KavlaPet Privacy Policy
Last updated October 24, 2026 · version 2026-10-24 · Terms of Use
The short version. KavlaPet has no accounts and no ads. Your pets' profiles, entries, reminders, vaccines, medications and photos are stored on your phone, and nothing is sent to us unless you create or join a household (to share pets with other people or, with KavlaPet Solo, to keep your own pets on our server). Buying a plan goes through Apple's App Store or Google Play; we receive the store's record of it only when you are in a household. If you do, the pets you choose to share (without their photos), the name you use in the household, a random ID and secret for your phone, and the store's record of your subscription are stored on our server so that every member sees the same records. There is no advertising, analytics or tracking in the app.
This policy is provided by Zeyneddin Hasan Erdönmez, doing business as NewEvolve ("we", "us"). Contact details are at the end.
No account, no ads
We do not ask for your email address, phone number or a password, and there is nothing to sign up for. The app contains no advertising, analytics, crash-reporting or tracking tools. We do not sell your personal information and we do not share it for advertising.
What stays on your phone
Everything you enter is kept in a database on your phone:
- Pets — name, species, breed, birth date, a photo if you add one, and, in the Health tab, a microchip number and your vet's name and phone number if you enter them.
- Entries — what you log for a pet (meals, walks, medication given, weight and the like), with the time, a value and unit where relevant, and any note you write.
- Reminders and when they were marked done or skipped.
- Vaccines (name, dates, note) and medications (name, dose as you typed it, dates, note).
- Settings — weight unit, appearance, and the version of these Terms and this policy you agreed to and when.
Pet photos are resized and copied into the app's private storage. Photos are not sent to our server, also not in a household.
When you remove a pet or an entry, its content is cleared from the phone's database; only a marker that it was removed stays, so the removal can reach other phones in a household. Removing a pet also removes its entries, reminders, vaccines, medications and photo file. Temporary copies the app makes (exports, a backup file you picked, picked photos) are removed when the app next opens. Before an update changes the database, and before a restore or before removing a household's pets, the app keeps a full safety copy of the database on the phone; safety copies are deleted after 7 days.
Permissions
- Photos — you choose a photo for a pet in your phone's photo picker; KavlaPet sees only the photo you pick, and does not ask for access to your photo library or files.
- Notifications — asked when you save your first reminder, or a vaccine with a reminder. Your phone schedules and shows them; our server does not send push notifications.
- Age range — in places where the law requires apps to check age (for example, Texas), KavlaPet asks your phone's app store whether you are 13 or older: on iPhone through Apple's Declared Age Range feature, on Android through Google Play's age signals. The answer is used only on your phone to decide whether the app opens. It is not stored and is not sent to us.
- Not requested — camera, microphone, location, contacts, health data.
Households (optional)
Nothing about households happens until you tap Create, Join or Restore; before that the app does not connect to our server. (Restore asks the App Store or Google Play for your subscription first.) The app also asks the App Store (on iPhone) or Google Play (on Android), on your phone, for the plans' prices, whether your account can still get the free week, and whether it has an active KavlaPet subscription; those questions go to Apple or Google, not to us. When you are in a household, the following is sent to and stored on our server:
- The name you chose for yourself in the household. Other members see it, and it appears on things you mark ("Done by …").
- A random phone ID and a secret, generated on your phone when you create or join a household. The ID tells the server which phone added or changed a record; the server does not hash it, other members' phones receive it, and it stays on the records you added. The server keeps only a one-way code (a hash) of the secret. On your phone both are kept in secure storage: the iPhone Keychain, or on Android storage encrypted with a key held by the Android Keystore.
- The pets you chose to share, and everything attached to them — profile details (including a microchip number and your vet's name and phone number if you entered them), entries and their notes and time zones, reminders and their done/skipped marks, vaccines and medications. Photos are not sent. Pets you did not share stay on your phone only.
- Membership details — when you joined, an access end date if the manager set one, who the manager is, and the version of these Terms and this policy you agreed to and when.
- Invite codes, stored only as one-way codes, with when they were created, used or canceled.
Who sees what. Members see each other's household names and the shared pets' records. Because we run the server, we can technically access stored records; we do not look at them except to keep the service running, to investigate a security problem, or when the law requires it. Other people cannot read them through the app or our server: every request has to carry a member's key.
If you buy a KavlaPet plan
On iPhone, Apple processes the payment. We do not receive your name, Apple Account, Google Account, email address or payment details. To give your household its seats, the app sends us, and Apple sends us directly, Apple's signed record of the subscription. We store from it: the transaction IDs, the product, the purchase and expiry dates, the end of any billing grace period, a refund date if there is one, the date Apple signed the record, whether it was a test (sandbox) purchase, the household it was bought for, which of your household's phones sent it, and the version of these Terms you agreed to before buying. If you buy while in a household, the app gives Apple your household's ID (as the purchase's account token) so that Apple's record shows which household the plan is for. A plan bought without a household is sent to us only if you later set one up, and then only as Apple's record above.
On Android, Google Play processes the payment. To give your household its seats, the app sends us Google Play's purchase token, and our server uses it to ask Google Play for the subscription's status. We store from Google Play's answer: a one-way code (a hash) of the purchase token, the order ID, the product, the expiry date, whether it was a test purchase, the household it was bought for, which of your household's phones sent it, when we checked it, and the version of these Terms you agreed to before buying. We do not store the purchase token itself. Our server also asks Google Play regularly for purchases that were refunded, canceled or charged back, and then updates your household's plan to match the subscription's status at Google Play. A plan bought without a household is sent to us only if you later set one up.
Anyone signed in with the Apple Account or Google Account that pays for the household's subscription can restore the household on a new phone of the same kind; that phone becomes the manager, and the phone that last sent the subscription is removed from the household.
What our server keeps, and for how long
| What | Why | How long |
|---|---|---|
| Members: phone ID, one-way code of the phone secret, household name, join time, access end date, agreed Terms version | to know who may use the household | until that member leaves or is removed |
| The household's creation time and its manager (households set up before October 20, 2026 also have the end of a free period) | to know who manages the household | until the household is deleted |
| Shared records | so every member sees the same records | until the household is deleted (no time limit while it exists), or until the member who added a record deletes what they added; a removed record keeps only a marker that it was removed |
| Invite codes (one-way codes), who created them and which phone used them, and a lookup from code to household | so a code finds its household | kept until 7 days after they expire; removed the next time an invite is created or used, when the person who created or used one deletes what they added, or when the household is deleted |
| A list of recent sync requests (which records each touched, no content) | so a retried request is not applied twice | at least 7 days; removed the next time a member sends a change, or when that member deletes what they added |
| Subscription records (see above) | to give the household its seats | until the household is deleted; a past billing period is removed at the next subscription update once it has been over for 30 days |
| Which household a subscription belongs to | so a renewal or refund reaches the right household | until the household is deleted or the subscription moves |
| A keyed one-way code (HMAC) of your IP address, with a counter | to slow down repeated guessing of invite codes, repeated sign-ups and repeated recovery attempts | deleted within about a day after the counting window (one hour or one day) ends |
We do not keep request logs: Cloudflare has to see your IP address to deliver a request, and request logging is turned off for this service. A hash of an IP address is still personal data, and we treat it that way. We also read aggregate usage numbers from our Cloudflare account to stay within its limits; they do not identify anyone.
Recovery copies. Our hosting provider can restore our server databases (households, code lookups and counters) to any point in the past 30 days. We use that only to recover from a failure. This means content deleted from the server can remain recoverable by us for up to 30 days.
Deleting your data
- On your phone. Remove pets or entries in the app, or delete the app, which removes its database, photos and settings from the phone.
- The household key. On iPhone it is kept in the Keychain, which survives deleting the app; that is how a reinstalled app finds your household again. To remove it, leave the household in Settings → Household before deleting the app. On Android, deleting the app removes the key with the app's other data. On either phone, if you delete the app without leaving the household, your phone stays listed as a member until the manager removes it.
- Leaving a household deletes your name, the one-way code of your phone's secret and your membership details from our server, and the other members' phones remove your name and your phone's ID from their member list the next time they sync. What you added stays as the household's record with your phone's random ID but without your name, and others see it as "Former member". You can keep a copy of the shared pets on your phone or remove them; removing clears their content from your phone.
- Deleting what you added (Settings → Household → Delete what I added and leave) does the same and also deletes, from our server and from the other members' phones when they next sync, the entries and done marks you logged and the pets, reminders, vaccines and medications you added that no one else in the household has changed or used. Things another member also uses, such as a pet they log entries for or a reminder they mark done, stay with the household; your phone's ID is removed from them and from our other records (sync requests, invite codes and subscription records), so they show as "Former member". If you were already removed from a household, email us with the household ID and phone ID the app shows, and we will do the same.
- The last member leaving deletes all of the household's data from our server, including its subscription records (subject to the 30-day recovery copies above).
- Asking us. Email us with the household ID shown in Settings → Household, and say whether you want the whole household deleted, or one member removed with or without what they added. We can't look you up by name; we need the household ID. To protect other members, we may ask for details that only a current member can see before we delete a whole household. We will delete it from our server and confirm (subject to the 30-day recovery copies above).
Leaving a household or deleting the app does not cancel a subscription. Cancel it in Settings → your name → Subscriptions on iPhone, or in Google Play → your profile picture → Payments & subscriptions → Subscriptions on Android.
Backups and exports
- iPhone backup. If you back up your iPhone to iCloud or to a computer, the app's data is part of that backup, as with your other apps. The backup belongs to you and your Apple Account; we do not receive it. The household key may move to a new iPhone with an encrypted backup.
- Android backup. KavlaPet's data is not included in the Google backup of your Android phone. Use Settings → Backup to keep a copy.
- Backup file. Settings → Backup writes a file to a place you choose; Restore reads one back. The file carries removed pets and entries only as markers, without their content. It does not include photos or your household key. Anyone you give the file to can read it.
- Records for your vet. Share records creates a PDF or CSV on your phone and hands it to your phone's share sheet. It goes only where you send it and contains the notes entered for those pets, including by other household members.
Service providers
- Cloudflare runs our server and stores the household data described above, as our service provider. Cloudflare handles it under its Data Processing Addendum, which is part of our agreement with Cloudflare and requires it to keep that data secure and use it only to provide its services to us, giving it at least the protection described in this policy. Household data may be stored and processed in the United States or in other countries where Cloudflare operates.
- Apple provides the App Store, payments, the Keychain and iCloud backup under its own terms and privacy policy.
- Google Play provides the Play Store, payments and age signals on Android under Google's own terms and privacy policy. To check a subscription, our server sends Google Play the purchase token described above.
- Google (Gmail) hosts our mailbox, so emails you send us are also covered by Google's privacy policy.
We disclose information to others only if the law requires it, to protect the safety of people or the service, or to someone who takes over KavlaPet and agrees to this policy (we will tell you in the app first).
Security
Traffic to our server uses HTTPS. The server keeps phone secrets and invite codes only as one-way codes, and IP addresses only as keyed one-way codes. Your phone's ID and secret sit in the phone's secure storage (the iPhone Keychain, or Android Keystore-protected storage), not in the database file, so a backup file you share does not contain the secret. No system is perfectly secure.
If we learn that someone got unauthorized access to data we hold, we will tell those affected in plain language and without unreasonable delay, within the time the law allows, and notify authorities where the law requires. Records of pets you did not share are only on your phone, so an incident on our side cannot reach them.
If you email us, we receive what you write and your email address, and use them only to answer you. We keep support emails for up to 90 days after our last reply, unless an email is about a legal claim or a deletion request, which we keep for as long as we need to show how we handled it. If you choose to share analytics with app developers in your iPhone's settings, Apple may share crash reports with us. On Android, if your phone sends usage and diagnostics data to Google, Google Play may share crash reports with us. We use them only to fix problems.
Health information about people
KavlaPet is for your pets. It does not ask for information about your own health or anyone else's, and we do not use what you enter to work out anything about a person's health. For this reason we do not treat the records in KavlaPet as "consumer health data" under laws such as Washington's My Health My Data Act or Nevada's consumer health data law, and we do not publish a separate consumer health data policy.
Notes are free text. Please do not use them to record a person's health information. If you do, it is handled like any other note: it stays on your phone or, for a shared pet, goes to the members of your household and to our server as described above.
Children
KavlaPet is not directed to children under 13, and we do not knowingly collect personal information from them. A person under 18 may use KavlaPet only with a parent or guardian involved (Terms of Use, section 4). If you believe a child under 13 is in a household, the manager can remove them in the app, or email us with the household ID and we will delete their membership.
Your rights
Depending on where you live, you may have rights under laws such as the California Consumer Privacy Act to know about, correct or delete the personal information we hold, and not to be discriminated against for using those rights. Because we hold no account, use the app (delete what you added and leave the household, remove records) or email us with the household ID. We do not sell or share personal information for cross-context behavioral advertising.
Changes to this policy
If this policy changes, the date at the top changes and the new version appears in the app. If a change is significant, the app asks you to agree again the next time you create or join a household or buy a plan.
Contact
Zeyneddin Hasan Erdönmez, doing business as NewEvolve · Osmangazi Mah., Dr. Cemil Özbal Cad., Çamlıca Evleri A Blok, No: 31 A, 27560 Gaziantep, Türkiye · growevolve.business@gmail.com. KavlaPet is published by NewEvolve.