Privacy, in plain language.

1. Scope and who is responsible

This Privacy Policy applies to the Voffi mobile application, Voffi’s marketing website, and the Voffi caregiver web experience (together, the “Services”). “Voffi,” “we,” “us,” and “our” refer to the provider identified for Voffi in the applicable app distribution listing.

For privacy questions or requests, email privacy@voffiapp.com. If a local law treats us as a controller or business, we act in that role for the information described here. Household owners and users may also be responsible for information they choose to enter about family members, caregivers, veterinarians, emergency contacts, and other people.

2. Information we process

Account and profile information

This may include your email address, display name, authentication identifier, profile image, country, language and unit preferences, verification state, and sign-in provider. If you use Sign in with Apple or Google Sign-In, the provider shares information according to your choices and its policies.

Household, member, and caregiver information

This may include household names, membership, roles, invite and caregiver pass details, recipient email or phone number, access dates, selected pets, assigned tasks, permissions, care instructions, and activity performed through a pass. Caregiver invite codes work like bearer credentials: anyone with a valid code may be able to claim the related access, so keep them private.

Pet profiles and everyday care

This may include a pet’s name, photo, species, breed, sex, birth or adoption date, weight, microchip details, allergies, notes, meals, ingredients, serving sizes, routine completion, habitat or litter care, goals, appointments, and other care events.

Health and care records

This may include medication and supplement schedules, dose-completion history, vaccine records, symptoms and observations, weight trends, provider details, insurance information, emergency contacts, and uploaded files. Some weighing workflows may include an optional human body-weight entry used to calculate a pet’s weight. Voffi is a consumer organizer, not a healthcare provider, and these records are not a substitute for a veterinarian’s medical record.

Calendar, reminders, photos, and documents

This may include titles, notes, dates, recurrence, reminder settings, addresses or locations, assignments, attachments, profile and activity photos, walk photos, file names, document types, and files you upload. Photos Voffi re-encodes may lose original camera metadata; other uploaded documents may retain metadata embedded in the file.

Location, walks, and live sharing

When you start a walk or use another location-based feature, Voffi may process precise and approximate location, timestamps, route points and segments, altitude or elevation, speed, course, accuracy, pauses, saved places, event coordinates, distance, duration, and route previews. With permission, recording can continue in the background while a walk is active. Live sharing is optional and makes current walk information available to authorized household members or caregivers for a limited period.

Device, notification, usage, and diagnostics information

This may include push-notification tokens, a device installation identifier, device and platform details, app version, notification settings, feature opens, subscription or paywall interactions, upload-size and count buckets, read/write count buckets, errors, crash and performance data, IP address, browser or device information, and fraud-prevention signals such as App Check attestations.

Purchases and advertising information

Apple processes payment credentials for App Store purchases. Voffi and its subscription provider may receive product, store, entitlement, transaction, renewal, expiration, and purchase-history information linked to your Voffi account. On the free tier, advertising services may process device or advertising identifiers, coarse location, ad interaction, product interaction, and diagnostics, depending on device settings, region, consent configuration, and provider behavior.

Information from support and website use

If you contact us, we process the message, contact details, attachments, and technical context you provide. The public marketing pages do not intentionally set non-essential analytics cookies in the current implementation, but Firebase Hosting and network providers may receive ordinary request logs such as IP address, requested URL, browser, and time. The caregiver portal uses essential browser storage to keep its Firebase authentication session. On a shared device, that session may persist until access expires, is revoked, or browser data is cleared.

3. How and why we use information

We use information to:

• create and secure accounts, households, roles, invitations, and caregiver access;
• store, sync, display, and back up pet profiles and care records;
• provide calendars, reminders, notifications, walk recording, maps, live sharing, uploads, trends, goals, and subscription features;
• personalize units, language, species-aware templates, and the current pet or household context;
• process purchases, verify entitlements, restore access, and prevent duplicate or fraudulent transactions;
• serve and measure advertising where enabled;
• monitor reliability, diagnose failures, prevent abuse, enforce limits, and protect accounts and infrastructure;
• respond to support, privacy, safety, and legal requests; and
• comply with law, resolve disputes, and enforce our Terms.

Where a legal basis is required, we rely on performance of our contract with you, our legitimate interests in operating and protecting the Services, consent where the law or platform requires it, and compliance with legal obligations. You may withdraw consent through device or in-app settings where applicable, without affecting earlier processing.

4. When information is visible or shared

Your household

Household members may see shared pet profiles, plans, care history, photos, documents, walks, and other household information according to their role and the product’s access rules. Removing a person stops future authorized access but does not control copies they already made.

Caregivers and invited people

A household owner can choose what a caregiver pass permits, which may include selected pets, tasks, medication information, instructions, recent activity, active walks, and separately enabled home-entry, veterinary, or emergency details. Codes and claim links should be shared only with the intended person. When using a shared browser, clear site data after the pass is no longer needed.

Live walks and shared exports

If you enable live sharing or export a walk card, chosen walk information is made available to the people or destination you select. Route endpoint privacy changes the route information shown in supported sharing surfaces; it does not mean the underlying household route record was never stored.

Leaderboards

If leaderboard visibility is enabled in settings, a public leaderboard entry may display a pet’s name, avatar, species or breed, country, activity totals, and recent-walk information to signed-in Voffi users. This setting may be enabled by default. You can turn leaderboard visibility off in Voffi settings.

Legal, safety, and business reasons

We may disclose information when reasonably necessary to comply with law or valid legal process; protect users, animals, the public, or the Services; investigate abuse or fraud; establish or defend legal claims; or support a merger, financing, acquisition, restructuring, or sale, subject to appropriate notice and safeguards.

5. Service providers and external services

Voffi uses service providers that process information on our behalf or under their own terms, including:

• Google Firebase for authentication, databases, file storage, server functions, realtime features, push messaging, hosting, remote configuration, reliability, analytics, performance, crash reporting, and abuse prevention;
• Apple for Sign in with Apple, App Store and StoreKit purchases, push notifications, device location and photo capabilities, and Apple maps or search features;
• Google for Google Sign-In and Google Mobile Ads;
• RevenueCat for subscription entitlement and purchase-state management;
• Mapbox for map display, route visualization, and elevation-related features; and
• Unsplash for certain remotely loaded onboarding imagery, which can receive ordinary network request information.

Invitations may also use a transactional email-delivery service configured with Firebase. Provider terms and privacy practices apply to their processing. Information may be processed in the United States and other countries where we or these providers operate; those countries may have different data-protection laws. Where required, we use recognized transfer mechanisms or other lawful safeguards.

6. Advertising, analytics, and tracking choices

The free tier may display Google Mobile Ads. Advertising SDKs can use device or advertising identifiers and interaction information for delivery, measurement, fraud prevention, and, depending on configuration and your choices, personalized advertising. Device settings and regional consent prompts may provide additional controls.

Voffi includes code and SDKs capable of recording product analytics, crash, and performance information. Production behavior can vary by build and configuration. We do not sell personal information for money. Some laws define advertising disclosures as a “sale,” “sharing,” or targeted advertising even without payment. Where those laws apply, you may request the applicable opt-out by contacting privacy@voffiapp.com and by using available device or in-app controls.

7. Retention, deletion, and security

We keep information for as long as reasonably necessary to provide the Services, maintain household records, meet security and legal obligations, resolve disputes, and enforce agreements. Different records have different lifecycles. Live-sharing data is designed to be short-lived after a session ends, while care history, uploaded files, household contributions, and purchase or security records may remain longer. Cached information may also remain on a device until the cache, browser storage, or app data is cleared.

We do not currently publish one fixed retention period for every system. When a verified deletion request is completed, we delete or de-identify information that is no longer needed, subject to shared-household integrity, fraud prevention, transaction records, legal requirements, and backup rotation. See Delete your account before using the in-app identity-deletion control.

We use access rules, authentication, encrypted network transport provided by our platforms, service-provider controls, device attestation where configured, bounded permissions, and operational safeguards. No system is perfectly secure. Voffi is not end-to-end encrypted, and an invite link, download link, shared export, or unlocked device can create access outside the app’s ordinary permission model.

8. Your choices and privacy rights

You can manage many choices in Voffi and iOS settings, including notifications, location, photos, household membership, caregiver access, live sharing, route privacy, leaderboard visibility, and subscription management. Depending on where you live, you may also have rights to:

• know, access, or receive a copy of information about you;
• correct inaccurate information;
• delete information, subject to lawful exceptions and shared records;
• restrict or object to certain processing;
• withdraw consent;
• opt out of processing defined as sale, sharing, or targeted advertising;
• receive portable data where required; and
• appeal a denied request or complain to a relevant data-protection authority.

Send requests to privacy@voffiapp.com. We may need to verify your account and authority. Authorized agents may submit a request where local law allows, but we may request proof of authorization. We will not unlawfully discriminate against you for exercising a privacy right.

9. Children

Voffi is not directed to children under 13. You must meet the higher minimum age that applies where you live, and users below the age of legal majority must have permission from a parent or guardian. Do not create an account for a child or enter a child’s personal information without appropriate authority. If you believe a child provided personal information improperly, contact us so we can review it.

10. Changes to this policy

We may update this policy as the Services, providers, or laws change. We will post the revised date here and provide additional notice when a change is material and the law requires it. Continuing to use Voffi after an update means the revised policy applies from its effective date, subject to any consent requirement.

11. Contact

Privacy requests: privacy@voffiapp.com
General support: support@voffiapp.com

For your security, do not send passwords, sign-in codes, caregiver invite codes, payment card numbers, exact route coordinates, or full medical documents through ordinary email. We will tell you if a secure follow-up method is needed.