Privacy Policy
This is a translation for your convenience. If there are differences, the German version is the binding one. This policy explains which data the "Tendra Pets" app processes, for what purpose, and what rights you have. It applies both to use without an account and to the optional account feature with cloud sync.
1. Controller
Tristan Ulrich
Brucker Straße 24
8101 Gratkorn, Austria
Email: [email protected]
2. General
Tendra Pets is primarily a local app: without an activated account your data does not leave your device. Only if you voluntarily choose an account is data additionally transmitted, encrypted, to our cloud provider so that it is available across devices and is not lost. The app can be used by private pet owners and — once approved — by animal shelters in "shelter mode"; the latter unlocks additional features (see sections 3.5 and 3.6).
3. Which data we process
3.1 Account data (only with an activated account)
- Email address
- Password (stored only as a hash, never in plain text)
- Time of registration, sign-in history (technical, for session management)
3.2 Pet data you enter
This is the main purpose of the app: you use it to manage the data of your pets or of the animals in your shelter. Among other things you can enter the following:
- Name, species, breed, date of birth, microchip number, traits, photo of the animal
- Vaccinations and vaccination reminders, vet appointments, vet practice contact details
- Illness histories with diary notes
- Feeding plan, food/litter stock, weight history
- Costs (food, litter, vet, other), supplies checklist, care tasks
- Further photos in the animal's gallery
3.3 Profile data
As a pet owner, optionally your name and phone number; in shelter mode the organisation's name, address and phone number as well as a profile photo. Depending on the features described below, some of this information is deliberately displayed (e.g. vet contact card, public adoption list).
3.4 Handing over a pet by QR code
If you hand over a pet to another Tendra Pets account using the "Hand over pet" feature (e.g. sale, adoption), the complete record of this one animal is made available on the server for a short time via a one-time code and copied into the target account when scanned. General data that is not specific to the animal (e.g. your profile) is not transferred; the animal's vet practice details are transferred because they belong to the animal.
3.5 Shelter application
If you want to use the app in shelter mode, you can submit an application with the name of your organisation and a way to contact you. We review and approve this application manually; there is no automatic access to shelter features without this review.
3.6 Public adoption list (approved shelters only, optional)
As an approved shelter you can voluntarily set up a public link through which a list of your animals currently ready for adoption can be viewed without signing in. Via this link — only for animals with the status "Ready" — the animal's name, species, breed, age, traits and photo as well as your shelter's name, address and phone number are made publicly visible. Not publicly visible are: internal notes on applicants, microchip number, vet data and pick-up/treatment dates. This feature is purely optional (you must actively set it up) and can effectively be deactivated at any time by changing the link. The page itself is delivered by our hosting partner Cloudflare (Cloudflare, Inc.); the animal data is fetched directly from our database without being stored permanently at Cloudflare.
3.7 Biometric app lock
If you activate the Face ID / fingerprint lock, your device checks the authorisation directly via the operating system interface (Apple/Google). Tendra Pets itself has no access to your raw biometric data — the app only receives the result "successful" or "failed".
3.8 Reminders (local, without data transfer)
Reminders for feeding, vaccinations, medication and vet appointments are implemented as local notifications scheduled on the device. No data is transmitted to a server — the reminder is triggered exclusively on your own device. The only exception are the household notifications (section 3.16).
3.9 Export features
You can export your data yourself at any time as a backup file (JSON) or as a table (CSV) and pass it on, e.g. by email or file storage. This only happens through your own active choice.
3.10 Cloud storage (only with an activated account)
All the pet and profile data mentioned above — only if you actively choose an account — is additionally stored, encrypted, with our infrastructure partner Supabase (server location Frankfurt am Main, Germany/EU), including the photos you upload. Supabase processes this data exclusively on our behalf as a processor (Art. 28 GDPR) and not for its own purposes.
3.11 Device identifier for the free trial
You start the free 7-day trial via the App Store or Google Play; their privacy policies apply. For installations that still use the earlier trial running inside the app itself, and so that a trial cannot be restarted any number of times by reinstalling, the app additionally reads a device identifier — on Android the device's Android ID, on iOS a random identifier generated once by the app itself and stored in the Keychain, which is not an Apple device identifier — and transmits it to our server, where only the start time of the trial for this identifier is stored. This identifier is used exclusively for this purpose, not for advertising, not for tracking across apps and not passed on to third parties.
3.12 Subscription
For use as a pet owner, the app offers a subscription after the 7-day trial. The purchase is handled by Apple (App Store) or Google (Play Store); we do not receive your payment details. To manage the subscription we use the service RevenueCat. A user identifier (after sign-in the internal account ID, before that an anonymous identifier generated by RevenueCat), the store's purchase receipt and the resulting subscription status (active, expired, trial) as well as technical information such as app version and operating system are transmitted there. Your email address, name or pet and contact data are not transmitted to RevenueCat. The data is used exclusively to determine whether your access is unlocked and to restore a purchase on a new device. If you have questions about your subscription, you can give us the "Support ID" shown in the app so that we can match your purchase.
3.13 Crash reports
If the app crashes or a technical error occurs, the app may send an error report to our service provider Sentry. The report contains technical information (app version, device model, operating system version, error message and program flow at the time of the error). We do not transmit an IP address, user account, names or the content of your pet or contact data; screen contents are not recorded. The reports are used exclusively to find and fix errors, are not used for advertising or tracking and are stored in Sentry's EU data centre (Germany). No crash reports are transmitted in the web interface for shelters.
3.14 Anonymous usage statistics
So that we understand whether the app makes it easy for new users to get started, it counts which steps are reached after installation — for example "first launch", "first pet added", "first feeding time added", "account created", "subscription page shown" or "app still in use after 3 or 7 days". Each step is counted only once per installation.
For this, the app generates a random installation identifier on first launch, which is used exclusively for these statistics. It is not linked to your account, your name, your pet or contact data or the device identifier from section 3.11. Only this identifier, the step reached, the platform (iOS, Android or web), the app version and the time are stored, in our database at Supabase (EU/Frankfurt). We do not store an IP address for this and only evaluate the data in aggregate (e.g. "how many new installations added a pet"), not for advertising or profiling. If you delete and reinstall the app, a new, unlinked identifier is created.
3.15 Pet sitter share
If you create a pet sitter share, the app generates a code for the animals and period you choose. Anyone who enters this code in the app can, during this period (plus one day before and after), see the feeding times, medication, due care tasks, the vet contact and your message to the sitter for these animals and mark them as done. These markings are stored in your account. Other data (e.g. documents, costs, addresses) cannot be accessed via the code. The sitter does not need an account. The share ends automatically after the period or immediately if you end it in the app. Therefore only give the code to people you trust with your pet.
3.16 Sharing your household and push notifications
With "Share household" you can give housemates or family a code. They see the same information as a pet sitter (section 3.15), just without an end date, and can tick off feeding and medication. Their first name is shown next to the ticks so everyone can see who has already fed.
So that the others get a notification (e.g. "Anna fed Balu"), the app stores your device's push identifier (Expo push token) on our server at Supabase (EU/Frankfurt): for the owner together with the account ID and platform, for household members together with the share code. This only happens if you have allowed notifications on the device. When something is ticked off, our server sends a short notification with the pet's name, the person's first name, the kind of task and the time via the push service of Expo (650 Industries, Inc.) to Apple or Google, who deliver it to the other household members' devices. The push identifier is only used for this, not for advertising or tracking. Once a household share has ended, no more notifications are sent to the identifiers linked to it; the identifiers are deleted together with the owner's account. You can turn notifications off at any time in the app's or your device's settings.
4. Purposes and legal bases of processing
| Purpose | Legal basis |
|---|---|
| Providing the app's core features (pet management, reminders etc.) | Art. 6(1)(b) GDPR (performance of a contract) |
| Account creation, sign-in, cloud sync | Art. 6(1)(b) GDPR, consent by actively creating an account |
| Public adoption list | Art. 6(1)(a) GDPR (express, active consent by setting up the link) |
| Reviewing shelter applications | Art. 6(1)(f) GDPR (legitimate interest in preventing misuse) |
| Device identifier to protect the free trial against misuse by reinstalling | Art. 6(1)(f) GDPR (legitimate interest in preventing misuse) |
| Anonymous usage statistics to improve getting started with the app (section 3.14) | Art. 6(1)(f) GDPR (legitimate interest in an understandable, easy-to-use app) |
| Pet sitter share (section 3.15) | Art. 6(1)(b) GDPR (feature you actively requested) |
| Sharing your household and push notifications (section 3.16) | Art. 6(1)(b) GDPR (feature you actively requested); notifications only with your permission on the device |
| Crash reports for fixing errors and app stability | Art. 6(1)(f) GDPR (legitimate interest in a stable, error-free app) |
| Managing your subscription (subscription status, restoring purchases) | Art. 6(1)(b) GDPR |
| Legal obligations (e.g. accounting) | Art. 6(1)(c) GDPR |
5. Recipients and third-party providers
- Supabase Inc. — hosting of the cloud database and file storage (EU/Frankfurt), processor
- Expo/EAS (650 Industries, Inc.) — infrastructure for app delivery and app updates, and delivery of household notifications (see section 3.16)
- Functional Software, Inc. (Sentry) — receiving and analysing crash reports (mobile app only, stored in the EU data centre, see section 3.13), processor
- Cloudflare, Inc. — hosting of the public adoption list page (only if the feature is activated, see section 3.6)
- RevenueCat, Inc. — managing and verifying subscriptions (see section 3.12), processor
- Apple Inc. or Google — payment processing, providing the app via the respective store and delivering push notifications; Apple's or Google's privacy policies apply
Some of the service providers mentioned (e.g. RevenueCat, Expo, Cloudflare, Apple, Google) are based in the USA. Where data is transferred to the USA, the transfer is based on the EU Commission's standard contractual clauses or the adequacy decision for the EU-US Data Privacy Framework. Sentry crash reports are stored in the EU data centre.
6. Storage period
Your data is stored as long as your account exists. If you delete an entry, it is removed locally immediately; on the server it is first marked as deleted (technical safeguard against sync errors) and then removed permanently. If you delete your account completely, your data stored on the server is deleted as well. The entries of the anonymous usage statistics (section 3.14) have no link to your account and are deleted no later than 24 months after they were recorded.
7. Your rights
Under the GDPR you have the right to:
- Access to the data stored about you (Art. 15)
- Rectification of inaccurate data (Art. 16)
- Erasure ("right to be forgotten", Art. 17)
- Restriction of processing (Art. 18)
- Data portability (Art. 20) — possible yourself at any time in the app under Settings > Export data
- Objection to processing (Art. 21)
- Lodge a complaint with a supervisory authority, in Austria the Data Protection Authority (dsb.gv.at)
To exercise your rights, an informal message to the contact email address above is enough.
8. Data security
Transfer to the cloud is encrypted (TLS). At database level, so-called row-level security ensures that every user can technically access only their own data — the only exception is the public adoption list you activate yourself (section 3.6), which can additionally only be set up after a manual shelter approval checked on the server. The biometric app lock additionally protects against unauthorised local access to the device.
9. Changes to this policy
We adapt this policy as soon as data processing changes (e.g. through new features or service providers). The current version is always available via the link in the app or in the store listing.