Privacy Policy

Effective date: 31 October 2026
Last updated: 31 October 2026

This policy explains what personal data the Boop Pet Care app and service ("Boop", "we", "us", "our") collect, why we collect it, who we share it with, how long we keep it, and the rights you have. It applies to the Boop Pet Care iPhone app and the servers behind it, wherever you live. Section 9 explains extra rights you may have depending on your country or state. We have written it in plain English. If anything is unclear, contact us using the details in section 1.

1. Who we are

Boop Pet Care is provided by Mekhak Ghapantsyan.

We are the controller of the personal data described in this policy, which means we decide how and why it is used.

• Email for privacy questions and requests: mekhakghapantsyan@gmail.com
• General support: mekhakghapantsyan@gmail.com
• Website: https://boop-petcare.site

We have not appointed a Data Protection Officer, because the law does not require one for a service of our size. Please send any privacy question to the email above.

2. The personal data we collect

2.1 Data you give us

Account details

• Your name, which is shown to members of your household (for example "Done by Anna at 08:12").
• Your email address, used to sign in and to send you service emails such as password resets.
• Your password, if you sign up with email. We store it only in a hashed form, so we cannot read it.
• If you use Sign in with Apple, Apple shares with us a unique identifier for your Apple Account and, if you agree, your name and email address. If you choose "Hide My Email", we receive an Apple relay address instead of your real email address.
• A profile photo and your postcode, if you choose to add them.

Pet and care information

• Pet profiles: name, species, breed, sex, date of birth, weight, photos, microchip number, neutered status, insurance details, and your vet practice's name and contact details.
• Care events and reminders: such as flea and tick treatment, worming, vaccinations, medication, grooming and vet visits, with their schedules, completion status and notes.
• Daily check-ins: mood, appetite, drinking, toilet, walks, weight, heat-cycle records, notes and photos.
• Documents: vaccine cards, bills, receipts, clinic letters and other files you scan, photograph or import, and the titles, types and clinic names you give them.
• Expenses and budgets: amounts, dates, categories, notes, repeating costs and monthly budgets.

Information about your pets is not personal data in itself. It becomes personal data because it is linked to your account, and some of it (such as documents, bills or insurance details) may show your name, address or other details about you. We protect all of it in the same way.

Household information

• Who is in your household, their names and roles (owner or member), the invitation links and codes used to join, and which member created, changed or completed each item.

Messages to us

• If you email us, we receive your email address, your message and anything you attach. The app's "Contact support" option opens your own email app; the app itself does not send or store the message.

2.2 Data collected automatically

• Device information: a push notification token issued by Apple, and a random installation ID created by the app, so we can send reminders to the right device and manage your signed-in devices.
• Subscription information: your plan (Free, Premium or Premium+), purchase and renewal dates, expiry date, trial status and Apple transaction identifiers. Apple sends us this information when you buy, renew, cancel or are refunded. We never receive your card or bank details.
• Server and security logs: when the app connects to our servers, our hosting provider records technical information such as your IP address, the time of the request, the address requested and any error. We use these logs only to keep the service running and secure, and we keep them for a short time (see section 7).

2.3 What stays on your iPhone

Some features work on your device and do not send data to us:

• Document scanning uses Apple's VisionKit on your iPhone. Only the finished scan you choose to save is uploaded.
• Camera: the app uses the camera only when you choose to scan a document or take a pet photo.
• Photos: the app uses Apple's photo picker, so it sees only the photos you select, not your photo library.
• Calendar sync (optional, Premium) copies your pets' events one way into the iPhone calendar you choose. The app writes these events but does not upload the contents of your calendar to us. Once events are in your calendar, they are handled by Apple (and by any calendar account, such as iCloud or Google, that you sync that calendar with) under their own terms.
• Notifications: reminders are delivered through Apple Push Notification service and the notification system on your iPhone.
• Offline copy: the app keeps a copy of your household's data on your iPhone so it works without signal, and syncs changes when you are back online. This copy is removed when you sign out or delete the app.
• Usage statistics: any in-app usage counts stay on your device and are never sent to us or anyone else.

2.4 Data we do not collect

We do not collect your location (other than a postcode, if you choose to add one), your contacts, your health data, your browsing history, advertising identifiers (IDFA) or crash reports. Invitations are sent through the iPhone share sheet, so the app does not read your contacts.

3. Why we use your data and our legal basis

Data protection laws in the UK (the UK GDPR and the Data Protection Act 2018), the European Economic Area (the EU GDPR) and several other countries require us to have a legal basis for each use of personal data. We use the same bases for everyone:

Where we rely on legitimate interests, we have balanced our interests against your rights. You can object at any time (see sections 8 and 9).

We do not send marketing emails. If we decide to send them in future, we will ask for your consent first and you will be able to unsubscribe at any time.

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects. When Boop shows a note such as "consider contacting your vet" after a symptom is logged several times, this is a simple rule based on what you entered. It is not a diagnosis and has no effect on your account.

4. Who can see your data

Your household. Everyone in a household can see and edit the household's pets, events, check-ins, documents and expenses, and can see each member's name and what they completed. Only people who accept an invitation from the household can join. The household owner can remove members, and any member can leave.

Our service providers. We use a small number of companies to run Boop. They process data only on our instructions, under written contracts that require them to keep it secure and confidential:

Apple acts as an independent controller when it processes payments and your Apple Account. Its use of your data is covered by Apple's own privacy policy (apple.com/legal/privacy).

Other disclosures. We may share data if the law requires it, to protect the rights, safety or property of our users or others, or with a buyer or successor if our business is sold or reorganised. A buyer would have to respect this policy.

We do not sell your personal data, we do not share it with advertisers or data brokers, and we do not use it to track you.

When you share. If you share a PDF of your pet's record, or export your data, with a vet, sitter, kennel or anyone else, they are responsible for how they use it.

5. Where your data is stored and international transfers

Our servers run in London, United Kingdom. Our database, documents and photos are stored in Ireland, European Union. This applies to every user. If you live outside the UK and the EU, your data is transferred to these countries when you use Boop, and their data protection laws may differ from those where you live. We protect it as this policy describes wherever you are.

The UK and the EU each recognise the other as providing adequate protection for personal data, so data can move between our UK servers and our EU storage without further safeguards. If you are in the EEA, our UK processing relies on the European Commission's adequacy decision for the UK.

Fly.io, Supabase and Resend are companies based in the United States. Their staff may occasionally access our systems from outside the UK or EU, for example to provide technical support. Where that involves a transfer of personal data, we rely on the safeguards allowed by UK law, such as the UK Extension to the EU-US Data Privacy Framework (the "UK-US data bridge") where the provider is certified, or the International Data Transfer Addendum to the EU Standard Contractual Clauses. You can ask us for details of these safeguards at mekhakghapantsyan@gmail.com.

6. How we protect your data

• All connections between the app and our servers use encrypted HTTPS (TLS).
• Our database and stored files are encrypted at rest by our hosting providers.
• Passwords are stored only as secure hashes.
• Access to production systems is limited to the people who need it to run the service.
• Each household's data can be accessed only by its members.

No system is completely secure. If a personal data breach puts your rights at risk, we will tell you and the ICO as the law requires.

7. How long we keep your data

Households. If you leave a household, or the owner removes you, the household's shared pets and records stay with the household, because they belong to it. Your name may still appear on items you completed. If you delete your account, your name is removed from the items you completed. If you are the only member of your household, its pets, records and files are erased with your account. A household owner who has other members must hand ownership to another member before deleting their account.

8. Your rights

Everyone who uses Boop, wherever they live, can:

• Access their personal data and get a copy of it.
• Correct data that is wrong or incomplete. You can edit most of it yourself in the app.
• Delete their data, in Account › Data and privacy › Delete account.
• Export the data they gave us in a common machine-readable format, in Account › Data and privacy › Export data.
• Turn off permissions such as notifications, camera or calendar at any time in iPhone Settings.

To make a request, use the app or email mekhakghapantsyan@gmail.com. We may need to confirm your identity first. We will reply within one month (or sooner if your local law requires it). If a request is complex we may need longer where the law allows it, and we will tell you why. There is normally no charge. If we refuse a request, we will explain why and how you can challenge it.

If you are unhappy with how we use your data, please contact us first so we can try to put it right. You can also complain to a data protection regulator (see section 9).

9. Extra rights depending on where you live

United Kingdom. Under the UK GDPR you also have the right to restrict how we use your data in some circumstances, to object to uses based on our legitimate interests, and to withdraw consent where we rely on it. You can complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint, telephone 0303 123 1113.

European Economic Area and Switzerland. The EU GDPR (and the Swiss Federal Act on Data Protection) give you the same rights as in the UK paragraph above. You can complain to the data protection authority in the country where you live or work, or where you think the problem happened. A list of EU authorities is at edpb.europa.eu.

United States. Some US states, including California, Colorado, Connecticut, Virginia, Texas and others, give residents rights over their personal information. Depending on where you live, these include the right to know what personal information we collect, use and disclose, to get a copy of it, to correct it, to delete it, and to opt out of its "sale", "sharing" for targeted advertising, or profiling. We do not sell or share personal information, we do not use it for targeted advertising, and we do not profile you, so there is nothing to opt out of. We will not treat you differently for using your rights. You can use an authorised agent to make a request on your behalf, and if we refuse your request you can appeal by replying to our answer. In the last 12 months we collected the categories of information described in section 2 (identifiers, customer records, commercial information about your subscription, and the content you add), for the purposes in section 3, and disclosed them only to the service providers in section 4. We do not collect sensitive personal information as defined by these laws.

Canada. Under PIPEDA and provincial laws you can access and correct your information and withdraw consent. You can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca).

Australia and New Zealand. You can access and correct your information under the Australian Privacy Principles and the New Zealand Privacy Act 2020, and complain to the Office of the Australian Information Commissioner (oaic.gov.au) or the New Zealand Privacy Commissioner (privacy.org.nz).

Brazil. Under the LGPD you can confirm whether we process your data, access, correct, anonymise, port or delete it, get information about who we share it with, and complain to the ANPD (gov.br/anpd).

Other countries. Wherever you live, you can use the rights in section 8. If your local law gives you more rights, we will respect them. Contact us at mekhakghapantsyan@gmail.com.

10. Children

Boop is meant for adults who look after pets. You must be at least 13 years old to create an account, or older if the law where you live sets a higher age for using online services without a parent's consent (for example 16 in some EU countries). We do not knowingly collect personal data from children under 13, or under the age that applies in their country. If you believe a child has created an account without the consent their law requires, contact us at mekhakghapantsyan@gmail.com and we will delete it.

11. Website

Our website at https://boop-petcare.site does not use cookies, analytics or fonts and scripts from other companies, and only keeps the server logs described in section 2.2.

12. Changes to this policy

We may update this policy when the app or the law changes. We will change the "Last updated" date above. If a change is significant, for example a new type of data or a new service provider, we will tell you in the app before it takes effect. Earlier versions are available on request.

13. Contact us

Mekhak Ghapantsyan
Email: mekhakghapantsyan@gmail.com