Privacy Policy
Last updated: May 6, 2026
This Privacy Policy describes how Petspulse ("we", "us") handles personal information when you use the Petspulse web application at https://petspulse.org (the "Service").
What we collect
When you create an account:
- Email address — for sign-in and service messages.
- Password — stored as a one-way hash by Supabase; we never see it in plaintext.
When you use the Service:
- Pet profile data you enter (name, species, breed, weight, glucose targets).
- Health readings you log (glucose, weight, water, notes, timestamps).
- Photos you upload for OCR analysis are sent to OpenAI's API for text extraction. We do not retain the image after analysis unless you explicitly attach it to a reading.
- Basic device and browser information for diagnostics.
When you subscribe to Pro:
- Payment processing is handled entirely by Paddle.com Market Ltd. ("Paddle"), our Merchant of Record. We do not see, store, or have access to your card number, CVV, or full billing address.
- We receive from Paddle: subscription status, plan, billing period dates, and a customer ID.
We do not run advertising trackers, and we do not sell your data.
How we use your data
- To provide the Service — sync data across devices, generate reports, share with your vet on your request.
- To analyse photos for OCR (sent to OpenAI's API; OpenAI does not use API data for model training per their terms).
- To process payments and subscription state (via Paddle).
- To monitor errors (via Sentry; stack traces only, no health data).
- To send service emails (e.g., trial ending, billing changes).
Who we share with
Petspulse is operated using these processors. Each receives only the data needed for its function:
- Supabase Inc. — database & authentication (Ohio, USA).
- Vercel Inc. — application hosting (USA).
- Paddle.com Market Ltd. — payment processing & Merchant of Record (UK / global).
- OpenAI, L.L.C. — photo OCR analysis (USA).
- Sentry — error monitoring (USA).
- Cloudflare Inc. — DNS (USA).
We do not sell your data, share it for marketing, or hand it to third parties except as required by law.
Where data is stored
Your account, pet profiles, and health readings are stored in a Supabase project hosted in the US East region (Ohio).
Your rights
- Export — Profile → “Download my data” produces a JSON of your pets, readings, and subscription.
- Delete — Profile → “Delete my account” permanently removes your data; the Paddle subscription is cancelled at period end.
- Update / correct — edit pets and readings in-app at any time.
- For any other request (access, restriction, objection, portability), email support@petspulse.org. We respond to verified requests within 30 days.
Children
Petspulse is not intended for use by anyone under 13. If you believe a child has created an account, contact us and we will remove it.
Changes to this policy
If we change this policy in a way that materially affects your rights, we'll email signed-in users at least 14 days before the change takes effect, and update the “Last updated” date above.