Privacy and Cookie Policy

The company identified below operates SelfVet and determines the processing necessary for accounts, security, support, contracting and its own purposes described in this policy. Privacy requests may be sent to contato@selfvet.app. For data managed on behalf of a veterinarian, SelfVet acts within the professional’s instructions and the Data Processing Addendum.

Processing may include professional identity and contact details, registration, country, regional preferences, authentication, subscription and support information. User-entered content may include owners’ contacts and addresses, pet data, appointments, visit locations, clinical records, attachments, documents and financial entries. Animal data may be linked to identifiable individuals; free-text fields must be limited to what is necessary.

Accounts, authentication, features and support use the data necessary to perform the contracted service. Legally required records are processed to comply with legal obligations; strictly necessary evidence may be retained to exercise legal rights. Security and fraud prevention may rely on legitimate interests, subject to necessity and impact assessment. Data managed on behalf of a professional follows their instructions and their chosen lawful basis. Optional features requiring consent depend on a specific choice.

Location, contacts, camera, photos, calendar and notification permissions are used according to the activated feature and can be managed on the device. Address searches and routes involve maps providers. Users decide to share documents, messages and links with third parties and must review recipients and content. Data necessary to create and maintain an account is required to use the service; declining an optional permission may limit that feature.

Operation may involve Firebase/Google Cloud for authentication, databases and files; Google Maps/Places for addresses and routes; API and hosting infrastructure, including Railway and Netlify depending on the environment; Apple/Google Play and RevenueCat for purchases and subscriptions; and Gmail/Resend for communications and support when enabled. Each provider receives the data necessary for its role: for example, subscriptions use account identifiers and purchase information, and communications may use the professional’s name and email. Website use of Google and Meta follows the regional treatment and choices described in the cookies and preferences sections.

SelfVet does not sell personal data or provide account, owner or pet content to train artificial intelligence models. The technical providers identified in this policy and user-selected recipients serve different purposes. SelfVet does not use clinical records or owners’ records to personalize website advertisements.

The website uses technical data to deliver pages and preserve security and necessary preferences. The approximate access country supplied by hosting selects regional treatment regardless of page language. For European access, analytics and advertising remain disabled until an affirmative choice. Other identified countries retain the previous configuration: analytics and the Meta Pixel may start on a visit without clicking Got it; Google advertising signals follow existing advertising preferences and Consent Mode. If the country cannot be identified, prior choice is required. The country is checked on this domain without requesting precise device location.

For European access you can accept, reject or customize analytics and advertising; choices are stored with a version and date for up to 180 days. In other identified countries, Got it is informational, analytics remains active and Privacy preferences retains the previous advertising controls; Got it is not consent. The previous Meta Pixel integration starts on a visit in those countries. Withdrawal through available controls limits new collection according to the relevant integration; it does not automatically erase data providers have already received.

Operations are based in Brazil. Providers may process data in Brazil and other countries, including the United States, depending on the service and configuration. Transfers must follow the mechanism applicable to each flow, such as current adequacy decisions or contractual safeguards required by law. Information about relevant recipients, destinations and safeguards may be requested through the privacy contact; using a global provider does not remove this assessment.

Account data is kept to provide the service while the account is active; cancelling only a subscription does not close the account. Content managed for a professional remains under their instructions until deletion or termination, subject to legal obligations. Erasure requests include checking attachments, related records and integrations; residual copies require verification of the cycle actually configured with each provider. Contract, acceptance and support records are limited to what is necessary for applicable obligations, resolving requests and defending legal rights; any retention must be justified and access restricted. Specific periods or criteria applicable to your request will be explained through support.

Subject to applicable law, you may request confirmation and access, correction, erasure, restriction, portability, objection and withdrawal of consent, plus information about disclosures. SelfVet verifies identity proportionately and forwards requests about data processed on a professional’s behalf to that professional, providing assistance. Under the GDPR, the general response period is one month; any permitted extension will be communicated and explained within that initial period. Other requests follow applicable statutory deadlines. You may complain to the competent authority, including ANPD in Brazil and AEPD/CNPD in Spain/Portugal. Data essential to a contract or required by law may remain while that legal basis applies.

Proportionate access, authentication, confidentiality and transmission safeguards must be adopted, consistent with the services used and risk. No system offers absolute security. Contact SelfVet if you identify unauthorized access or an incident; required measures and notifications will be assessed. Material policy changes will be communicated appropriately. This policy explains processing and does not replace specific consent choices where required.