VitalLedger Privacy Policy

VitalLedger is built around the idea that your pet's medical history is yours. This policy explains, plainly, what we do and do not collect, on every platform the app runs on.

Short version

• We do not run analytics or advertising. We don't know how you use the app.
• Your pets, vaccines, vet visits, medications, weight history, photos and lab PDFs are stored on your device first. Cloud sync is optional and off until you turn it on.
• On iPhone, sync uses your own private iCloud account. On Android, sync uses a Google Firebase project that we operate, tied to the Google account you sign in with, and holds only the records you chose to sync.
• We never sell or share your data with anyone.
• The only data that leaves your device is what you explicitly ask for: a purchase, a sync to your own account, or a Sitter Mode share you create.

What VitalLedger does not collect

• We do not collect your name, phone number, location or contacts.
• We do not collect any information about your pets unless you turn on cloud sync.
• We do not use third-party analytics, advertising SDKs or trackers.
• We do not have access to read your iCloud data.

Where your data lives

Everything you enter is stored locally on your phone or tablet. You can use VitalLedger forever without creating an account, and backup and restore always work from a file you keep.

iPhone and iPad. If you turn on iCloud sync, VitalLedger syncs through Apple's CloudKit service to your own private iCloud account. CloudKit data is encrypted in transit and at rest by Apple. Only you, and members of your Apple Family Sharing group if you opt in to share, can access it.

Android. If you turn on cloud sync, you sign in with a Google account and VitalLedger stores your records in Google Firebase (Cloud Firestore for records and Cloud Storage for photos and PDFs) in a project operated by JC Mobile App Studio LLC. The data is scoped to your account: server rules allow it to be read or written only by the signed-in account that created it. We receive your Google account's email address and display name as part of sign-in, and we use them only to identify your account. We do not read your records, and we do not use them for anything other than syncing them back to your devices. Data is encrypted in transit and at rest by Google. Signing out, or turning sync off, stops syncing; you can delete your synced data by deleting your pets in the app or by contacting us.

Sitter Mode

Sitter Mode generates a read-only care card for whoever is looking after your pets. On iPhone, the card stays on your device and is shared only by methods you choose (AirDrop, Messages, email, print).

On Android, when you create a share, a snapshot of only what the card shows (pet names, feeding, medications, vet and emergency contacts you marked as shareable) is written to our Firebase project under a random link ID and can be opened by anyone with that link until it expires or you revoke it. A sitter may log a walk, meal or dose back to that link; that entry contains only what they typed and lands in your household feed. Nothing else about your account is reachable from a share link.

Family Sharing

On iPhone, if you enable Family Sharing within VitalLedger, pets and records you mark as shared are synced through Apple's family CloudKit container to members of your Apple Family Sharing group. We do not see this data. You can stop sharing at any time within the app. Family Sharing is not yet available on Android.

Watches

The Apple Watch app talks to your iPhone over Apple's WatchConnectivity framework. The Wear OS app talks to your Android phone over Google's Wearable Data Layer. Both are local links between your own devices; nothing is transmitted off them.

On-device intelligence

The assistant, receipt scanning and document scanning run on your device. On iPhone they use Apple's on-device models. On Android they use Google's on-device ML Kit, and the assistant uses Gemini Nano through Google's AICore on phones that support it. Google may download the model to your phone; your pet records and your questions are not sent to a server by VitalLedger.

Recall alerts

VitalLedger downloads a public list of pet food and drug recalls from our website and compares it against your feeding brands and medications on your device. The request carries no information about you or your pets.

Subscriptions

VitalLedger Premium is processed by Apple's App Store on iPhone and by Google Play on Android. They handle the payment; we never see your card. We receive a purchase token used only to check that your subscription is active, and that status is stored on your device.

Diagnostic information

If you opt in through your device's settings, Apple or Google may send us anonymized crash reports and performance metrics. These reports do not contain pet data, contact information or identifiers we can link back to you. You can turn this off at any time in your device settings.

Children

VitalLedger is not directed at children under 13. The app contains no advertising and no social features, and we do not knowingly collect data from children.

Your rights

If you never turned on cloud sync, we hold no personal data of yours and there is nothing for us to access, correct or delete. Export or delete your pet data with the controls in the app, or manage iCloud data at privacy.apple.com.

If you used Android cloud sync, you can delete everything we hold by deleting your pets in the app while sync is on, or by emailing us from the Google account you signed in with. We will delete your account's data within 30 days. Residents of California (CCPA / CPRA), the EU and UK (GDPR) and similar jurisdictions have the same rights and can exercise them the same way.

Data security

Pet data lives on your device and, if you opt in, in your private iCloud or in your account's slice of our Firebase project. Security therefore depends on your device's protections (passcode, biometrics) and on your Apple ID or Google account security. We recommend two-factor authentication on both.

Contact

Questions or requests: contact@jcmobileappstudio.com

Changes

If this policy ever changes, we'll update the "Last updated" line above and post a new version at this URL.