Pawback

Privacy Policy

Last updated: 2026-07-27 · Effective: 2026-07-27

Pawback (the "App") helps families keep a daily record of life with their pet. What we hold on your behalf is, in practice, photos of your family and a log of your daily life. With that in mind, this policy describes as concretely as we can what we collect, what we use it for, where it is stored, when it is deleted, and how you can get it back.

We show no ads and never share your personal data for advertising or sale.

1. Who we are

Service	Pawback
Operator	The Pawback developer (independent developer)
Contact	pawback.dev@gmail.com

Use the address above for any question about this policy, or to exercise the rights described in Section 7.

2. What we collect

The following is everything the App stores. We collect nothing else.

2-1. Account

Data	Source	Purpose
Email address	You, or your Google sign-in	Sign-in, account recovery, essential notices
Google account identifier	Only if you use Google sign-in	Recognising you as the same account
Display name and avatar	You	Showing who did what within your family

We do not hold your password. It is hashed and stored by our authentication provider (Supabase).

2-2. Photos and their details

Data	What it is	Purpose
Photos	Images you take or import from your camera roll	Showing your album and "on this day, N years ago"
Date taken	Read from the photo's Exif data (or the import time if absent)	Placing photos on the timeline
Notes, tags, weight	What you type in	Context, filtering, and the weight chart

We do not store location data. Photos often carry GPS coordinates in their Exif metadata. When the App prepares a photo for upload on your device, it reads only the date taken and strips all Exif metadata before uploading. Neither the photos stored on our servers nor the photos in your export contain location data.

2-3. Activity within your family

Data	What it is	Purpose
Care log	Who did which care task, and when	Avoiding double feeding, sharing the load visibly
Reactions	Who reacted to which post	The activity feed and notifications
Family membership	Who belongs to which family group, invite status	Keeping photos and data visible only within your family

Each care log entry always records who performed it. If you turn off name display in settings, the names are only hidden from the screen — the data is still retained so that you can turn display back on later.

2-4. Device and push notifications

Data	What it is	Purpose
Push token	An identifier issued per device by Firebase Cloud Messaging	Knowing where to deliver a notification
Platform	Android or iOS	Delivering the right notification format

Notification text never includes photos, notes, or the name of the person who acted, because notifications appear on a locked screen.

2-5. What we do not collect

Your device location (the App never requests location permission)
Contacts, call logs, SMS, or your use of other apps
Advertising identifiers or behavioural tracking
Analytics cookies (this App uses no cookies)

3. Who can see your data

Your photos and records are visible only to members of the family group you belong to. This is enforced technically, not just by policy:

Photos live in private storage and are loaded through short-lived signed URLs generated each time they are displayed. Nobody without the URL can reach them, and expired URLs stop working.
Every database table is protected by row-level security: you can only read or write rows belonging to a family group you are a member of. Another family's data is unreachable by construction, even if we make a mistake in the App.
Invite links contain an unguessable token and expire seven days after they are issued. Anyone holding a valid invite link can join the family group, so share them carefully.

The App currently has no feature that publishes photos to the internet. If we ever add one, it will be private by default and only publish what you explicitly choose.

4. Where your data is stored

We use the following providers as processors. Each is necessary to operate the App, and none of them uses your data for their own purposes.

Provider	What they hold	Why
Supabase, Inc.	Accounts, photos, and all records	Database, storage, authentication
Google LLC (Firebase Cloud Messaging)	Push tokens and notification text	Delivering push notifications
Google LLC (Google Play)	Information incidental to app distribution	Distributing the App, aggregate crash reporting

Data is stored on servers in the Japan (Tokyo) region. The providers above are headquartered in the United States, so data may transit infrastructure outside Japan during notification delivery or incident response. Where such transfers involve personal data of people in the EU or UK, they rely on the providers' Standard Contractual Clauses.

5. Sharing with third parties

We do not share your personal data with anyone other than the processors listed in Section 4. We never sell, rent, or share it for advertising. We will disclose data only where legally required to do so, and only to the extent required.

6. How long we keep it

Data	When it goes away
Photos and records	Kept for as long as the family group exists, so that memories are not lost. When the last member leaves a family group, all of its data is permanently deleted after 30 days.
Your profile	Disabled when you close your account. Your name is retained as the reference for "who recorded this", to keep the records that remain with your family consistent.
Invite links	Expire seven days after issue and can no longer be used to join.
Push tokens	Deleted as soon as we learn the token is no longer valid, for example because you uninstalled the App.
Signed photo URLs	Minutes to hours for viewing; 24 hours for export downloads.

7. Your rights and how to use them

You can do all of the following yourself, at any time, from within the App:

Export your data (portability) — Settings → Export. You get a ZIP of your photos and a JSON file of your records.
Delete your account (erasure) — Settings → Close account. As described in Section 6, if you were the last member of your family group, all of that group's data is deleted 30 days later.
Correct your data — display names, notes, and log entries are editable in the App.
Stop notifications — from your device settings or in the App.

For anything you cannot do in the App (access to the data we hold, restriction of processing, withdrawing a request), email pawback.dev@gmail.com. We will verify your identity and respond within 30 days.

If you are in the EU or the UK (GDPR)

You have the right to access, rectify, erase, restrict processing of, port, and object to the processing of your personal data, as well as the right to lodge a complaint with your supervisory authority. Our legal bases are performance of a contract for providing the service, and your consent and our legitimate interests for notifications and legal compliance. You can withdraw consent at any time.

If you are in California (CCPA/CPRA)

We do not sell your personal information and do not share it for cross-context behavioural advertising. The categories we collect are listed in Section 2. We will never discriminate against you for exercising your rights.

8. Children

The App is not intended for children under 13, and we do not knowingly collect personal information from them. If you believe a child has registered, contact us at the address above and we will delete the account promptly.

9. Security

All traffic is encrypted in transit (TLS).
Photos are held in private storage with access scoped to your family group.
Privileged operations (sending notifications, generating exports) run only in a small server-side component; those keys are never embedded in the App.
Logs and error reports never contain photo or note content.

That said, no method of transmission or electronic storage is completely secure. For photos that matter to you, we recommend keeping your own copy using the export feature.

10. Changes to this policy

If we change this policy, we will update this page and revise the date above. For significant changes we will notify you in the App or by email, and ask for your consent again where required.