In short
Kartella Pets does not collect your data. There is no account, we run no server, and the app does not transmit what you enter. There is no analytics SDK and no advertising SDK in it.
What is stored on your device
Owner names, addresses and contacts; pet details; care instructions; visit records and photos; agreements and signatures; key tags; and key locations, door codes and alarm codes. All of it is what you typed in.
Key locations, door codes and alarm codes are encrypted on the device with AES-GCM. The encryption key is held in this device's Keychain only, so restoring a device backup onto another phone does not restore those fields.
Location data in photos
Location data (EXIF GPS) is stripped from every visit photo before it is saved, so a photo taken at a client's home does not carry their coordinates.
Device capabilities the app uses
- Camera — to add a photo to a visit record.
- Face ID / Touch ID — to unlock the app and to confirm it is you before key locations and door codes are shown. Biometric data itself is handled by iOS; the app never receives it.
- Notifications — for vaccination expiry and care reminders. Permission is requested the first time you turn a reminder on.
Choosing an existing photo uses the iOS photo picker, so the app does not ask for access to your whole library. It does not request location, contacts, calendar, microphone or health data.
Device backups
Your client records are part of the iOS device backup, like other apps' data. That is how iOS works and Kartella Pets does not change it. As noted above, the key details are the exception, because their encryption key never leaves this device.
Exported files
You choose where an exported file goes. If you save it to a cloud service, that service's handling applies. That choice is yours; the app never sends anything on its own.
Supporting owners' requests
For when an owner asks a sitter for a copy or for deletion, the app offers a single-client export and two kinds of deletion: remove the personal details only, or delete everything.
Not directed to children
This is a business app and is not designed for children.
Changes
If this policy changes, this page is updated.
Contact
Controller, contact and your rights
This app is provided by freetokyo, an independent developer, who acts as the data controller. For any question about this policy or about personal data, contact freetokyo2020@yahoo.co.jp. We normally reply within five business days.
If you are in the EU, the EEA or the UK, the GDPR gives you the right to access, rectify, erase, restrict and port your personal data, to withdraw consent and to object to processing. You may also lodge a complaint with your national supervisory authority.
If you are a California resident, the CCPA/CPRA gives you the right to know, delete and correct the personal information collected about you, and to opt out of its sale or sharing. We do not sell or share personal information.
Where this app stores data only on your device, we have no access to it, so most of these rights are exercised directly on the device: delete or export inside the app, or delete the app. We will still answer any request you send us.
Retention: on-device data is kept until you delete it or remove the app. Support emails are deleted 24 months after the request is closed.