Privacy notice

1. Status, scope and controller

This notice applies to the current invite-only PetPulse internal test. It describes the services enabled in the internal candidate, including Google Play licence-test billing. It is not the final notice for a public release, and PetPulse is not currently accepting public accounts or real-money test purchases.

PetPulse and Battlement Software are operated by Sam Kelly in England and Wales. Battlement Software is not currently a registered company or a separate legal entity. Sam Kelly is the controller for personal information processed through PetPulse.

PetPulse is for adults coordinating household pet care. It is an organisational tool, not a veterinary service or a substitute for professional veterinary advice, and it is not intended to hold human medical records.

2. Information PetPulse handles

• Account and profile information: email address, authenticated user ID, display name, profile image reference, account status and the recorded version of the adult-account confirmation.
• Household information: household name and time zone, invitations, membership, roles, access limits and activity history.
• Pet and care information: pet names, species, optional photos, care logs, notes, routines, responsibilities, medication details, health records and documents you choose to add.
• Device and service information: platform, app version, account-scoped synchronisation state, notification choices, device name, push token, delivery status and limited security or reliability records.
• Subscription information: PetPulse user ID, product, plan, store environment, entitlement and transaction status, purchase and expiry times, and the household selected for verified Pro access. PetPulse does not receive full payment-card details.
• Exports, reports and support: information you select for an export or report and the details you deliberately send when requesting support or deletion.

Other authorised members of a household can see information shared within that household, including who logged or changed an item, subject to their role.

3. Why information is used

Information is used to create and secure accounts; provide shared household features; synchronise care history and routines; preserve offline-safe changes; send notifications a user requests; manage Free and verified Pro capabilities; prevent duplicate or misassigned purchases; diagnose service failures; respond to support; and meet legal obligations.

Core account, household and billing processing is necessary to provide the service requested during the test. Security, reliability and limited service-improvement processing relies on the legitimate interest in operating and protecting the test where appropriate. Optional device permissions remain under device controls. The current internal candidate has no advertising or behavioural-analytics SDK.

4. Service providers and international processing

PetPulse does not sell household information or use it for third-party advertising. The current internal candidate uses:

• Supabase for authentication, database, file storage, realtime updates and server functions;
• RevenueCat for Google Play subscription status and entitlement reconciliation. PetPulse sends the authenticated PetPulse user ID and store transaction state, not pet or household records;
• Google Play for Android distribution, licence-test purchases and subscription management; and
• Expo and Google Firebase Cloud Messaging for app builds and updates and, when enabled, push-token routing and notification delivery.

These providers can process information outside the UK under their applicable contractual and legal safeguards. Information may also be disclosed where law requires it, to protect users and the service, or when you deliberately choose another person or app as the recipient of an invitation or export.

5. Household sharing and exports

PetPulse is a shared service. Current household members can see records allowed by their role. Owners manage membership and access. Leaving or being removed ends current access but does not erase legitimate shared care history needed by the remaining household.

Files shared outside PetPulse leave its access controls. The person sharing a JSON, CSV or PDF is responsible for the recipient and channel. A shared file can be forwarded and cannot be remotely revoked by PetPulse.

6. Your choices and account deletion

You can change profile, pet, routine and notification settings in the app. Device permissions for photos and notifications can be withdrawn in Android settings. Household owners can manage membership.

Account deletion is available at More → Account → Delete account. A sole household owner must first transfer ownership or delete the household when nobody else needs its shared records. Renewable, resumable, pending or unverified store billing can block deletion until it is safely resolved.

Deleting a PetPulse account does not cancel a Google Play subscription. Stop renewal separately through PetPulse Pro management or Google Play before deleting the account. If you cannot sign in, use the external PetPulse deletion request.

7. Retention and deletion effects

Account and ordinary service information is kept while it is needed to operate the account and household. PetPulse invitation links expire after seven days. Pro report source snapshots expire after 24 hours. Completed notification-delivery records are eligible for scheduled deletion after 30 days, or 90 days for dead-letter outcomes.

Successful account deletion removes the Auth login and profile, active memberships, notification preferences and registered devices. Shared care outcomes can remain for other household members, but retained member audit records remove the deleted account ID and replace the display name with “Former household member”. Matching routine responsibility names and IDs and accepted invite emails are removed. Live report snapshots that could retain the deleted member’s name are invalidated, and retained care-notification bodies replace that name with “A household member”.

Limited billing identity and lifecycle history may remain where needed to reconcile delayed store events, prevent an unsafe billing identity from being recreated, meet legal obligations or handle a dispute. Provider backups and security records may persist for their bounded operational cycles.

8. Security

PetPulse uses encrypted network connections, authenticated accounts, private server-owned billing records, household-scoped database rules and account-scoped local caches. Sensitive provider credentials are not included in the mobile app. No service can promise absolute security, so use a unique password, protect your device and report suspected misuse promptly.

9. Age requirement

PetPulse accounts are only for people aged 18 or over. Account creation and first use require the current adult-account confirmation. Household labels such as Owner, Manager, Member and Pet sitter are permission levels for adult account holders; PetPulse does not provide child profiles.

10. Your data-protection rights

Depending on the circumstances and lawful basis, UK data-protection law may give you rights to access, correct or erase personal information, restrict or object to processing, receive certain information in a portable format and withdraw consent where consent is used.

Use the Battlement privacy contact form to make a request. Do not send a password, full receipt, purchase token, payment-card details or private pet records. Identity and household relationship may need to be verified. UK users can also complain to the Information Commissioner’s Office.

11. Changes and contact

This internal-test notice will be updated when the candidate’s data practices change. A separately reviewed public-release notice will replace it before PetPulse accepts public accounts or public purchases.

For privacy questions, use the privacy contact form. For support, use PetPulse support. The general website has a separate website privacy notice.