Your information stays yours.

PitsyPet is an Australian veterinary triage web application operated by Andres Henao in Sydney, Australia. In this policy, “PitsyPet”, “we”, “us” and “our” refer to that service and its operator.

This policy applies when you visit PitsyPet, create an account, enter pet records, use AI triage or assistant features, subscribe to PitsyPremium, export a veterinary PDF, or contact us.

It is intended to reflect the Australian Privacy Act 1988 and Australian Privacy Principles where they apply, and the EU/EEA General Data Protection Regulation (GDPR) where PitsyPet is subject to it. PitsyPet is not a veterinary clinic and does not provide human healthcare services.

We collect information directly from you when you use the service:

• Account information: name, email address, password credential managed by Supabase Auth, optional Australian state, account plan and authentication records.
• Pet and clinical records: pet name, species, breed, age, weight, medical conditions, symptoms, medications, vet clinics and doctors, appointments, notes and follow-ups.
• Triage and assistant content: messages, extracted symptoms, risk classification, reasoning, recommendations and related technical model information.
• Billing information: subscription status, Stripe customer and subscription identifiers, renewal or cancellation date. PitsyPet never receives or stores your full card number or card security code.
• Contact information: the name, email address and message you submit through our contact form. Contact messages are emailed to the operator and are not written to the PitsyPet application database.
• Limited technical information: session cookies, IP address and request metadata used for security and rate limiting, error diagnostics, coarse device/browser data, and anonymous counts of page or feature use.

Please do not enter unnecessary information about people, particularly human medical information, government identifiers or payment card details, into pet notes or AI chats.

We use information only for the following purposes:

• create and secure your account;
• store and display the pet records you choose to keep;
• provide AI-assisted symptom extraction, triage and chat;
• generate results and vet-facing PDF exports;
• process subscriptions and provide invoices through Stripe;
• prevent abuse, enforce plan limits and keep the service reliable;
• diagnose errors, respond to support requests and comply with law.

We do not sell or rent personal information. We do not use pet records, chats or assessment results for advertising, marketing profiles, scientific studies, model training, or creation of commercial datasets. Limited anonymous event counts are used only to operate and maintain the product.

For GDPR purposes, the main lawful bases are performance of our contract with you (providing PitsyPet), legitimate interests in security and service reliability, compliance with legal obligations, and consent where we specifically ask for it. You may withdraw consent at any time without affecting earlier lawful processing.

Anthropic states that commercial API inputs and outputs are not used to train its models by default and are normally deleted from its backend within 30 days. Anthropic may retain limited material longer where required by law or to investigate abuse or usage-policy violations.

The Low, Medium or High risk result is an automated assessment about a pet. It is educational guidance, not a veterinary diagnosis, and does not make a legal or similarly significant decision about a person. You should contact a veterinarian or an emergency clinic whenever you are concerned about your pet.

We do not disclose information for anyone else's independent advertising or research. We use the following providers only as needed to operate PitsyPet:

We may also disclose information if required by Australian law, a valid court order, or where reasonably necessary to address a serious threat, fraud, abuse or security incident. We will limit any disclosure to what is legally necessary.

You can delete pet records through the product. Where a recovery option is shown, the item remains until you choose permanent deletion. From Dashboard → Account, you can permanently delete your entire account. This removes the user and associated PitsyPet records from the active database through database cascades. If you have a Stripe customer, deletion also removes stored card details and immediately cancels active subscriptions.

Deletion from an active system cannot always remove every temporary copy instantly. Encrypted backups, security logs and provider disaster-recovery copies may remain until their normal expiry and are not used for new purposes. Stripe and other providers may retain transaction or compliance records where law requires it. Anthropic's standard commercial API retention is described in section 4.

Rate-limit and daily-usage counters are short-lived and normally expire within two days. Contact enquiries are retained in the support mailbox only as long as reasonably needed to respond, resolve the issue or meet a legal obligation.

You can view and correct most profile and pet information inside PitsyPet. You may also contact us to request access, correction, a portable copy, restriction, objection or deletion of personal information associated with you. We may need to verify your identity before completing a request.

If the GDPR applies to you, your rights may include being informed, access, rectification, erasure, restriction, data portability, objection, withdrawal of consent and rights relating to certain automated decisions. We will generally respond within one month, subject to lawful extensions or exceptions.

Privacy rights are not absolute. For example, a provider may need to retain limited billing information to comply with tax, accounting, fraud-prevention or other legal obligations. We will explain any applicable exception.

PitsyPet is intended for adults and is not directed to children under 18. If you believe a child has provided personal information, contact us so it can be investigated and deleted where required.

Where required, we rely on contractual and legal safeguards for overseas processing, such as data-processing agreements and the EU Standard Contractual Clauses. You can contact us for current information about provider locations.

Security measures include encrypted HTTPS connections, Supabase Row Level Security, authenticated access controls, restricted administrative credentials, request validation, bot and rate-limit protection, and security monitoring. No online system can promise absolute security.

If a data breach is likely to cause serious harm and notification is required, we will notify affected users and the Office of the Australian Information Commissioner (OAIC), or another relevant authority, as required by law.

For a privacy request or complaint, use the PitsyPet contact form. Include “Privacy request” in your message and enough information for us to identify your account. We will acknowledge the request and aim to provide a substantive response within 30 days.

If you are not satisfied, you may complain to the Office of the Australian Information Commissioner. If the GDPR applies, you may also lodge a complaint with the data-protection authority where you live or work.

We may update this policy when the product, providers or law changes. The current version will remain available at this URL with its effective date. Material changes will be highlighted in the product or otherwise communicated where appropriate.