Privacy policy

Who we are

Vafadar is a record-keeping app for your cats and dogs. It is run by [[AHRAR: legal name or trading name of the data controller, e.g. "Hoppr" and its owner]], [[AHRAR: contact postal address]] ("we"). We are the controller of the personal data described here. For anything in this policy, email support@hoppr.online.

Vafadar stores records you enter. It does not give medical advice. Always consult your vet. Vafadar is not an official pet passport or veterinary record.

What we collect

Without an account, your records stay on your phone. Pets, records, reminders and the care log are stored only on your phone until you sign in. The app still asks our server whether an update is needed (which is logged like any request, see "Technical data") and, once crash reporting is switched on, sends crash reports. Everything else below is collected only once you sign in to share, send a link or sync.

• Account: your email address (you sign in with a one-time code sent to it), your display name and, if you add one, a contact phone number. Also your settings: weight unit, currency, reminder lead times and notification preference.
• Households: the households you create or join, their names, and each member's display name and role. Invites are stored as a role, an expiry and keyed hashes of the link and code; we do not store the invitee's email address.
• Pet records: what you enter about your pets, such as name, species, breed, sex, dates of birth and adoption, colour and markings, microchip and tattoo numbers, insurance provider and policy number, diet, behaviour and care notes, vaccinations, medications, preventives, allergies, conditions, vet visits, weights, reminders and their history (done, snoozed, skipped, and by whom), and the care log.
• Photos and documents you attach to a pet or a record.
• Other people's details you enter: up to three emergency contacts per pet (name, phone and relationship) and your vet clinic's name, phone, email and address. Only add people who are happy for you to store their details; they are used only to show to your household, and on a share link or PDF if you include them.
• Share links you create: what each link shows, its label and expiry, and how many times it was opened and when (not who opened it).
• Data exports you ask for: the archive is kept on our server for 7 days so you can download it.
• Crash reports (once crash reporting is switched on in the app): when the app crashes or hits an error, a report with the error and stack trace, the app version, the device model and operating system version, and a random installation identifier. The same service also records when the app starts (a "session"), so we can tell how many sessions end in a crash. Reports never include your email address or your pet records, and text that looks like a token or email is removed first. You can turn this off in Settings with "Send crash reports".
• Technical data: our server and web server log each request with your IP address, the time, the page or route, the result and your account's internal id if you are signed in. Logs do not record share-link, invite or file addresses. To stop abuse we keep short-lived counters keyed by your IP address or a hash of your email address.

We do not use analytics or advertising tools, we show no ads, and we do not sell or rent your data or share it for advertising.

Why, and on what basis

• To provide Vafadar (your account, sign-in, sync between your phones and your household, reminders, share links, exports and account deletion): necessary to perform our contract with you (the terms).
• To keep Vafadar secure and working (server logs, rate limits, backups) and to find and fix crashes (crash reports): our legitimate interest in a reliable, secure service. You can object to crash reports at any time with the Settings toggle.
• To meet legal obligations, for example answering a lawful request or keeping records we must keep.

We email you only the sign-in codes you ask for. We do not send marketing email.

Who processes it

We use these service providers, who process data only on our instructions:

• Hostinger: the server that runs Vafadar and stores your account data, records, photos and documents.
• Resend: sends the sign-in code emails (your email address and the code).
• Google Firebase Crashlytics: receives crash reports, once crash reporting is switched on in the app.
• [[AHRAR: off-site backup provider, once chosen (RUNBOOK §2 step 13), or remove this line]]: an encrypted copy of our nightly backups.

Within Vafadar, your records are visible to the members of the households you share them with, and to anyone who has a share link you created, limited to what that link shows and until it expires or you turn it off. We may also disclose data where the law requires it.

Where it is stored

If you are in the European Union or the United Kingdom, our representative there is [[AHRAR: GDPR Art. 27 EU and UK representatives (05 L-11), or remove if not appointed]].

Our server is in [[AHRAR: the VPS data-centre country or region (DEC-6)]]. Resend and Google may process data in the United States and other countries. Where data leaves your country, we rely on our providers' data processing terms, including the standard contractual clauses where they apply. [[AHRAR: confirm the data processing agreements with Hostinger, Resend and Google are in place]]

How long we keep it

• Account and records: until you delete them or your account.
• Deleted records: hidden at once, then removed after 91 days (the delay lets every phone in a household catch up). The files of deleted photos and documents are removed about a day later.
• Deleted account: removed at once from the live service, with the households you own and their pets. Care you logged in other people's households stays in their history as "Former member". Your data leaves our backups within 30 days.
• Backups: nightly; copies on our server are kept 7 days, off-site copies at most 30 days.
• Sign-in codes: work for 10 minutes and are deleted within 24 hours.
• Data exports: 7 days.
• Server logs: [[AHRAR: confirm 30 days once the journald limit (deploy/journald-petpassport.conf) is applied on the VPS]]. Web server logs: [[AHRAR: nginx access-log retention on the VPS (logrotate setting)]].
• Abuse counters: up to 48 hours.
• Crash reports: as long as Crashlytics keeps them: [[AHRAR: confirm the Crashlytics retention period in the Firebase console terms (Google documents 90 days)]].

Your rights

Depending on where you live, you can ask to access, correct, delete or receive a copy of your data, to restrict or object to how we use it, and to complain to your data protection authority. Most of this you can do yourself:

• Copy of your data: in the app, More, then Export data (all data as a ZIP, or a pet's PDF).
• Correct: edit any record, or your name and phone in More, then Account.
• Delete: in the app, More, then Account, then Delete account; or without the app, on our deletion page.
• Object to crash reports: turn off "Send crash reports" in Settings.

For anything else, email support@hoppr.online from your account's address. We answer within one month. If you are an emergency contact or other person whose details someone stored, you can ask us too.

Children

Vafadar is for adults: you must be 18 or older to use it, and it is not designed for children. If we learn that a child has an account, we will delete it, and we will always do so for a child under 13 (or under 16 in the European Union).

Security

All connections use HTTPS. Sign-in codes, sessions and invite and share-link tokens are stored only as hashes (share-link tokens also encrypted, so you can see your links again). Access to the server is limited to the people who run Vafadar. If a breach puts your data at risk, we will tell you and the authorities as the law requires.

Changes and contact

If we change this policy in a way that matters, we will say so in the app or by email before the change applies. Questions: support@hoppr.online, or write to [[AHRAR: contact postal address]].