Privacy Policy

Last updated: 19 July 2026

This Privacy Policy explains how Whiskerlog ("we", "us") collects and uses your personal data when you use the WhiskerLog mobile app and related services (the "Service"). We are the "controller" of your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data we collect

Account information

Your email address (used for magic-link sign-in).
Your first and last name.
Your acceptance of our Terms & Conditions at sign-up.

Animal & care data you enter

Animal profiles: name, species, breed, sex, estimated date of birth, and photos.
Timeline entries: weights, breath-rate measurements, vet visits, and free-text notes.
Litters and the sharing relationships you create with other users.

Device & technical data

Push notification tokens for the devices you sign in on (so we can send task reminders).
Standard technical logs generated when your app talks to our servers (for example, timestamps and error information).

2. How and why we use your data

To provide the Service — storing your animals' data and syncing it across your devices.
To sign you in — sending magic-link emails and verifying them.
To enable sharing — granting access to animals or litters you choose to share.
To send reminders — generating care tasks and sending push notifications about them.
To keep the Service secure and working — diagnosing errors and preventing abuse.

3. Legal bases

We rely on the following legal bases under UK GDPR:

Performance of a contract — to provide the Service you have signed up for.
Legitimate interests — to keep the Service secure, reliable and improving, balanced against your rights.
Consent — for push notifications, where your device asks for permission; you can withdraw this at any time in your device settings.

4. Sharing with others

When you share an animal or a litter, the people you share with can see and (depending on their role) update that animal's information. You control who you share with.

We do not sell your personal data. We use a small number of service providers ("processors") to run the Service:

Vercel — application hosting.
Supabase — managed PostgreSQL database hosting.
Resend — sending transactional emails (magic links).
Expo — delivering push notifications.

These providers process data only on our instructions. Some may process data outside the UK; where they do, appropriate safeguards (such as the UK International Data Transfer Agreement or Addendum) are relied upon.

5. Retention

We keep your data for as long as your account is active. Deleting an animal hides it (a "soft delete") rather than immediately erasing it, so that other users who share the animal are not affected. You can request full erasure of your personal data (see "Your rights" below).

6. Your rights

Under UK GDPR you have the right to:

access the personal data we hold about you;
have inaccurate data corrected;
have your data erased;
restrict or object to certain processing;
data portability; and
withdraw consent where we rely on it.

To exercise any of these, contact us at hello@whiskerlog.app. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

7. Children

The Service is intended for adults and is not directed at children. We do not knowingly collect personal data from children.

8. Security

We take reasonable technical and organisational measures to protect your data, including encrypted connections to our database and authentication on all account data. No system is completely secure, but we work to keep your data safe.

9. Changes to this policy

We may update this policy from time to time. When we do, we will change the "Last updated" date above and, where appropriate, notify you in the app.

10. Contact

Questions about this policy or your data? Contact Giles Boon-Williams at hello@whiskerlog.app.