Privacy Policy

1. Information We Collect

2. How We Use Your Information

• Provide and maintain the Service
• Enable you to share pet records with vets, helpers, and family members
• Send you account notifications and service updates
• Respond to your inquiries and support requests
• Analyze service usage to improve features (anonymized aggregated data only)
• Detect and prevent fraud and security issues

We do NOT: Sell your data. Use your data for advertising. Share your medical records without your explicit consent.

3. Data Security

Your pet's medical records are sensitive. We protect them with:

• End-to-end encryption for sensitive data
• Secure HTTPS connections (TLS 1.2+)
• Row-level security (only you and people you authorize can access your records)
• Regular security audits and vulnerability testing
• Secure password hashing with salting

While we use industry-standard safeguards, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

4. Data Retention

• Active accounts: Data retained as long as your account is active
• Deleted accounts: All personal data deleted within 30 days of account deletion
• Legal requirements: We may retain anonymized data for legal compliance and fraud prevention

5. Your Rights Under the PDPO

Under Hong Kong's Personal Data (Privacy) Ordinance, you have the right to:

• Access: Request a copy of all personal data we hold about you
• Correct: Ask us to correct any inaccurate personal data
• Erase: Delete your account and all associated data (within 30 days)
• Opt-out: Unsubscribe from marketing communications anytime
• Portability: Request your data in a portable format

To exercise any of these rights, email pawvaulthk@gmail.com with "PDPO Request" in the subject line. We will respond within 14 days.

6. Sharing Your Data

We never share your personal data without your consent, except:

• With your permission: When you explicitly share records with a vet, helper, or family member via a secure link
• Legal requirement: If required by law or court order (we will notify you first unless prohibited)
• Service providers: Cloud storage, email delivery (all under strict confidentiality agreements)

7. International Data Transfers

Your data may be stored on servers outside Hong Kong for reliability and performance. We ensure all transfers comply with PDPO requirements and maintain equivalent protection standards.

8. Contact & Data Protection Officer

If you have concerns about how we handle your data, you can lodge a complaint with the Office of the Privacy Commissioner for Personal Data (PCPD) in Hong Kong.