Privacy Policy

This policy explains, in plain terms, what CorePaw collects, where it goes, and the choices you have. We update it as features change, and the date above always reflects the latest version.

The short version

CorePaw is local-first. Everything you log — your pets, their passport and microchip details, care entries, walks, health records, medications, measurements, symptom diary, documents and photos — is written to a database on your device. If you create an account and use a paid plan, that data also syncs to your household so the people you invite can see it. One optional feature, the AI vaccination-card scan, sends a photo to be read. We never sell your data.

Data stored on your device

Everything you log is saved locally first, and the whole app works with no connection. If you never sign in, that data stays on your phone and we cannot see it — deleting the app removes it.

Data synced to your household

If you sign in and your plan includes cloud features, your pets' records sync to our hosting provider (Supabase) and down to the other phones in your household. Data is scoped to the household and protected by row-level security, so only members of your household can read it — and only members with the permissions you granted can change it. We store the display name (or the local part of your email) alongside entries so actions read as "Tony fed Ringo".

On the free tier, photos, documents and the microchip certificate stay on your device: a co-parent sees each item's details but not the file. On a paid plan those files are uploaded to cloud storage so the household can see them.

The AI vaccination-card scan

When — and only when — you use it, the photo of the card you choose is sent to our server and on to Google (Gemini) to extract the records, which are then shown to you for review before anything is saved. The photo is used to return that result and is not kept on our servers afterwards. If you never use this feature, no photo leaves your device through it.

Location & walks

If you start a walk, CorePaw records your location in the background so the route keeps tracking with your phone locked — that is what background location permission is for, and it is only used while a walk is running. Routes are stored with the walk, on your device and (if you sync) in your household. We do not use your location for advertising and we do not share it.

Sharing a walk

If you email a walk to someone outside your household, the summary (route map, times and distance) is sent through our email provider (Brevo) to the address you enter. If you share a walk to social media, the image is generated on your device and handed to your phone's share sheet — we are not involved in where it goes next.

Accounts

An account is only needed for household sharing, sync and backup. We store your email address and a display name. Payment, when subscriptions launch, is handled entirely by Apple or Google — we never see your card details.

The website & waitlist

If you join our waitlist on this website, we collect the email address you provide and whether you'd like to help test the app. We use it only to contact you about CorePaw, and you can ask us to remove it at any time. The website uses minimal, standard server logs.

What we never do

We never sell your data. We never share it with advertisers, and we don't use it to build advertising profiles.

Security

Data sent to our servers travels over an encrypted (HTTPS) connection. Synced data is protected by row-level security so it is only readable by your household. Data stored on your device is protected by your device's own security.

Your choices & rights

Because your records live on your device, you can view, edit or delete any of them in the app, and remove all of them by deleting the app. If you have an account, you can permanently delete it and its data from Explore → Account — if you own a household that other people share, CorePaw asks you to hand it over first so nobody else loses their pets' records. For data we hold (such as a waitlist email), you can ask us to access, correct or delete it: email hello@corepaw.co.uk.

Children & young people

CorePaw is not directed at children under 13, and we do not knowingly collect personal information from them. A household owner can give a child access to their family's pets under their own account — in that case the owner is responsible for that access.

Not veterinary advice

CorePaw keeps records and shows general information, clearly marked as such. It is not veterinary advice and does not make treatment or dosing decisions — those belong with your vet.

Changes to this policy

We'll update this page as the product evolves and revise the date at the top. Significant changes will be highlighted in the app or on this site.

Contact

Questions about your privacy? Email hello@corepaw.co.uk.

CorePaw is operated by Steony Ltd, registered in England and Wales (company no. 17274192).
128 City Road
London
EC1V 2NX
United Kingdom