Privacy Notice

vetAI (the "we" throughout this notice) is the data controller for the personal data described below. [Operator legal name, registered address, and contact details to be inserted before general availability.]

• Account data: name, email address, and password (stored securely, never in plain text).
• Pet data: profiles, medical records, weights, and photos you or your clinic add.
• Communications: messages exchanged with your clinic through the app.
• Consent records: what you accepted, when, and which version of this notice — kept as an audit trail.

Your pet's health information is not personal data about you under data protection law (only you, the pet owner, are a "data subject"), but we handle it with the same care since it is tied to your account and your clinic relationship.

• Delivering the service (your account, pet records, messaging with your clinic) — necessary to perform our contract with you.
• Security and abuse prevention — our legitimate interest in keeping the service safe.
• Marketing communications (product news, offers) — only with your explicit, opt-in consent, requested separately from the notice above and never required to use the service.

Marketing consent is off by default and never bundled with accepting this notice. You can grant or withdraw it at any time from Settings → Legal, and every change is recorded with a timestamp.

The clinic(s) you connect your account to can see the pet and message data relevant to their patients. We use third-party infrastructure providers (e.g. our hosting and database provider) to run the service — they process data on our behalf under their own data-processing agreements, not for their own purposes. We do not sell personal data.

We keep account and pet data for as long as your account is active, and consent records for as long as needed to demonstrate compliance. [Specific retention periods for closed accounts to be finalized before general availability.]

Under GDPR, you can:

• Access the personal data we hold about you.
• Correct inaccurate data (most of it directly, from Settings).
• Request erasure of your account and associated data.
• Request a portable copy of your data.
• Object to, or ask us to restrict, certain processing.
• Withdraw marketing consent at any time, without affecting other processing.
• Lodge a complaint with your local data protection supervisory authority.

To exercise any of these, contact us at the address provided in the app.

We use industry-standard measures (encryption in transit, access controls, and row-level data isolation between clinics) to protect your data. No system is perfectly secure, but we work to minimize risk.

If we materially change this notice, we will update the version above and ask you to review and re-accept it the next time you sign in.

This notice forms part of our Terms & Conditions.