Privacy Policy

Data Controller

This app is operated by Stormy Labs Limited (in process of incorporation under the Companies Ordinance (Cap. 622) of Hong Kong).

Registered address: Room B, 5/F, Block 2, Ching Hing Industrial Building, 19-25 Fu Uk Road, Kwai Chung, New Territories, Hong Kong.

Contact: privacy@pawssport.app

What We Collect

• Name and email address — for account creation and authentication
• Pet health data — health logs, medications, photos, and care records
• Device information — crash reports and device diagnostics for app stability
• Usage patterns — anonymised analytics to improve the app experience (no personally identifiable information)

How We Use Your Data

• Service delivery — to provide, maintain, and improve the app
• Push notifications — to send medication reminders and care alerts
• Research — if you opt in, de-identified health log data may be used for veterinary research purposes only

Third-Party Processors

• Firebase — authentication and identity management
• Neon / PostgreSQL — database storage (US-based)
• Vercel — hosting and serverless functions (US-based)
• UploadThing — photo and file storage
• Upstash — job processing and queues

Research Data

If you opt in, de-identified pet health log data (breed, age, conditions, health log values — no name, no photo, no contact info) is stored for veterinary research. You can withdraw at any time in Settings → Privacy & Research. On withdrawal, all previously shared data is permanently deleted.

Data Retention

• Active account — data retained while account exists
• Deleted account — all data deleted within 30 days
• Research data — deleted immediately on consent withdrawal or account deletion

Your Rights (PDPO + PDPA)

• Access — request a copy of your personal data
• Correction — request correction of inaccurate data
• Deletion — request deletion via Settings or email
• Cessation of processing — opt out of research via the research toggle
• Data portability — export PDF reports directly in the app

Submit requests to privacy@pawssport.app. We respond within 40 days.

Cross-Border Transfer

Data is processed on servers in the United States (Firebase, Vercel, Neon). By using the app, you consent to this transfer.

Security

We use industry-standard encryption for data in transit (TLS) and at rest.

Children

This app is not intended for users under 16.

Changes to This Policy

We will notify users of material changes via in-app notice.

Contact

For privacy enquiries: privacy@pawssport.app or hello@pawssport.app.