Privacy Policy

Who is responsible for your data?

Riquetti Studio Ltda, a single-member limited company (sociedade limitada unipessoal) registered in Brazil under CNPJ 41.011.161/0001-68, at Rua Rodrigues do Prado, 150, Belo Horizonte, MG, Brazil. It is the controller of your data under the Brazilian data protection law (LGPD).

What do we collect?

Your name, your email and, if you add one, a profile photo. The pets, records, files and contacts you add, and the notes and files someone sends you through a link you shared, with the name they give. Your preferences, such as language and units. A token for your phone, so it can receive notifications. Which version of the Terms and of this policy you accepted, and when. Technical data, such as your IP address when you sign in, kept for security. If you sign in with Google, we receive your name, email and profile photo from Google. If you sign in with Apple, we receive your name and your email, or an address Apple creates that forwards to it, from Apple. How you use the app: which screens you open, what you tap, and recordings of those visits in which what you type and your records stay hidden. Error reports when something breaks. Your rating and message, if you answer when the app asks how you like it, so we know what to improve.

Why do we use it?

To run your account, to show your records to you and to the people you invited, to send the emails your account needs (sign-up codes and password resets), and to keep the service secure. Reminders are scheduled on your own device. Usage data and error reports help us fix problems and decide which features to improve. We never sell them and never use them for ads.

What allows us to use it?

The service you asked for: we use your data to provide what the Terms of Service describe, including the error reports that keep it working (LGPD, art. 7, V). Keeping the service secure, stopping abuse and learning how the app and this site are used are our legitimate interest (art. 7, IX). When a law requires us to keep something, we keep it for as long as the law asks (art. 7, II).

Usage data and session recordings show us where the app breaks or confuses people and which features are worth improving. We think that is a use you would expect, and we keep it small: recordings hide everything you type and your records (pet names, dates, numbers, notes, contacts) and show only the app’s own words. Neither PostHog nor Sentry stores your IP address, and none of it is used for ads. To object, turn off Share usage data in Settings, under Your data, or write to legal@riquetti.com.br. Error reports are still sent, with only your account id, because we need them to keep the service working.

What about children?

VetVitae is for people 13 or older, and by creating an account you confirm you are. If you are under 18, a parent or guardian must agree to the Terms with you. We don’t knowingly collect data from children under 13. If we learn that an account belongs to one, we delete it.

Who can see it?

The members of each pet: its owner, co-owners and pet sitters. Members see each other’s name and email, and who logged or edited each entry. A pet sitter sees other members’ names but not their emails, and only the part of the pet’s history the owner allowed, without prices, until their access ends.

Your contacts are yours alone, unless you share them with someone who looks after a pet with you, or with everyone who does (including people who join one of your pets later). You share all of them (including the ones you add later) or only some. They can see and pick those contacts but not change them, and stop seeing them when you stop sharing or when you no longer share a pet.

An invite link lets whoever opens it first, signed in, join the pet as a co-owner or a pet sitter. It works once and expires after 7 days, so send it only to the person you mean to invite.

The owner can hand a pet over to a co-owner or, by a link that works once and expires after 7 days, to someone else. Once they accept, they become its owner with its whole history, including what other members logged and who logged it, and the other members keep their access. An owner who steps away keeps a read-only copy of the pet as it was that day, and the vet links they created stop working.

A vet link shows one pet to anyone who has it, with no account, until it expires or is turned off. It shows the pet’s profile, its records within what the link covers, the notes written on them, the files (unless they were left out), the owner’s name and the name of who shared it. Alerts (allergies, chronic conditions, positive or inconclusive test results, severe vaccine reactions) and current medicines are always included. It never shows costs, reminders, the members and their emails, or who logged each entry, and vets and other contacts on the records appear only by name. It cannot change the records, but whoever has it can send the owner and co-owners a note with files, which they can delete. Notes stay after the link ends and are deleted with the pet.

A pet tag is a page anyone can open, with no account, from the QR code on a pet’s collar or on a lost pet poster. It shows the pet’s photo and name and only what the owner chose to add: a phone number, a line saying the pet takes medicine every day, allergies, the microchip number and a short note. It never shows the owner’s name, email or address, the pet’s history or other pets. Whoever opens it can send the owner and co-owners a message, with their phone number and their location if they choose to add them. Openings are counted, and while the pet is marked lost the owner and co-owners see each opening, with nothing about who opened it.

We also rely on providers that process data only on our behalf: Supabase stores the records and handles sign-in, Cloudflare stores the files, Render runs our server, Netlify hosts the app and this site, Resend sends our emails, Google suggests addresses while you type one, handles sign-in if you choose it and delivers notifications to your phone or tablet (through Apple on an iPhone or iPad), Stripe takes payments on the web, Google Play takes payments in the Android app, Apple handles sign-in if you choose it and takes payments in the iPhone and iPad app, RevenueCat keeps VetVitae Plus in sync between them, Sentry receives error reports and PostHog receives usage data.

When you scan a document (a vaccination card, a prescription, a medicine box or an exam report: 3 free scans per account, then part of VetVitae Plus), the photos or PDF you chose, your pet’s name, species and birth date, and the date are sent to an AI provider to be read: Google (the Gemini API) for photos and OpenAI for PDFs, each one standing in when the other can’t answer. We keep the pages, seen only by you, until you finish or discard the scan, for 30 days at most, so you can come back to it. After that they stay only on the entries you saved them to, and we never keep the owner’s name, address or document numbers that a prescription may carry. Neither provider uses what you send to train its models. Each keeps it for a limited time to detect abuse, under its own terms, in other countries. What came out of a scan is only saved after you check it.

What happens when you pay for Plus?

VetVitae Plus is optional. On the web it is paid through Stripe, in the Android app through Google Play, and in the iPhone and iPad app through the App Store. Stripe, Google Play and Apple handle your card details, and we never see your card number.

RevenueCat receives the purchase records (which plan, the store, the dates and your account id), so Plus stays the same on the web, on Android, on iPhone and on iPad. We use these records only to know whether your account has Plus.

Does your data leave Brazil?

Yes. Our providers process data in other countries, mainly the United States. These transfers are needed to give you the service you signed up for or to meet a legal obligation (LGPD art. 33, IX, with art. 7, II and V). Each provider is bound by a data processing agreement, and where a provider has adopted the ANPD standard contractual clauses (Resolution CD/ANPD 19/2024), they apply too. Usage data goes to PostHog in the European Union, which the ANPD recognizes as giving adequate protection (LGPD art. 33, I, Resolution CD/ANPD 32/2026).

How long do we keep it?

Your account and what you add: for as long as you have the account. When you delete a record, a pet or your account, it is removed from VetVitae right away, files included. Some copies last a little longer:

• Database backups: deleted within 7 days.
• Sign-in records (date, time and IP address): kept for 6 months, as the Marco Civil da Internet (art. 15) requires, then deleted.
• Messages left through a pet tag, with the phone number and location of who sent them: deleted after 90 days. Openings of a lost pet’s tag: deleted after 7 days.
• Emails we send you (sign-up codes and password resets) and their delivery logs: deleted within 30 days, and from backups 7 days later.
• Error reports: deleted within 30 days.
• Session recordings: deleted within 30 days.
• Usage events, in the app and on this site: deleted within 1 year.

How do we protect it?

Everything travels encrypted and is stored encrypted. Records can only be reached by the members of their pet, and files only through links that expire. If a security incident could harm you, we tell you and the ANPD.

What stays on your device?

Your sign-in, so you stay signed in, small preferences such as which reminders you have read, and an anonymous usage identifier that you can turn off in Settings. This site sets no analytics cookie and stores nothing to count visits: each visit is counted on its own and forgotten when you leave the page. We use no advertising cookies.

What are your rights?

Under the LGPD (art. 18), you can:

• Ask whether we process your data.
• See the data we hold about you.
• Correct data that is incomplete, wrong or out of date.
• Have data that is unnecessary, excessive or not handled as the law requires anonymized, blocked or deleted.
• Get your data in a format another service can read (portability).
• Have the data we hold with your consent deleted.
• Know which companies and public bodies we share your data with.
• Know when you can refuse consent, and what happens if you do.
• Withdraw a consent you gave, at any time.
• Object to what we do based on legitimate interest, such as collecting usage data.
• Complain to the ANPD (Autoridade Nacional de Proteção de Dados).

You can view, correct and delete your data, turn off usage data and delete your account from Settings, without asking us. Each pet's history can be exported from its profile as a PDF, or as a ZIP with every file and the data as JSON and CSV for another service. For anything else, including a copy of all your data in one go, write to legal@riquetti.com.br. Where the GDPR applies, you have the same rights under it and can also complain to the data protection authority where you live.

If you live in Japan, what else applies?

Japan’s Act on the Protection of Personal Information (APPI) also applies, because we offer VetVitae to people in Japan (art. 171). The business handling your data is Riquetti Studio Ltda, at the address above, represented by Isabella Riquetti Campos Emidio. We use your data only for the purposes in this policy.

You can ask us how we use your data, to disclose it (including the record of what we gave to others), to correct, add or delete it, or to stop using it or giving it to others (arts. 32 to 35). Write to legal@riquetti.com.br from your account’s email. There is no fee, and we answer within 15 days.

How we protect it: only the people who need it to run the service can reach it, it travels and is stored encrypted, records open only to their pet’s members, access to our systems is limited and logged, and each provider is bound by contract to protect it.

Where it is handled: in Brazil, where we are, and by our providers mainly in the United States and the European Union. Brazil has a general data protection law (the LGPD) and an authority that enforces it (the ANPD). The United States has no general federal privacy law, only laws for some sectors and states. The European Union has the GDPR, which Japan recognizes as giving equivalent protection. Japan’s Personal Information Protection Commission publishes a report on each country’s rules.

Every provider abroad is bound by a contract that keeps the protection the APPI requires (art. 28), and we check that they keep to it. Ask us and we tell you what those measures are and how we check them. You can complain to legal@riquetti.com.br, or to the Personal Information Protection Commission.

Which outside services does the app send data to?

The app and this site make your device send some data straight to these services. This is the list Japan’s Telecommunications Business Act (art. 27-12) asks us to publish:

• Supabase: your email and sign-in, to keep you signed in.
• Google: your sign-in if you sign in with Google, the address text you type to get suggestions, and a device token to deliver notifications (Firebase Cloud Messaging).
• Apple: your sign-in if you sign in with Apple, and purchases in the iPhone and iPad app.
• Stripe: the plan you pick and your card, which only Stripe sees, when you pay on the web.
• RevenueCat: your account id and purchases, to keep Plus the same everywhere.
• Sentry: error reports with the device, the app version and what went wrong, to fix bugs.
• PostHog: usage events and, in the app, session recordings, with the device and country but never the IP address, to see how VetVitae is used. You can turn it off in Settings.

How do I delete my account?

To delete it in the app:

1. Open Settings: the Settings tab on a phone, or the account menu on a computer.
2. Under Your data, tap Delete account.
3. Read what happens to each pet, type your email and tap Delete account.

Can’t sign in? Write to contact@vetvitae.com from your account’s email and we delete it within 15 days.

What is deleted: your name, email and login, your preferences, the contacts you saved, and every pet you own that nobody else shares, with all its records, files, vet links and the notes sent through them. A pet you own that has co-owners passes to the co-owner who joined first, with its whole history. You leave the pets you co-own, and what you logged on them stays there without your name.

What is kept, and for how long: copies in database backups, deleted within 7 days; sign-in records (date, time and IP address), for 6 months, as the Marco Civil da Internet requires, then deleted; error reports and session recordings, deleted within 30 days; and usage events, deleted within 1 year. These last three are linked only to an account id that no longer exists.

How do I reach you?

Write to legal@riquetti.com.br. We answer requests about your data within 15 days.

Riquetti Studio is a small processing agent (agente de tratamento de pequeno porte, under ANPD Resolution CD/ANPD 2/2022), so, as art. 11 of that resolution allows, it has not appointed a data protection officer (encarregado). legal@riquetti.com.br is the channel for any request or question about your data.