Privacy Policy — Tendpaw App

1. Scope and operator

This Privacy Policy describes how Tendpaw ("we", "us") processes data when you use the Tendpaw app on iOS or Android (the "App"). The separate policy at tendpaw.com/en/privacy covers the public website.

Tendpaw is operated in Vietnam. We process data in accordance with Vietnamese law applicable to our activities, including the Personal Data Protection Law No. 91/2025/QH15.

2. Data we process

Account data: email, display name, a phone number if you choose to verify one for AI access, and information needed to authenticate through email, Google, or Apple.

Pet and health data: name, species, breed, birth date, sex, weight, photos, medical notes, symptom logs, vaccinations, medications, and other information you enter.

AI screening data: symptom descriptions, answers, images you submit when supported, AI results, reports about an answer, and technical information needed for safety review.

Location and clinics: precise device coordinates when you grant permission, or an address/location you select manually, to find and rank nearby clinics. You can deny location permission and enter a location manually.

Bookings: the clinic, pet, preferred time, notes, and any AI report you choose to attach.

Device and security data: device platform, push-notification registration token, IP address, and session data needed to sign you in, prevent abuse, and operate the service.

3. How we use data

To provide accounts, pet profiles, health logs, reminders, AI screening, clinic search, bookings, data export, and user support.

To authenticate users, maintain sessions, protect accounts, limit abuse, and address operational failures.

To assess AI quality and safety using technical logs with limited identifying data, and to respond to legal obligations or valid authority requests where applicable.

4. Consent and controls

The App records choices concerning profile data, health photos, the AI notice, location, and clinic sharing. Operating-system permissions such as location and notifications are used only after you allow them.

You can change these choices under Data & Privacy or in your operating-system settings. Disabling a permission may stop the feature that depends on it without locking unrelated parts of the App.

5. Artificial intelligence and pet-health data

Tendpaw uses DeepSeek to process text AI-screening requests. The content needed for a request is sent to that provider to produce a result. Do not include unnecessary personal information in symptom descriptions.

AI results are preliminary reference information, not a diagnosis, prescription, or replacement for a veterinarian. In an emergency, contact or take your pet to an appropriate veterinary facility immediately.

6. Service providers and sharing

We do not sell personal data. We share only the data needed by service providers to operate Tendpaw.

Current providers include Google Firebase (authentication and push notifications); DeepSeek (AI processing); Mapbox (maps, addresses, and travel times); Resend (login and service emails); Render (application servers); Neon (database); Upstash (temporary data and rate limiting); and Cloudflare (DNS, website delivery, and file storage when configured).

Google and Apple process data under their own policies when you use social sign-in. When you make a booking or choose to attach a report, relevant data is shared with the selected clinic to handle the request.

We may disclose data where required by law or where necessary to protect safety, legal rights, and service integrity.

7. Processing outside Vietnam

Some providers above operate infrastructure outside Vietnam, so necessary data may be processed across borders. We limit what is sent to each service's purpose and apply reasonable safeguards within our control.

8. Retention

Account, pet, and health data is kept while your account is active or until you delete it, except where data must be retained longer for legal, safety, or transaction-integrity purposes.

Raw AI inputs and outputs are assigned a maximum 30-day lifetime and are removed sooner when you delete your account. AI activity logs with reduced identifying data may be retained longer for safety review and compliance.

After deletion, some booking, credit, payment (if any), and audit records may remain linked only to an anonymized user ID where needed for legal obligations, fraud prevention, or reconciliation. Backups expire under infrastructure-provider schedules and are not used to restore a deleted account.

9. Export and account deletion

You can request an export from the App's Data & Privacy screen.

You can delete your account from Settings or Data & Privacy. After confirmation and any required Google or Apple reauthentication, Tendpaw immediately anonymizes the account: email, phone, and name are replaced with non-identifying values; pet names, photos, and sensitive notes are removed or scrubbed; devices, notifications, export files, AI-support reports, and raw AI content are deleted; and sessions are revoked.

Deletion cannot be undone. You may later register with the same email, but old data will not be reconnected to the new account.

10. Your rights

Depending on applicable law, you may request information, access, a copy, correction, or deletion of data; withdraw consent; restrict or object to processing; and complain to a competent authority.

Some requests require identity verification. We may deny or limit a request where the law permits or where fulfilling it would affect another person's rights.

11. Security and children

We use TLS connections, expiring session tokens, access controls, and appropriate technical measures to protect data. No system can eliminate every security risk.

Tendpaw is intended for people aged 16 and over. We do not knowingly offer accounts to children below this age. A parent or guardian may contact us if they believe a child has provided data to Tendpaw.

12. Policy updates

We may update this Policy to reflect changes to the App, providers, or law. The latest version and update date are always posted at tendpaw.com/en/app-privacy. For material changes, we will provide notice in the App or through an appropriate contact channel.