Privacy & GDPR

The controller of your personal data is:

• Name: Ollie Sp. z o.o.

• Address: ul. Polanki 3, 62-070 Zakrzewo, Poland

• KRS: 0001239724

• NIP: 777-346-81-86

• REGON: 544657380

• Share capital: PLN 10,000.00

For matters concerning the protection of personal data, you may contact us using the email address provided in the contact section below.

We only collect data necessary to provide the service:

• Owner data: first name, last name, email address, phone number (optional)

• Pet data: name, species, breed, date of birth, microchip number

• Medical data: visits, vaccinations, allergies, documents

• Technical data: access logs, session identifiers

• Site usage data: analytics and advertising events, e.g. opening a product page, starting a purchase, creating an account

We do not collect location data and we do not sell personal data. Your pet's medical data is never used for advertising purposes.

If you accept cookies, our analytics and advertising tools build a profile of your activity on the site in order to measure ad performance and personalise ad content. You can withdraw your consent at any time in the cookie settings in the page footer.

We use multi-layer security:

• Encryption: all data is encrypted at rest and in transit (TLS 1.3)

• Row Level Security: each user only sees their own data

• Access audit: every operation is logged

• Secure infrastructure: EU hosting compliant with GDPR

• Regular backups: automatic backups every day

Access control is in your hands:

• You, the owner: full access to all your pets' data

• Co-owners: access granted by the main owner

• Veterinarians: access only via a shared link with limited time and scope

• Pacjent.vet team: technical access only when you report a problem, at your request

We also work with trusted providers that process data on our behalf:

• Supabase: database and document hosting in the European Union

• Stripe: payment processing

• Google (Analytics 4 and Tag Manager): website traffic analytics

• Meta and TikTok: advertising pixels measuring campaign performance

• Google Cloud Vision: text recognition in uploaded documents

• OpenAI and TypeSafe: the AI assistant and reading data from documents

• SMSAPI: sending text messages (SMS)

• Resend: sending emails

• Mapbox: maps and address search

• InPost: order delivery

• Linear: handling problem reports

• Meta (WhatsApp): messages, if you write to us on WhatsApp

• Apple and Google: push notifications and Wallet passes

• RevenueCat: in-app purchases

Google Analytics runs from the moment you enter the site, but without cookie consent it collects only anonymous data, with no identifiers. The Meta and TikTok pixels load only after you give consent. These providers may process data outside the European Economic Area under standard contractual clauses approved by the European Commission.

Analytics and advertising providers have no access to your pet's medical data or uploaded documents.

Under GDPR you have the right to:

• Access – you can see all your data in the app

• Rectification – you can edit incorrect data

• Erasure – you can delete your account and all data

• Portability – you can export data in JSON format

• Objection – you can withdraw consent at any time

To exercise these rights, contact us: rodo@pacjent.vet

When you delete your account:

• All your personal data will be permanently deleted

• Pet data for which you are the sole owner will be deleted

• Shared links will stop working

• The process is irreversible

Data is deleted within 30 days of submitting the request.

When you share data:

• You control the scope: you choose what is visible (read/write)

• You set the time: the link expires after a specified time

• You can revoke: you can invalidate the link at any time

• You track access: you see who and when used the link

Veterinarians cannot save or copy data outside the application.

This section covers your use of the Pacjent.vet app on iOS and Android. Data is processed by the same controller and under the same rules as the web version, with the following additions:

• Camera: the app requests camera access only when you choose to add a new photo of a veterinary document or a pet avatar. Photos are never sent without your confirmation.

• Photo library: the app requests access to your photo library only when you choose an existing image to attach as a document or avatar.

• Push notifications: if you agree to notifications, we store your device's token (APNs on iOS, FCM on Android) to send reminders and alerts, e.g. about a visit, a medication dose or a scan of a lost pet's ID tag. Signing out deletes the token from our database. You can turn notifications off in the app or phone settings.

• Lock Screen card: before a visit, during a medication dose or in lost-pet mode, the app may show a card on the Lock Screen (Live Activities on iOS, an ongoing notification on Android). To update it, we keep that card's token until the card ends. You can turn off each kind of card in your account settings (Lock Screen card).

• Lock Screen card statistics: we collect pseudonymous statistics on how the card is used (start, end, button taps). We send them from our server to Google Analytics under a random identifier, without your pet's name, any address or medical data. The legal basis is our legitimate interest in improving this feature (Art. 6(1)(f) GDPR). You can object by writing to the address in the Contact section.

• Locally stored data: your session token and language preferences are stored locally on your device (iOS Keychain / Android EncryptedSharedPreferences). Signing out removes the token; uninstalling the app removes all local data.

• Sign in with Apple or Google: the app supports Apple Sign-In and Google Sign-In. We receive only the identity token and your email address (if you choose to share it). We do NOT use IDFA or Google Advertising ID and do not track you across apps.

• Your rights in the mobile app: you retain all GDPR rights regardless of platform — access, rectification, erasure, restriction of processing, data portability, and the right to lodge a complaint with the supervisory authority. You can delete your account and all data from inside the app under Settings (Account → Delete account) or via this website.

The Ollie AI assistant answers questions about pet care. If a question falls outside that scope and the assistant does not act on it, we may store its text in order to improve the assistant, for example to check that it is not declining questions it should answer.

• What we store: only the text of questions the assistant declined as off-topic, shortened to 500 characters, plus the language and the pet's species (e.g. "dog"). Before storing, we remove identifying data such as e-mail addresses, phone numbers, links and long strings of digits. We do not remove names or addresses written out in words, so please do not include them in questions to the assistant. We do not store the pet's name, the assistant's reply or any link to the conversation.

• Who has access: only Pacjent.vet administrators, in an aggregated view with no link to your account. We keep the account identifier solely so that these questions can be deleted together with the account.

• How long: up to 30 days, after which the questions are deleted automatically.

• Account deletion: stored questions are deleted together with your account.

• Legal basis: Art. 6(1)(f) GDPR, i.e. our legitimate interest in improving the AI assistant. You have the right to object to this processing: rodo@pacjent.vet