Privacy Policy

Last updated: November 10, 2026

This policy explains what information Pawlio handles, why, and who helps us run the service. Pawlio is operated by Tulio Chacón, an individual based in Colombia, who is responsible for your data. Contact: [email protected].

What we collect

• Account: your email address and name (from Google sign-in or your email link), and the business details you add to your profile.
• Records you enter: pet and client information such as pet names, species, breed, vaccination dates, owner name, contact (phone or email), address, vet details, notes, and photos of pets and vaccine cards.
• Owner reminders: if you turn them on for a pet, the owner’s email address, which reminders were sent, and whether the owner stopped them.
• Team data: caregiver names and the logins you create for them, which pets are assigned to whom, and who last edited a record and when.
• Payments: when you buy a plan, PayPal gives us the order reference, amount and payer email. We never receive or store your card number.
• Support messages: the name, email and message you send through the Support form.
• Website usage: see Website analytics. To limit abuse of the Support form we keep, for one hour, a scrambled (hashed) value derived from your connection — never your IP address itself.

How we use it

To run Pawlio for you: to sign you in, store and show your records, apply your plan, send the emails described below, process support requests and keep the service secure. We also measure how the website is used so we can improve it. We do not sell or share your data for advertising, and we do not show ads.

Emails we send

• To you: sign-in links, notices before your paid plan ends (30 and 7 days before, and when it ends) and replies to your messages.
• To pet owners, on your behalf: only if you turn on reminders for their pet. They are sent in your business name, replies go to you, and every email has a link to stop them.

Website analytics

We use two tools to understand how people find and use the website:

• Cloudflare Web Analytics counts visits and page views without cookies and without identifying you.
• Google Analytics tells us which pages are viewed, the type of device and browser, the approximate region (country or city), how visitors arrived (for example, from a search or a link) and a few key actions: creating an account, adding a pet, starting a checkout, buying a plan and sending the Support form.

We never send your pet or client records, names, email addresses or other details you type to Google Analytics, and web addresses are sent without their extra parameters (so sign-in links and team details are not shared). Google Analytics uses its own cookies (such as _ga) to tell visits apart. We do not use it for advertising.

Turn it off: Turn off Google Analytics on this browser
You can also use Google’s opt-out add-on or block cookies in your browser.

Who helps us (service providers)

• Google Firebase — sign-in and the database where your records are stored.
• Cloudinary — storage and delivery of the photos you upload. Photos are served from long, unguessable web addresses that are not listed anywhere; anyone who has the exact address of a photo can open it, so share printed cards and PDFs only with the people they are for.
• PayPal — payment processing.
• Cloudflare — hosting of the website, delivery of the messages you send to Support, and cookie-free visit statistics.
• Brevo — delivery of the emails described above (plan notices, owner reminders and our replies).
• Google Analytics — website usage statistics, as described above.
• Google Fonts and a public code library host (cdnjs) — the website’s fonts and PDF tool.

These providers process data on our behalf under their own terms and privacy policies, and may store it on servers outside your country (for example, in the United States).

Cookies and local storage

Pawlio stores what is needed to keep you signed in and remember simple preferences in your browser. Google Analytics sets its own cookies to count visits (see Website analytics). There are no advertising cookies.

Who can see your records

• Individual accounts: only you.
• Team accounts: the administrator sees everything in the book; each caregiver sees only the pets assigned to them.
• Pawlio does not store the passwords you create for caregivers: each one is shown only once, when you create or reset it. Share it privately and ask caregivers to use a password they do not use elsewhere.
• We access your data only when needed to run or support the service.

Your clients’ information

The owner details you enter belong to your clients. You decide what to store and you are responsible for having the right to store it — and their permission before turning on reminder emails. Please enter only what you need.

How long we keep data

• Account and records: while your account exists. Records stay even after a paid plan ends (they become read-only if they don’t fit the free plan).
• If you ask us to delete your account: we delete your account, records and photos within 30 days.
• Payment records: kept as long as needed for accounting, tax and legal reasons (generally up to 5 years).
• Support messages: kept while needed to help you, and deleted on request.
• Google Analytics: usage data is kept for 14 months.

Your privacy rights

You can ask us to access, correct, delete or get a copy of your personal information, by writing to [email protected]. We will answer within 30 days and will not treat you differently for asking.

California and other U.S. states: residents of California (CCPA/CPRA) and other states with privacy laws have the rights above, plus the right to know what categories of personal information we collect (listed in “What we collect”), why (“How we use it”) and with whom it is shared (“Who helps us”). We do not sell personal information and we do not share it for cross-context behavioral advertising. We do not use or disclose sensitive personal information to infer characteristics about you. You may use an authorized agent; we may need to verify your identity before acting on a request.

Pet owners whose information was entered by a pet care business can write to that business, or to us and we will pass the request on.

Security

Data travels over HTTPS and is protected by access rules that keep each account’s records separate. No system is perfectly secure, so please keep your devices and email account safe.

Children

Pawlio is made for adults who work with pets and is not directed at children.

Changes and contact

If we change this policy we will update the date above, and tell you in the app or by email if the change is significant. Questions or requests about your data? Write to [email protected] or use the Support page.