Privacy Policy
We built Pawli to help you care for your cats — not to collect or profit from your data. This policy explains exactly what we collect, why, and how you stay in control.
Data We Collect
Pawli collects only the data necessary to provide you with a comprehensive cat care management experience. Below is a transparent breakdown of each category of data we handle.
Collected when you sign in with Apple or Google. Required to identify your account and sync your data.
- Firebase User ID (unique identifier assigned by Firebase Auth)
- Display name (provided by your Apple or Google account)
- Email address (provided by your Apple or Google account)
- Profile photo URL (if available from your sign-in provider)
- Authentication provider (Apple Sign-In or Google Sign-In)
Stored in: iOS UserDefaults (app preferences), iOS Keychain (secure credential storage), and Firebase Authentication backend (cloud identity management).
All cat data is created entirely by you. You retain full ownership. See Section 3 for details on what stays local vs. what syncs to the cloud.
Cat Profiles
- Name, breed, birthdate, gender, color
- Profile photo (stored as compressed image)
- Cat ID number, owner name, contact number
Health Information
- Blood type, medications, allergies, health conditions
- Vaccine records: name, date administered, next due date, vet name, batch number
- Vet visit records: date, reason, vet name, clinic name, diagnosis, treatment, cost
- Medical documents: title, type, OCR-extracted text — binary files stored LOCAL ONLY, never uploaded
Nutrition & Meals
- Meal logs: food name, portion (grams), meal type, notes
- Weight entries: weight in kg, notes, date
- Food scan results: brand, product name, ingredients, nutritional data (protein, fat, fiber, moisture, calories, carbs, sodium, sugar %), safety analysis, barcode — scan images stored LOCAL ONLY
Reminders & Logs
- Reminders: title, notes, due dates, repeat intervals, notification settings
- Pet log entries: event type, notes, date, duration — photos stored LOCAL ONLY
We use PostHog to understand how the app is used so we can improve it. Analytics data is sent to PostHog's US-based servers.
- Events tracked: app_launched, signed_in (with provider), signed_out, screen views
- User properties sent: userId, name, email, authentication provider
- PostHog host: US region (https://us.i.posthog.com)
What we do NOT collect: Location data, contacts, clipboard contents, microphone audio, or any data beyond what is listed above.
Pawli requests only the permissions necessary for its core features. You can manage these anytime in iOS Settings.
Camera
Scanning food product labels and medical documents using OCR
Photo Library
Adding and managing cat profile photos
Face ID
Optional app lock for additional security (you choose to enable this)
Push Notifications
Care reminders, vaccine alerts, and vet visit notifications
How We Use Your Data
We use your data solely to provide and improve Pawli's cat care features. We do not monetize your data. Ever.
- Provide core cat care management features (profiles, health records, nutrition tracking, reminders)
- Sync your cat data across your devices via Google Firestore
- Analyze food ingredients for cat safety using the Anthropic Claude AI API (only food product text is sent — no personal user data)
- Send push notification reminders for care tasks, vaccines, and vet visits
- Improve the app through aggregated, anonymized analytics
- Process and manage subscription purchases through Apple and RevenueCat
We do not and will never: Sell your data to third parties, use your data for advertising, share your personal information with any party not listed in this policy, or use your cat's health data for any purpose other than displaying it to you within the app.
Cloud vs. Local Storage
We take a privacy-first approach to storage. Sensitive binary files (photos of documents, food scan images, pet log photos) are never uploaded to any server — they remain exclusively on your device.
- Cat profiles (with compressed photos)
- Meal logs
- Weight entries
- Reminders
- Vaccine records
- Vet visit records
- Medical document metadata (title + OCR text only)
- Food scan metadata (not images)
- Pet log metadata (not photos)
- Medical document binary files (PDFs, images)
- Food scan images
- Pet log photos
🔑 Keychain Backup
Auth session, user settings, and cat data JSON are backed up in the iOS Keychain to survive app reinstalls, allowing seamless data recovery.
Third-Party Services
Pawli integrates the following third-party services to deliver its features. Each service has its own privacy policy, which we encourage you to review.
Your Rights & Data Control
You have full control over your data. Pawli is designed with user rights built into the app itself.
Export all your data as a complete JSON file at any time using the built-in export feature in Settings.
Delete your account permanently from within the app. All cloud data is removed from Firestore immediately and irreversibly.
Modify, correct, or update any cat profile, health record, or personal information directly within the app at any time.
Uninstall the app and delete your account to remove all cloud data. Local data is cleared on uninstall.
GDPR: Data export, deletion, and userId isolation ensure compliance with EU data protection requirements. CCPA: We do not sell personal information. You have the right to know, access, and delete your data. COPPA: Pawli is not directed at children under 13, and we do not knowingly collect data from them.
Data Retention
- Active accounts:Data is stored and synced for as long as your account remains active.
- Deleted accounts:All cloud data in Firestore is deleted immediately and permanently upon account deletion.
- Local data:Cleared from your device when you uninstall the app.
- Keychain data:Persists after app uninstall by design, enabling seamless data recovery if you reinstall. You can clear this by deleting the app and manually clearing your Keychain via iOS Settings.
- Analytics data:Managed by PostHog per their retention policies. See PostHog's privacy policy for details.
Children's Privacy
Pawli is not directed at children under the age of 13. We do not knowingly collect, use, or share personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us immediately at support@pawlicare.com and we will take steps to delete such information from our systems.
For users between the ages of 13 and 18, we encourage parental supervision when using the app.
Security
We implement industry-standard security measures to protect your data:
- HTTPS encryption:All network traffic between the app and our cloud services is encrypted in transit via HTTPS/TLS.
- Firebase Auth:Secure, industry-standard session management with token-based authentication.
- iOS Keychain:Sensitive credentials and session tokens are stored in the iOS Keychain, which is hardware-protected on modern Apple devices.
- Face ID App Lock:Optional biometric protection prevents unauthorized access to your app data.
- UserId isolation:Firestore security rules ensure each user can only read and write their own data — other users' data is completely inaccessible.
While we take reasonable precautions to protect your data, no system is completely secure. We encourage you to use a strong, unique password for your Apple ID or Google account and to enable two-factor authentication on your sign-in provider.
Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out:
We will respond to all privacy-related inquiries within 30 days. If you are unsatisfied with our response, you may have the right to lodge a complaint with the appropriate data protection authority in your jurisdiction.
We reserve the right to update this Privacy Policy from time to time. We will notify you of significant changes through the app or via email. Continued use of Pawli after changes are posted constitutes your acceptance of the updated policy.