Privacy Policy

Family Pet Book is a private family web application for coordinating pet walks, health events, recurring care schedules, and food supplies. This Privacy Policy describes what information we collect, how we use and protect it, how Google user data is handled, and your rights regarding data retention and deletion.

1. Information We Store

We store only information necessary to deliver the service:

• Account information: Email address, display name, encrypted password (managed via Supabase Auth), and optional profile photo.
• Household & family data: Family name, member roster, invite codes, and optional family cover photo.
• Pet records: Pet name, animal type, gender, birthday, photo, food and diet notes, and care preferences.
• Activity & care logs: Walk logs (who walked, when, and optional notes), care events (vaccinations, vet visits, medications, baths), and recurring care schedules.
• Google integration data (optional): When a family administrator connects Google Calendar, we store the OAuth access and refresh tokens required to sync events, plus the associated Google account email address.

2. How We Use Information

We use this information exclusively to provide Family Pet Book features:

• Authenticating members and maintaining secure family sessions.
• Displaying the shared household walk and care calendars to members of your family.
• Generating care reminders and running-low food alerts on your family dashboard.
• Optionally creating and updating calendar events on a connected Google Calendar on your family's behalf.

We do not sell personal data, display third-party advertisements, or monetize your information in any way.

3. Google User Data & Google Calendar Integration

Connecting Google Calendar is an optional feature available to family administrators. When connected, Family Pet Book requests the following Google OAuth scopes:

• https://www.googleapis.com/auth/calendar.events: Used strictly to create, update, and delete calendar events for pet care reminders (e.g. vet visits, vaccinations, medications) managed within Family Pet Book. Family Pet Book does not read, modify, or delete any unrelated personal events on your calendar.
• https://www.googleapis.com/auth/userinfo.email: Used strictly to display which Google account is currently connected in your family settings.

4. Sharing, Transfer, and Disclosure of Google User Data

Family Pet Book does not share, transfer, disclose, or sell Google user data to any third parties.

• No Third-Party Sharing: Google user data is never provided to third-party tools, external commercial partners, advertisers, or data brokers.
• Direct Communication Only:Data received through Google APIs is used exclusively between your browser, our secure application backend, and Google's official APIs to synchronize your requested pet care events.
• No AI / ML Training: Family Pet Book does not use Google user data, including calendar events or account details, to train, retrain, or fine-tune artificial intelligence (AI) or machine learning (ML) models.

5. Data Protection Mechanisms for Sensitive Data

We implement industry-standard technical and operational safeguards to protect all sensitive data, including Google OAuth credentials:

• Encryption in Transit: All communications between your client device, our application servers, and Google APIs are strictly encrypted using Transport Layer Security (TLS 1.2 / TLS 1.3) over HTTPS.
• Encryption at Rest: Application databases, storage buckets, and database backups are hosted in enterprise cloud infrastructure provided by Supabase and encrypted at rest using AES-256 encryption.
• Token Security & Server Isolation: OAuth access tokens and refresh tokens are stored in protected database tables accessible only to server-side backend operations. Tokens are never exposed in client-side code, cookies, or public APIs.
• Row-Level Security (RLS): Granular PostgreSQL Row-Level Security policies ensure that household data and integration credentials can only be accessed by verified members of that specific household.

6. Retention and Deletion of Google User Data

We maintain clear policies on how long data is kept and how you can delete or revoke it:

• Retention Period: Google OAuth tokens and linked account information are retained only for as long as the family administrator keeps the Google Calendar integration active.
• Instant In-App Deletion: A family administrator can disconnect Google Calendar at any time from the Family Settings page (/family/manage) by clicking “Disconnect Google Calendar”. Disconnecting immediately and permanently purges all stored OAuth tokens and Google account references for that family from our database.
• Revocation via Google Account Settings:You can revoke Family Pet Book's access at any time through your Google Account security settings at https://myaccount.google.com/permissions. Once revoked, Family Pet Book can no longer refresh tokens or access your calendar.
• Complete Account & Data Deletion: Any user or family can request complete deletion of their account, family records, pet profiles, and all associated information by emailing udilub@gmail.com. We will permanently delete all requested records from our systems within 30 days of the request.

7. Contact Us

If you have any questions about this Privacy Policy, your data, or our Google Calendar integration, please contact the developer at: udilub@gmail.com