Privacy notice

Last updated: 27 August 2026

Who is responsible?

The controller of VetMemo is Zoltán Kovács (Österreich), at vetmemo@vetmemo.at. VetMemo is a private, non-profit service, not a company.

What data do we process?

Account: first name, last name, email, password hash (we do not store the password itself), a temporary token for email confirmation, optional second-owner email (own password, same account, reminders). Pets: name, species, breed, birth date, chip, allergies, notes, photo, vaccination booklet photo, weight entries, annual check-up date, public sheet token (QR for the clinic). Treatments: title, dates, repeat interval, optional medicine, dose, clinic name and phone, optional photos of the medicine and vaccine sticker. Optional: email reminder setting, browser push subscription. Language cookie and login session. After failed logins we briefly store IP and email against brute force. When you search for vets or shelters, GPS, a typed address (town, optionally street and house number), or — if GPS is unavailable (e.g. iPhone Home Screen icon) — an approximate town from the network IP is used once for the map lookup and is not stored on your account. Amounts and dates of support received are stored without names for the monthly hosting goal (the counter resets on the 1st of each month). Supporting owners may get a paw by their name; the first name can appear on the support page; when you are signed in you also see your own full name there. Payment happens at Revolut or your bank.

Why, and on what legal basis?

The account and pet calendar are needed to provide the service (GDPR Art. 6(1)(b)), including confirming the email address. Email reminders follow your setting; push needs browser permission (consent, Art. 6(1)(a)). Language and session cookies are needed to run the site (Art. 6(1)(f)). No ads, no sale of data, no marketing profiling.

How long?

For as long as the account exists. In Settings you can delete the account for good: profile, pets, photos and treatments are removed. The session ends at logout or when the browser closes — or 60 days on this device if you tick “Stay logged in”. The language cookie lasts at most one year.

Who else sees data?

In the app you only see your own records. Hosting and email: easyname GmbH, Austria. Town lookup: OpenStreetMap Nominatim. Nearby clinics/shelters: OpenStreetMap Overpass. Map and navigate links open Google Maps search or directions on your device (no Places API). VetMemo does not send your account to Google; after you tap, Google may process location under Google’s own terms. Push: your browser vendor’s notification service. Donations via Revolut or SEPA are handled by Revolut or your bank, not stored in VetMemo’s database.

Your rights

You may request access, correction, erasure, data portability, and object to processing based on legitimate interests. In Settings you can download your data as JSON and delete the account yourself. Write to vetmemo@vetmemo.at. You may complain to the Austrian data protection authority (dsb.gv.at) or the authority where you live.

Cookies

Only what the site needs: login session (HttpOnly) and the language you chose. On a first visit we may use the browser language, or if that is unclear the country of your IP (AT/DE → German, HU → Hungarian); we do not store the IP on the account. No tracking, no third-party ad cookies.

Photos and security

Pet, booklet and treatment photos are resized and stored on the host. Passwords are hashed. The host runs the database; anyone with hosting access can technically read stored data. Fields in the database are not encrypted one by one.