Last updated: 23 June 2026
1. Who we are
The data controller is:
Giorgio Carioni
Contact email: sanpeisfish@gmail.com
2. What data we collect and why
To operate the App we process only the data that is necessary, clearly distinguishing where it is stored and which services receive it.
Data stored on your device (never on our servers)
- Pet profile: name, species, breed, weight, age, health conditions, medications and allergies.
- Health history: timeline, events and notes entered or generated while using the App.
- App preferences: theme, notifications and local settings.
This data is stored locally on your device. When you use the AI chat, however, your pet's profile and chat messages are sent securely to Anthropic to generate personalised answers, as explained in the next section.
Data stored on our servers (Supabase)
- Email and encrypted password: used for authentication and account access.
- Subscription status: free, plus or pro plan.
- Daily message counter: the number of messages used, not their content.
- Anonymous or minimised technical logs: timestamp, AI model used, number of tokens consumed and response time. They do not include conversation content, AI answers or pet data.
Data sent to third-party services
- Anthropic (Claude AI): the pet profile and chat messages are sent via API to generate personalised answers. Anthropic states that, for its commercial/API offerings, it does not use inputs and outputs to train its models unless there is explicit opt-in. See Anthropic's Privacy Policy and the training information for commercial products in Anthropic's Privacy Center.
- RevenueCat: subscription management and verification; it receives only an anonymous or pseudonymous user ID required to manage the subscription. (Privacy Policy)
- Apple/Google: handling of in-app payments through the App Store and Google Play, according to their respective policies.
- Supabase: authentication, database for metadata and proxy infrastructure towards Anthropic. (Privacy Policy)
3. How the AI chat works
Your pet's data is stored on your device. When you use the chat, the App securely sends to Anthropic's servers (Claude AI), through our proxy, the profile needed to personalise the answer: name, health, medications, allergies, weight, breed and other relevant data present in the profile.
Anthropic does not use data sent via API to train its models, except for the explicit opt-in provided for in its policies for commercial/API offerings. You can consult Anthropic's Privacy Policy and its Privacy Center.
Conversations are not stored on our servers. We only record minimised technical information: timestamp, AI model used, number of tokens and response time. No chat content or pet data is stored on the server side.
4. Technical data and logs
For each message sent in the chat we record:
- date and time of the request;
- AI model used, for example Haiku or Sonnet;
- number of input and output tokens;
- response time in milliseconds.
We do not record the content of messages, the pet profile or the AI's answers. This technical data is used to monitor costs, prevent abuse and improve the reliability of the service.
Logs are associated with your user ID and constitute personal data under the GDPR. They are kept for 90 days and then automatically deleted or aggregated in anonymous form.
5. Security and encryption
- Local data is protected by the iOS Keychain / Android Keystore and by operating-system-level encryption.
- Communications with our servers take place over HTTPS/TLS.
- Communications with Anthropic take place over HTTPS/TLS.
- The Anthropic API key is never present in the App's code: calls go through a secure proxy server.
- Access to data on the server is protected by Row Level Security, so each user can access only their own data.
6. Veterinary disclaimer
Petlore is an informational assistant and does not replace your veterinarian. The App does not provide medical or veterinary diagnoses. For any concern about your pet's health, always consult a professional veterinarian.
Information provided by the AI may contain errors or be incomplete: always verify it with a qualified professional before making decisions about your pet's health.
7. Your rights (GDPR)
Under the GDPR you have the following rights:
- Right of access: you can request a copy of your personal data.
- Right to rectification: you can correct your data if it is inaccurate or incomplete.
- Right to erasure: you can delete your account and all associated data directly from the App, under Settings > Delete all data, or by contacting us.
- Right to portability: you can export your pet's data.
- Right to object: you can stop using the App at any time.
When you delete your account, all data on our servers is deleted and the local data on your device is erased. Anonymous or aggregated technical logs may be retained only in a form that cannot be traced back to your identity.
To exercise these rights, contact us at: sanpeisfish@gmail.com
8. Contact us
For any questions about privacy or to exercise your data rights, you can contact us by email at:
sanpeisfish@gmail.com