Your data, explained.

The controller is Aleksandra Zemlianskaia. Kodu is the app name. Contact: support@koducare.app.

What we process and why

Kodu keeps pet profiles, care tasks, completions, notes, animal health records, selected photos and documents, contact details and preferences. Contacts and files may contain information about people: only add information you are entitled to use.

Firebase Authentication supplies a technical account identifier, including for an installation without a linked sign-in. Linking an account with Sign in with Apple or Google Sign-In can add your email and provider profile information. Care Circle membership, records and synchronization metadata support shared care. Family members can see their shared records. A disconnected device may retain its previous copy until it reconnects.

Pro cloud originals are stored privately in Cloudflare R2. Automatic uploads are a separate preference, disclosed before transfer and switchable off; switching off does not delete existing cloud files. Exports go to the apps or recipients you choose. Local-only files do not transfer just because a purchase is restored.

Legal bases

We process the information needed to provide requested app, account and shared-care features to perform our agreement with you; use proportionate technical information for our legitimate interest in security and preventing abuse; and process optional usage statistics with your consent. We use support messages to answer your request and may keep information where needed to meet legal obligations or resolve disputes.

Purchases, statistics and reminders

Apple handles payments; RevenueCat verifies products, transactions and subscription access using customer identifiers. We do not receive full payment card numbers.

Optional Firebase Analytics is off by default. If you enable it in Settings → About, it receives app/device identifiers and usage events such as feature interactions, plan status and pet count. We do not send note text or document contents as analytics. You can turn it off at any time; this stops future collection by the app, without automatically deleting earlier provider records. Advertising consent is disabled.

Reminders are scheduled locally with your permission. Their text may appear on your lock screen. Remote reminder delivery is not enabled in this release configuration.

Service providers and international processing

Services used are Google/Firebase (authentication, synchronized records and optional analytics), Cloudflare (private document storage and this site), RevenueCat (subscription verification), Apple (sign-in where configured and payments), and Gmail (support email). They may process information outside your country, including the United States. Relevant service terms and transfer safeguards apply; contact us for information about your data.

Provider information: Firebase privacy and processing, Cloudflare privacy, RevenueCat privacy, Apple privacy. We do not sell personal information or use pet records for targeted advertising.

Retention and deletion

Local records remain until you delete them or app data. Cloud records remain for your account and family features until removed. Pro expiry preserves the owner’s history and local originals; additional profiles remain exportable without an automatic expiry deadline.

After Pro access ends, cloud originals stay available for seven days, with the deadline shown in the app, and are then deleted automatically; a renewal before the deadline cancels the deletion. Files on your devices are never deleted by this. Export originals you need before the deadline. Account and document cleanup runs asynchronously; interruptions and provider failures can delay completion.

Account deletion instructions explain the owner and caregiver cases. Copies you exported or sent to others and payment records are separate. Shared authorship history may remain with the family owner after a caregiver leaves. Technical deletion markers and request counters are kept for limited operational periods, generally up to 30 days; provider security logs and backups follow the providers’ own retention processes. Firebase states that deleted authentication data can take up to 180 days to leave live and backup systems.

Support correspondence is retained while needed to resolve the request and any follow-up, dispute or legal obligation. Optional analytics is subject to the configured provider retention and deletion process. Contact us to request removal of earlier analytics or support information; turning the analytics switch off is not a deletion request.

Your choices and rights

You can request access, correction, deletion, restriction, portability or object to relevant processing, and withdraw analytics consent, subject to applicable law. Write to support@koducare.app. We may ask for proportionate identity verification. You may complain to a data protection supervisory authority, for example in your country of residence. Mandatory rights are not limited by this policy.

This website and updates

This site has no advertising or analytics scripts and sets no app cookies. Cloudflare processes technical requests, including IP addresses, to deliver and protect it. External email and provider links have their own policies. Material changes will be reflected here with an updated date.