VidaPerruna
VidaPerruna Privacy Policy
Draft pending legal review. This document still contains details to be confirmed and is not the final version.
Controller: GAMC Unchained LLC, a Wyoming limited liability company (United States) Privacy contact: privacidad@vidaperruna.co Site: https://vidaperruna.co Applicable jurisdiction: Wyoming (United States), without prejudice to any mandatory rights granted to you by the law of your country of residence Effective date: [EFFECTIVE DATE]
1. What VidaPerruna is
VidaPerruna is a mobile app for iOS and Android used to record and coordinate a dog's care among the people who look after them: day-to-day activities, reminders, the animal's details and a shared history.
VidaPerruna does not provide diagnoses, treatments or veterinary advice, and it is not a medical device.
2. Data we process
Required to have an account
- Email address and password, to create the account, sign in and recover access. The password is stored only as a hash, never in clear text.
- Internal user identifier: a UUID that relates your data to itself.
- The account's creation and update timestamps.
Optional, provided by you
- Display name, so other carers know who recorded what.
- Dog details: name, breed, date of birth, sex, weight, feeding, microchip number and the vet's contact details.
- Dog photo, kept in private storage and reachable only through signed links that last one hour.
- Activities: type, date and time, quantity, unit, free-text note and, for medication, the name and dose you type.
- Reminders: title, note, schedule, time zone and who they are assigned to.
- Invitations: the email address of the person you invite and their role.
Generated by use
- Memberships and roles for each dog (owner, co-owner, caregiver).
- Audit trail with minimal metadata (who performed what kind of action, on what entity). By design it contains no email addresses, notes, microchips or free-text content.
- Sessions and authentication tokens.
Only on the account-deletion web page
If you request deletion from https://vidaperruna.co/delete-account without using the app, that request stores the following, so it can be verified and so nobody can use it to flood someone else's inbox:
- The SHA-256 hash of your email address (not the address in clear text).
- The SHA-256 hash of your IP address, with a secret salt, used only to rate limit requests per IP.
- The hash of the confirmation token, and the request, confirmation and completion timestamps.
That record survives the deletion of the account on purpose: it is the evidence that deletion was requested and carried out. It does not allow your email address or your IP to be reconstructed.
In addition, the provider hosting the website (Cloudflare) processes your IP address in order to serve you the page, as any web server does.
Data that never leaves your device
VidaPerruna's notifications are local: your own phone schedules them, and there is no push notification token and no registration with any messaging server. Your active-dog selection and the internal record of scheduled notifications also stay on the device.
The app's language is resolved on your device from your system settings. The profile includes a language field that today always holds its default value, because the app never writes to it.
Data we do NOT collect
We do not collect location, contacts, microphone, human health data, financial data, advertising identifiers, device identifiers, or usage and diagnostics data. There is no advertising, no analytics, no crash reporting and no tracking across apps or websites.
3. What we use the data for
Only to make the app work and to manage your account:
| Purpose | Data involved |
|---|---|
| Create the account, authenticate you and recover access | Email, password, tokens |
| Confirm your address and let you reset your password | |
| Show and store the dog's information | Dog details and photo |
| Record and review the care history | Activities, reminders |
| Coordinate between several carers | Memberships, roles, invitations, audit |
| Remind you of tasks on your device | Reminders and preferences (locally) |
| Send invitations | The recipient's email address |
| Verify a web deletion request and prevent its abuse | Email hash, IP hash, token |
We do not use your data for advertising or profiling, and we do not sell it or share it for commercial purposes.
4. Sharing with other carers
When you invite someone to a dog, that person sees that dog's details — including the microchip and the vet's details — and the care history, according to their role. By inviting someone, you are the one granting that access. You can revoke it at any time from the app.
5. Providers that process data on our behalf
| Provider | What for | What they receive |
|---|---|---|
| Supabase (database, authentication, storage and functions) | Hosting the service | All the server-side data described above |
| Supabase Auth | Sending account confirmation and password reset | Your email address and the corresponding link |
| Cloudflare (Pages) | Serving https://vidaperruna.co and the deletion form | Your IP address and web request metadata, as any web server does |
| Resend (transactional email) | Sending invitations and deletion confirmations | The recipient's address, the dog's name in an invitation, and the link with its token |
| Expo / EAS | Building and distributing the app | No end-user data |
| Apple and Google | Distributing the app and showing local notifications | No user data reaches us through them |
The Android binary includes Firebase Messaging components as a technical dependency of the notifications library, but they are inactive: the app does not configure them, generates no push token and sends nothing to Firebase.
Current status of Resend: sending through Resend is not enabled yet. There is no API key and no verified sending domain, and as of this document's date no email has been sent through it. In the meantime, account confirmation and password reset emails are sent by Supabase Auth. We will update this section the day Resend goes live.
6. International transfers
The service's data is hosted in the United States, in the
us-east-2 (Ohio) region of Supabase's infrastructure. If you live in the
European Economic Area, the United Kingdom, or another country whose law restricts
international transfers, your data is transferred outside that territory.
The safeguard we rely on for that transfer is Supabase's data processing agreement, which incorporates the European Commission's Standard Contractual Clauses. Our other providers (Cloudflare, Resend) operate under their own equivalent agreements.
7. Retention
- While your account exists, we keep the data you created.
- When you delete your account, the deletion described in section 8 runs, and it is immediate: there is no trash bin and no grace period.
- The database project is currently on Supabase's free plan, which performs no automated backups. There is therefore no provider copy that survives deletion. If we move to a plan with backups in the future, we will state the exact period here.
- The record of a web deletion request is kept after deletion, with the hashes described in section 2.
8. Deleting your account and your data
You can permanently delete your account:
- From the app: Profile → Account & privacy → Delete account. We ask for your password before continuing.
- Without the app: from the public deletion page, which emails you a single-use confirmation link (https://vidaperruna.co/delete-account).
When the account is deleted:
- Deleted: your email and credentials, your sessions, your profile, your preferences, the dogs you are the sole owner of (with their photos, activities, reminders and invitations), your memberships and your pending invitations.
- Kept, anonymized: the activities, reminders and audit records you generated on dogs that keep existing. They belong to the dog and its shared history; your authorship is replaced with a null value, with no possible reverse mapping.
- Kept: photos of dogs that keep existing, because they belong to the dog and not to your account.
- Kept: the record of the web deletion request, if you used that route, with the hashes described in section 2.
- Cancelled: your device's local notifications, and the app's local state is erased.
If you own a dog shared with other people, you must first transfer ownership to a co-owner or delete that dog: this way no dog is ever left without an owner or disappears without an explicit decision.
9. Security
- All traffic with the server is encrypted in transit (HTTPS).
- Data access is restricted in the database through per-row policies: each person can only read and write things belonging to dogs they are part of.
- Photos live in a private bucket and are only served through temporary signed links.
- Invitation and deletion tokens are stored only as SHA-256 hashes; the clear value travels only inside the corresponding email and is single-use.
- The session is stored encrypted on the device.
- No key with administrative privileges is present in the app.
No system is completely invulnerable, and we do not promise absolute security.
10. Minors
VidaPerruna is not aimed at minors and does not deliberately collect minors' data. To use the service you must be at least 16 years old if you live in the European Economic Area, and at least 13 years old elsewhere. If we detect an account created below that age, we delete it.
11. Your rights
Depending on the jurisdiction that applies to you, you may have the right to:
- Access the data we hold about you.
- Rectify it if it is incorrect.
- Erase it, together with your account.
- Restrict or object to its processing.
- Port it, receiving a copy in a commonly used format.
- Lodge a complaint with your country's supervisory authority.
Erasure is self-service: it is in the app and on the web, and it is immediate. The remaining rights, including rectifying your display name and data portability, we handle manually by email, because the app does not have screens for them yet. Write to privacidad@vidaperruna.co and we will reply within 30 days at the latest.
12. Changes to this policy
If we change this policy, we will update the effective date and publish the new version at https://vidaperruna.co. Material changes will be communicated inside the app.
13. Contact
privacidad@vidaperruna.co · GAMC Unchained LLC