Privacy Policy

1. Information CovePet stores

CovePet stores information you choose to provide so the product can organize your pet’s care history. This can include:

• Account details such as your name, email, and contact preferences.
• Pet profiles, baseline health context, and vet contact details.
• Symptoms, behavior changes, medications, diet changes, reminders, and visit notes.
• Photos you attach to a health update.
• Vet summary links and the sharing choices connected to them.
• Household invitations, caregiver membership, and who added or completed shared records.
• Linked sign-in providers and public passkey credential records used to protect account access.
• Subscription provider, plan status, renewal status, and limited billing identifiers used to verify access and prevent an App Store purchase from being linked to the wrong CovePet account.

6. Household access

A household owner can invite caregivers to view and update every current and future pet in that household. Caregivers can add health notes, manage reminders, update pet details, and prepare vet summaries. CovePet records who makes shared changes. The owner can remove a caregiver, and a caregiver can leave at any time.

2. How CovePet uses information

CovePet uses this information to authenticate your account, save and display your records, show care that is due, prepare vet summaries, provide support, and protect access to the service.

Timeline titles, notes, medication names, pet names, and other private health context are not sent to marketing analytics.

3. Cookies and optional analytics

CovePet uses essential session cookies to keep you signed in and protect account access. If essential cookies are disabled, signed-in parts of CovePet may not work correctly.

If you allow analytics, CovePet uses Google Analytics on public and account-entry pages to understand visits, guide use, and signup progress. Analytics is off until you allow it, advertising storage stays disabled, and private pet-health or account form fields are never included. You can reopen Analytics preferences from the footer at any time.

4. Storage and service providers

CovePet runs on Cloudflare Workers. Account and pet records are stored in Cloudflare D1. Attached photos and shared vet summary PDFs are stored in Cloudflare R2. Better Auth manages account sign-in and session records.

If you choose Sign in with Apple, Apple confirms your identity and may provide either your email or an Apple private relay address. If you choose Google, Google confirms your identity and provides your basic profile and verified email. CovePet does not request access to Gmail, Drive, Calendar, contacts, or other Google data. If you add a passkey, CovePet stores the public credential needed to verify it. Your biometric data and private passkey never leave your device or password manager and are not received by CovePet.

Stripe processes web subscription payments. Apple processes subscriptions purchased in the iPhone or iPad app. CovePet does not receive your full card number or App Store payment credentials. CovePet verifies signed subscription status and stores normalized billing identifiers needed to provide access, process renewals or revocations, prevent duplicate account links, and support billing recovery.

These providers process information only as needed to operate the service. CovePet may also disclose information when required by law or to protect the safety and integrity of the service.

5. Sharing a vet summary

When you create a shared vet summary, anyone with its link can open that summary. You can review active links and revoke access at any time. Revoking a link stops future access through that URL.

7. Retention and deletion

CovePet keeps your active account information so it can provide the service. Deleting your account removes your active profile, pet records, attached photos, shared vet summaries, and sign-in records from CovePet’s active systems.

If an App Store subscription has been linked to the deleted account, CovePet retains only keyed, non-readable digests of the account token and original transaction identifier for 400 days. This prevents the same subscription from being silently attached to another account and supports a verified recovery request through one complete annual renewal cycle. Raw signed notification payloads are normally removed 30 days after processing. Payloads still pending or retrying may remain until they are resolved. Normalized billing status, non-readable identifiers, and audit records may be retained as needed for payment integrity, fraud prevention, legal obligations, and support.

8. Your choices and requests

You can update account and pet information, download a portable data export, revoke shared links, delete individual pet records, or delete your account from CovePet. You may also ask to access or correct information connected to your account.

9. Changes to this policy

CovePet may update this policy as the product and its privacy practices change. The latest revision date will always appear at the top of this page.

10. Contact

For privacy questions, access or correction requests, or concerns about how CovePet handles information, email hello@covepet.com.