Privacy Policy

Last updated: September 2, 2026

PawPaw Health is a pet health timeline app operated by S.I.T. Technology. This policy explains what information PawPaw collects, how it is collected and used, when it is shared, and the controls available to you.

Information we collect and how we collect it

Account information: We collect the display name and email address you enter when you create or update an account. If you use Apple or Google sign in, Firebase Authentication provides PawPaw with a verified account identifier, email address, sign-in provider, and available display name. For password accounts, we store a one-way password hash rather than a readable password. We also store account-session and email-verification information.

Pet and care content: We collect the pet profiles, veterinary notes, medications, appointments, vaccinations, microchip details, reminders, reports, Care Circle information, provider connection approvals, service requests and scheduling messages, shelter workspace roles and operational updates, task information, and other content you enter or choose to back up or share. Records can include filenames, photos, document images, and pasted or extracted document text.

Notifications and support: If you enable remote reminders, we collect an app push token and device platform. If you contact support, we collect the message and diagnostic details you choose to submit, such as app build, platform, affected screen, and reproduction steps.

Subscription information: If you purchase PawPaw Plus through the Apple App Store or Google Play, PawPaw receives a store transaction or purchase identifier, product identifier, subscription environment, and expiration date so we can verify and provide the plan. Apple or Google processes payment details; PawPaw does not receive your full payment-card information.

How PawPaw uses information

We use information only to provide requested app features: authenticate accounts, synchronize personal backups and shared workspaces, connect owners with approved care providers, exchange and confirm service-request schedules, restore data, deliver reminders and account or workspace-invitation emails, support Care Circle sharing and tasks, create reports, respond to support requests, prevent abuse, and protect account security. PawPaw does not sell personal information or use it for advertising or cross-app tracking.

Optional OpenAI document processing

AI document processing is optional and off until you give permission. Before the first transfer, the app explains the data involved, names OpenAI, and asks you to choose Allow & Analyze. You can revoke this permission at any time in Profile > Privacy & permissions.

When you request AI analysis, the selected document images, filenames, and pasted document text are sent over an encrypted connection through PawPaw Cloud to OpenAI, LLC. This content may contain pet or owner names, contact details, veterinary notes, medications, appointment details, vaccination information, microchip information, and any other information visible in the selected pages or text.

OpenAI processes the submitted content only to return an editable summary and extracted fields to PawPaw. The feature does not diagnose or provide treatment. PawPaw sends Responses API requests with storage disabled, and OpenAI states that API inputs and outputs are not used to train its models by default. OpenAI may retain limited abuse-monitoring data for up to 30 days under its API data policy unless stronger retention controls apply. See OpenAI Enterprise Privacy and OpenAI API data controls.

Service providers and other sharing

We use infrastructure and database providers to operate PawPaw Cloud, Firebase Authentication to verify Apple and Google sign in, OpenAI for document analysis you authorize, Resend to deliver requested account emails, and Expo to deliver push notifications you enable. Apple or Google processes the sign-in information you submit to that provider under its own privacy terms. We provide each service only the information needed for that function. S.I.T. Technology requires service providers to use information only to deliver the contracted service and to maintain confidentiality, security, and data-protection safeguards consistent with this policy.

You control Care Circle sharing. Invited caregivers can access only the pet and information permitted by the role you select. You can change access or revoke an invitation in the app.

Business workspace managers control team invitations and roles. Accepted staff can access only that workspace and the actions allowed by their assigned role; personal owner pets outside the workspace are not included.

A salon, sitter, pet-care centre, or veterinary clinic may request a connection using your PawPaw account email and pet ID. A customer record or booking does not grant access. The requested information is limited by provider type, remains unavailable until you approve it, and can be revoked from Provider access in the PawPaw app.

After you approve a provider connection, you may send that provider a service request containing the pet, requested service, preferred schedule, and note you enter. The provider can accept, decline, or propose a new time. For confirmed bookings, the provider may assign a team member and share operational status or care updates with you. These actions do not expand the provider's approved access to other pet information.

Storage, retention, and deletion

PawPaw saves day-to-day data on your device. Cloud data is stored when you use account backup, Care Circle, tasks, or other cloud features. Account and cloud content remain until you delete the account, except where limited retention is required for security, fraud prevention, dispute resolution, or law. Push tokens remain until removed or the account is deleted. Support messages are retained only as long as reasonably needed to investigate and resolve the request.

You can export or delete local data from Profile > Privacy & permissions. You can permanently delete the account and its associated cloud data from Profile > Account & Cloud > Account Details. Revoking AI permission prevents future AI transfers but does not delete records already saved by you.

Security and international processing

PawPaw uses encrypted network connections for communication with PawPaw Cloud and restricts cloud access to the functions needed to operate the service. PawPaw Cloud is currently operated from the United States. Information may also be processed where our service providers operate.

Contact

For privacy questions or requests, email pawpaw@sit-technology.com or use the S.I.T. Technology contact page.