Back to Amphibia Pets

Privacy notice

Last updated:

Amphibia Pets is a pet care organiser. You keep your pet's records, documents and reminders; you decide who else sees them.

This notice describes what the product actually does. Where it says a thing is not collected, it is not collected — not "not collected yet".

Who is responsible

Amphibia Pets is the controller of the personal data described here. To ask anything about this notice, or to exercise any of the rights below, write to hola@amphibiapets.com.

What we hold, and why

  • Your account: email address and sign-in credentials, so the account exists and only you can open it.
  • Your pets: name, species, breed, sex, birth date, microchip number and which registry it is in, weights you record, reminders you set, and expenses you note. This is the product.
  • Documents you upload: photographs and PDFs of your pet's paperwork, stored in a private bucket. Only you and people you invite can retrieve them.
  • People you invite: the email address you give when you share a pet with a partner, family member or sitter, so we can send them the invitation.
  • Where you send a Share Pack: the business name, email address and type of destination you type when you send documents to a kennel, groomer or sitter, plus whether the link was opened, so you can see it arrived.
  • Email preferences: whether you want reminder emails, how many days ahead, and an unsubscribe token.
  • Payment: if you subscribe, Stripe processes the payment and we store the subscription status. We never see or store your card number.

Our lawful basis

Running your account, storing what you enter, and delivering the reminders and invitations you ask for is performance of the contract (GDPR Art. 6(1)(b)). You asked for the product; this is the product.

Analytics runs only where you have consented (Art. 6(1)(a)), and nothing is loaded until you accept. Declining costs you nothing and is exactly as easy as accepting.

We also intend to use Share Pack recipient data — which kinds of business receive packs, and how many owners send to the same one — to decide whether to build and sell a product for those businesses. That is our legitimate interest (Art. 6(1)(f)) in knowing whether a product is worth building, and it is why the retention limit below exists and is enforced by a nightly job rather than by intention. You can object to it at any time under Art. 21.

Who else processes it

  • Supabase — the database, file storage and sign-in. Hosted on AWS in the United States.
  • Cloudflare — serves the website.
  • Resend — sends the reminder and invitation emails.
  • Stripe — processes subscription payments.
  • OpenAI — the non-clinical assistant. Only the messages you type into that chat are sent, and only when you use it. Your documents, pets and records are not.
  • Google Analytics — only if you accept the banner, and not loaded at all if you do not.

Because these providers are in the United States, your data is transferred there. We do not sell personal data, and we do not share it with anyone for advertising.

Reading a document does not send it anywhere. When you tap "read dates from the photo", the text recognition runs inside your own browser. The image never leaves your device for that.

How long we keep it

  • Your pets, documents, reminders, weights and expenses: until you delete them, or until you delete your account. A product whose job is to keep your paperwork does not quietly discard it.
  • Share Pack recipient name and email: deleted 90 days after the link expires or is revoked. The *kind* of destination — "a boarding facility" — is kept, because it identifies nobody.
  • Invitations that were never accepted: deleted 90 days after they expire.
  • Our record of which reminder emails were sent: 400 days, so a daily job cannot send the same reminder twice.

These are enforced by a job that runs every night, not by a policy someone remembers to apply.

Your rights

You can get a copy of everything. The export button in the app produces a ZIP with your records and your uploaded files. It is free and it always will be — Art. 12(5) requires that, and it is not a paid feature.

You can delete your account, which removes your records and your stored files, not just your ability to sign in.

You can also ask us to correct anything, restrict or object to processing, and complain to your supervisory authority — the AEPD in Spain, or the INAI in Mexico.

What this product does not do

It is not a veterinary record system and not a diagnostic tool. It stores what you and your vet wrote down; it makes no assessment of your animal, sets no schedules, and answers no health questions.

The assistant is an AI, it says so on every message, and it refuses health questions. If you describe an emergency it tells you to contact a veterinarian — on every plan, including the free one, always.

Changes

If this notice changes materially we will say so in the product before the change takes effect. The date at the top is the date of the last substantive change.