Privacy policy

VestraPet is built around a single promise: your companion's health record belongs to you, and only to you. This policy explains what we collect, why, how it's protected, and what we will never do.

What we collect

• Pet profile data you enter: name, species, breed, date of birth, weight, microchip identifier, optional photo, purpose classification, vaccination history.
• Extracted passport fields from an OCR scan of a veterinary document you voluntarily submit. The original image is processed in a secure pipeline and not retained beyond 24 hours.
• Health records you add: timeline events, triage results, medication logs.
• Account data: email, phone (optional), name (optional), date of birth (optional), sex (optional), country of residence.
• Device diagnostics: crash reports, anonymous performance traces. Identifying fields stripped before transmission.
• Location: only with permission, only while the app is in use. Used for the nearest 24/7 vet network and regional outbreak alerts.

What we never do

• We do not sell your data.
• We do not share it with advertisers.
• We do not run third-party advertising in the app.
• We do not share your pet's records with a veterinary practice unless you initiate a handoff.
• We do not train public machine-learning models on your pet's photographs or records.

Where your data lives

Encrypted at rest and in transit (TLS 1.3). Each record is segmented by row-level security at the database layer. Image and document uploads sit in a private object store with signed, time-limited access URLs.

Cross-border processing

Data is processed in the region closest to your country of residence. For users in the European Economic Area, processing takes place in the EU, with standard contractual clauses where applicable.

Retention

• Health records: kept for the life of your account.
• Raw OCR source images: deleted within 24 hours.
• Deleted accounts: irreversibly purged within 30 days; backups within 90.

Your rights

• Access & export via /export.
• Correction: edit any field in the app.
• Erasure via /delete-account.
• Objection & restriction: write to privacy@vestrapet.com; we respond within 30 days.

Children

Not directed at children under 13. We do not knowingly collect data from anyone in that age group.

Changes to this policy

Material changes are announced in-app and by email. The effective date above reflects the most recent revision.

Contact

Privacy: privacy@vestrapet.com
Support: /support