Privacy Policy

GentleMao ("the Service," "we," "us," or "our") is developed and operated by the GentleMao Team. We are committed to protecting your privacy and personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use the GentleMao mobile application.

By downloading, installing, or using GentleMao, you consent to the practices described in this Privacy Policy. If you do not agree with these practices, please do not use the Service.

1. Information We Collect

1.1 Information You Provide

Category	Data	Purpose
Account information	Email address, display name (optional)	Registration, login, account management
Third-party login	Apple ID or Google account authentication tokens	Identity verification
Pet information	Pet name, species, breed, birthday, weight, photos	Pet profile management
Care records	Daily quality-of-life scores, notes, mood tags	QoL tracking
Medication records	Drug names, dosages, frequencies, administration logs	Medication management & reminders
Medical records	Blood test reports (lab values, report photos), vet visit records	Health tracking & AI analysis
Expense records	Medical expenses (optional)	Expense statistics
Media files	Photos, voice memos, journal text	Memory recording

1.2 Automatically Collected Information

We automatically collect limited device information including device type and operating system version for compatibility and troubleshooting purposes. We do not collect IP addresses, location data, or browsing history.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Providing core features: Care records, medication management, QoL tracking, vet visit records, expense tracking
• AI care features: Transmitting pet care data (QoL scores, weight, medication records, lab values, etc.) to AI services for analysis. No personally identifiable owner information is ever transmitted to AI.
• Push notifications: Medication reminders, journal reminders, vet visit reminders (you can disable these at any time)
• Service improvement: Analyzing anonymized usage data to optimize features and user experience

We will never sell your personal information to third parties. We do not use your data for advertising or marketing profiling.

3. Third-Party Services & Data Transfers

To provide the Service, we use the following third-party services. Your data may be processed outside your country of residence:

3.1 Supabase (United States)

• Purpose: Database storage, user authentication, file storage
• Data transferred: Account data, pet care records, media files
• Storage: Amazon Web Services (AWS) cloud servers
• Security: Transport encryption, Row Level Security (RLS)
• Privacy policy: https://supabase.com/privacy

3.2 Anthropic Claude AI (United States)

• Purpose: 5 AI care features (symptom assessment, drug interaction check, weekly report, dietary suggestions, vet visit helper) plus blood test analysis and OCR
• Data transferred: Pet care data only (QoL scores, weight trends, medication lists, lab values, species, diagnoses) -- no owner names, emails, or other personally identifiable information
• Data processing: Real-time processing only; data is not stored and cannot be traced back to an individual
• Privacy policy: https://www.anthropic.com/privacy

3.3 Apple Sign In / Google Sign In

• Purpose: Third-party identity verification
• Data transferred: Only authentication tokens; we do not access your contacts, photos, or other data

3.4 RevenueCat (United States)

• Purpose: In-app purchase and subscription management
• Data transferred: Anonymous user ID (UUID), purchase history, subscription status
• No personally identifiable information (name, email, etc.) is transmitted
• Privacy policy: https://www.revenuecat.com/privacy

4. AI Care Features Disclaimer

GentleMao provides AI-powered care features using artificial intelligence technology. Before using these features, please understand:

• Not medical practice: All AI outputs are for informational purposes only and do not constitute veterinary diagnosis, medical advice, or treatment recommendations. They cannot replace the professional judgment of a licensed veterinarian.
• Accuracy limitations: AI analysis may be inaccurate due to incomplete data, input errors, species variations, or other factors.
• Consult your vet: All health-related concerns or decisions should be discussed with a qualified veterinarian.
• Limitation of liability: We are not liable for any damages resulting from reliance on AI feature outputs.

Every AI analysis result includes the disclaimer: "This analysis is for informational purposes only and cannot replace the professional judgment of a licensed veterinarian."

5. Data Security

We implement the following measures to protect your personal information:

• All data transmission uses HTTPS/TLS encryption
• Database employs Row Level Security (RLS), ensuring users can only access their own data
• AI analysis is processed through server-side Edge Functions; API keys are never exposed to the client
• Sensitive information (e.g., auth tokens) is stored using device Secure Store
• Passwords are hashed; we cannot read your original password

6. Data Retention

• While your account is active: Your data is retained until you choose to delete your account
• After account deletion: All personal data, pet records, media files, and AI analysis caches are permanently and irreversibly deleted within 30 days
• Anonymized statistics: De-identified aggregate data may be retained for service improvement

7. Your Privacy Rights

7.1 Rights for All Users

Regardless of your location, you have the right to:

• Access: View all your data within the app at any time
• Correction: Edit your data within the app at any time
• Deletion: Delete your account via Settings in the app, or contact us for assistance
• Data portability: Contact us to request a copy of your personal data
• Opt-out: Disable push notifications at any time

7.2 California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to know: You may request details about the categories and specific pieces of personal information we have collected about you
• Right to delete: You may request deletion of your personal information, subject to certain exceptions
• Right to non-discrimination: We will not discriminate against you for exercising your privacy rights
• No sale of personal information: We do not sell your personal information and have not done so in the preceding 12 months
• No sharing for cross-context behavioral advertising: We do not share your personal information for cross-context behavioral advertising

To exercise your CCPA/CPRA rights, contact us at pawpeace0225@gmail.com. We will respond within 45 days.

7.3 European Economic Area Residents (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

• Legal basis: We process your data based on your consent (provided when you create an account) and legitimate interest (service improvement)
• Right to withdraw consent: You may withdraw consent at any time by deleting your account
• Right to restriction: You may request restriction of processing in certain circumstances
• Right to object: You may object to processing based on legitimate interest
• Data Protection Authority: You have the right to lodge a complaint with your local data protection authority

International data transfers are conducted under standard contractual clauses or equivalent safeguards as required by GDPR.

8. Cookies & Tracking Technologies

GentleMao is a native mobile application and does not use web cookies. The app does not embed any third-party advertising tracking SDKs and does not perform cross-app tracking. We comply with Apple's App Tracking Transparency (ATT) framework.

9. Children's Privacy

GentleMao is not directed at children under 13 years of age, and we do not knowingly collect personal information from children under 13 in compliance with the Children's Online Privacy Protection Act (COPPA). If we learn that we have inadvertently collected personal information from a child under 13, we will promptly delete it. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The revised policy will be posted on this page with an updated "Last updated" date. If material changes are made, we will notify you via in-app notification or email. We encourage you to review this policy periodically.

11. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:

• Email: pawpeace0225@gmail.com
• Developer: GentleMao Team

We will respond to all privacy-related requests within 30 days (or 45 days for CCPA requests).

This Privacy Policy is governed by the laws of the State of California, United States, without regard to conflict of law principles.