothing is saved until you check and approve it. We do not use your documents to train any AI models of our own. Google processes the documents as our service provider under the paid Gemini API terms: it does not use them to train or improve its models and may keep them only for a limited time to detect abuse.

You can withdraw consent at any time in Profile → Privacy. New documents are then no longer sent, and the ones already saved stay until you delete the pet or your account. Withdrawing consent does not affect reading that happened before.

Why we process data (legal bases under the GDPR)

Purpose	Legal basis
Running your account, storing and syncing your records, reminders, shared care, the emergency card and the vet report	Performance of our agreement with you (Art. 6(1)(b))
Sending your documents to Google Gemini to read them	Your consent (Art. 6(1)(a))
Sending invite codes to the person you invite	Our agreement with you, and our legitimate interest in giving that person access securely (Art. 6(1)(f))
Pro subscriptions	Performance of our agreement with you; legal obligations for purchase records (Art. 6(1)(c))
Error reports, security and preventing abuse	Our legitimate interest in a working and safe App (Art. 6(1)(f))
Answering your messages	Our legitimate interest in providing support (Art. 6(1)(f))

Service providers

We use these providers to run the App. They process data on our behalf and only for these purposes:

• Supabase (supabase.com): sign-in, database, file storage and server functions. Your data is hosted on Amazon Web Services in Frankfurt, Germany (eu-central-1).
• Google Gemini API (ai.google.dev): reading the vet documents you add, only after your consent.
• Resend (resend.com): delivering emails, such as sign-in codes and invite codes.
• RevenueCat (revenuecat.com): managing Pro subscriptions.
• Apple and Google: app distribution and payments through the App Store and Google Play, under their own privacy policies.

We do not sell, rent or trade your personal data, and we do not share it for advertising.

Transfers outside the EEA

Your records are stored in the EU. Some providers (Google, RevenueCat, Resend and Supabase as a company) are based in the United States and may process data there. Such transfers rely on the EU-U.S. Data Privacy Framework where the provider is certified, or on the European Commission’s Standard Contractual Clauses.

How long we keep data

• Account and records: until you delete them, or until you delete your account.
• A deleted pet: its records, documents and photos are deleted with it.
• Invite codes: they expire after 7 days if unused.
• Error reports: deleted after 30 days. When you delete your account, they stop being linked to you.
• Consent records: as long as your account exists, as proof of your decisions.
• Subscription records: kept by RevenueCat, Apple and Google as their policies and the law require. On request we delete your customer record at RevenueCat.
• Backups: deleted data can remain in our hosting provider’s backups for a short time until they are overwritten.

A guest account cannot be recovered after you uninstall the App or sign out, because it has no email address. If you want its data deleted, delete the account in the App before uninstalling it, or contact us.

Deleting your account

Open Profile → Delete account in the App. This deletes your account, the pets you own with all their records, documents and photos, and other people’s access to those pets. Entries you added to someone else’s pet stay in that owner’s record, without a link to your account. Deleting the account does not cancel a subscription; cancel it in the App Store or Google Play.

More details: https://twelveappschallenge-platform.web.app/legal/a3c3c68a-25a3-47d4-ae38-0071faaa20e6/delete-account

Your rights

Under the GDPR you have the right to:

• access your data and get a copy of it,
• correct inaccurate data,
• delete your data,
• restrict processing,
• receive your data in a portable format,
• object to processing based on our legitimate interests,
• withdraw consent at any time, without affecting earlier processing.

Most of this you can do directly in the App: edit or delete pets and entries, discard documents before you approve them, withdraw AI consent in Profile → Privacy, or delete your account. For anything else, write to mariusz.9dev@gmail.com. We answer within one month.

You can also lodge a complaint with a data protection authority. In Poland this is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl). You can also contact the authority in the country where you live.

Security

Data is encrypted in transit (HTTPS). Access rules in the database let each account read only its own records and the pets shared with it. Documents and photos are kept in private file storage that only you and the people you share a pet with can open.

Children

The App is intended for adults (18+). We do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.

Changes to this policy

We may update this policy when the App or the law changes. We will change the effective date above, and we will mention significant changes in the release notes of the App in the App Store and Google Play.

Contact

Email: mariusz.9dev@gmail.com Controller: Mariusz Uziębło