This policy explains what data Zovera collects, why, and the choices you have. The short version: your pet data belongs to you, it stays on your device unless you enable cloud sync, and we never sell it.
We do not run advertising trackers or sell personal data.
By default Zovera stores your data locally on your device (in your browser's IndexedDB storage). If you sign in, your records and your pets' profile pictures sync to our database (hosted on Supabase), protected by row-level security so only your account can read it.
On paid plans, other photos and vault documents are encrypted on your device (AES-GCM) before being backed up to our media storage (Cloudflare R2) — we store only the encrypted bytes. On the Free plan, photos other than the profile picture never leave your device.
If a paid plan ends and the account stays on the Free plan for more than 3 months, the photos and documents that were backed up to cloud storage may be deleted to free up space. Your records and other text data (health records, reminders, expenses, notes) are kept — only the stored image and document files are removed.
When you use the AI assistant or the memory book, the relevant text (pet context, your messages, dated captions) is sent to our AI providers — Groq (Llama models), with Google Gemini as a fallback — to generate a response. Photos for the memory book never leave your device — only dated text is sent. AI requests are not used by us to build profiles about you.
If you create a Vet QR for a pet, a Zovera-verified veterinarian who scans it (or enters its code) can view that pet's medical summary: species, breed, age, weight history, allergies, conditions, medications, and health records. Photos and your contact details are never included.
This sharing is entirely optional and under your control — you can pause or resume a pet's code at any time from the pet's profile, and it stops working if your paid plan lapses. Vets you share with may keep the pet's name in their patient list.
If you purchase a paid plan, payment is processed by Razorpay. We receive confirmation of your subscription status but never see or store your card or banking details.
If you enable reminder e-mails, we send them via our mail provider to the address you configured. You can switch this off at any time in Settings.
To exercise any right, e-mail zovera.support@gmail.com.
Synced data is kept while your account is active. Security logs are retained only briefly. Deleted records are tombstoned for sync consistency and then purged.
We use transport encryption (HTTPS), row-level security on the database, rate limiting, replay protection, and hardened security headers. No system is perfectly secure — please use a strong, unique password.
Zovera is not directed at children under 13 and we do not knowingly collect their data.
We will post any changes here and update the effective date. Material changes will be announced in the app.
Questions about this document? Write to zovera.support@gmail.com.
