Private by design, clear by default.

1. Information you choose to record

Pawffy can store pet profiles, photos, vaccines, medication schedules and dose logs, veterinary visits, weight records, care notes, emergency contacts, and favorite clinic details. You decide what to enter.

By default, these records are kept in the app’s local data store on your device. Pawffy does not require a separate developer-operated account for core use.

2. Optional private iCloud sync

Pawffy Plus members can explicitly enable sync through Apple CloudKit. Sync is used only when your consent is on, a verified Pawffy Plus entitlement is active, and iCloud is available. Records then use your private iCloud database and Apple’s CloudKit service. Turning sync off returns the app to a local-only store; it does not silently claim that remote deletion has completed.

3. Purchases and subscriptions

Apple processes App Store purchases. Pawffy uses RevenueCat to retrieve offerings, verify Pawffy Plus entitlement status, determine introductory-offer eligibility, and restore purchases. RevenueCat may process purchase identifiers, entitlement status, product information, and related technical data under its own privacy terms. Pawffy does not receive your full payment-card details.

RevenueCat Privacy Policy · Apple Privacy Policy

4. Device permissions and Apple services

• Notifications: used for reminders you enable. Requests are scheduled locally.
• Location and MapKit: used when you ask to find nearby veterinary care or search a city or postal code.
• Photos: used only for images you choose for a pet or record.
• Calendar: used only when you choose to add a visit to your calendar.
• Face ID or Touch ID: evaluated by the operating system to lock the app. Pawffy does not receive biometric templates.
• Widgets and Spotlight: may show or index the pet and care information needed for the system feature you enable. Widget payload is cleared when widget entitlement access ends.
• PawAI: on supported Apple Intelligence devices, provides general care information using Apple’s on-device Foundation Models framework. Conversation state is used for the active session and PawAI is not a diagnostic service.

5. Optional Sign in with Apple compatibility

New users can use Pawffy without signing in. If you previously connected Sign in with Apple, Pawffy may keep the Apple user identifier and the name or email Apple supplied in the device Keychain so you can manage or disconnect that compatibility state. Sign in with Apple is not used as proof that CloudKit sync is active.

6. Analytics, advertising, and tracking

Pawffy does not include a third-party advertising or cross-app tracking SDK. Product-page acquisition and aggregate usage may be visible through Apple App Analytics. Subscription performance is measured through App Store purchase data and RevenueCat. Apple and RevenueCat process their service data under their respective policies.

7. Retention and deletion

Local records remain until you delete them in Pawffy or remove the app and its data. Synced records remain subject to your private iCloud storage and deletion actions. Purchase records may be retained by Apple and RevenueCat for transaction, fraud-prevention, tax, and legal obligations.

Use Pawffy → Settings → Data & Privacy to request deletion. Pawffy reports the outcome for this device, private iCloud, and optional identity separately. If a layer fails or CloudKit work is pending, the app does not label the entire request complete.

8. Children, security, and changes

Pawffy is not designed as a social network and does not knowingly solicit information from children. We use platform security controls, private app storage, Keychain for optional identity state, and Apple services where described above. No system can guarantee absolute security.

We may update this policy when Pawffy or its service providers change. The effective date at the top will be updated when the policy changes materially.

9. Contact

Questions or deletion support: ykpumt@icloud.com.