1. Introduction
Little Owl Media ("we", "us") is committed to protecting the privacy of Keia app users ("the App"). This Privacy Policy describes the data we collect, why we collect it, and how we process it, in accordance with the General Data Protection Regulation (GDPR).
2. Data Controller
Little Owl Media SRL
Nicopole 65, Brașov, Romania
Email: support@keia.app
3. Data We Collect
3.1 Account Data
When you create an account, we collect:
- Your name
- Your email address
- Your weight unit preference (kg or lbs)
3.2 Pet Data
You may enter the following information:
- Name, species, breed, date of birth, weight
- Pet profile photo
- Health events (date, type, title, notes, photos)
- Reminders (title, date, frequency)
- Vet contact details (name, phone, address)
3.3 Technical and Analytics Data
To ensure the App works properly and to improve its quality, we use Firebase (Google) services which may collect:
- An anonymous installation identifier
- Anonymized usage data (screens viewed, actions performed)
- Crash and performance reports
- Device type, OS version, and App version
This data is collected anonymously or pseudonymously and cannot be used to identify you personally.
3.4 Notification Data
To send you the reminders you configure, we use Firebase Cloud Messaging. A notification token is generated on your device and stored on our servers. This token contains no personal information.
3.5 Location Data
The App may access your geographic location only when you use the emergency vet search feature. This location is used in real time and is not stored on our servers.
3.6 Purchase Data
Premium purchases are processed by Apple (App Store) or Google (Google Play) via RevenueCat. We do not collect or store any banking or payment data. We only receive confirmation of your purchase status (active or not).
4. Purposes and Legal Bases for Processing
| Purpose | Legal Basis | Data Involved |
|---|---|---|
| Providing the service (account management, pet data storage) | Contract performance | Account data, pet data |
| Sending push notification reminders | Contract performance | Notification token, reminders |
| Nearby vet search | Consent | Location |
| Premium purchase management | Contract performance | Purchase status (via RevenueCat) |
| Co-parent access sharing | Contract performance | Co-parent email, shared pet data |
| Performance and stability analysis | Legitimate interest | Anonymized technical data |
5. Data Sharing
Your data is not sold, rented, or exchanged with third parties for commercial purposes.
We share data only with the technical providers necessary for the service to operate:
| Provider | Role | Data Shared | Location |
|---|---|---|---|
| Scaleway | Server and database hosting | All service data | France |
| Amazon S3 | Photo storage | Uploaded photos | Europe (EU) |
| Firebase (Google) | Push notifications, analytics | Notification token, anonymized usage data | EU / United States |
| RevenueCat | In-app purchase management | User identifier, purchase status | United States |
| Google Places API | Vet clinic search | GPS coordinates (not stored) | United States |
For transfers outside the European Union, our providers have appropriate safeguards in place in accordance with GDPR (standard contractual clauses or equivalent certification mechanisms).
6. Data Retention
- Account and pet data: retained while your account is active. Deleted within 30 days of account deletion.
- Photos: deleted from our storage servers within 30 days of the associated event or account being deleted.
- Notification token: deleted upon logout or account deletion.
- Location data: not stored — used in real time only.
- Analytics data: retained in anonymized form for a maximum of 14 months.
7. Security
We implement appropriate security measures to protect your data:
- Encrypted communications via HTTPS/TLS
- JWT token authentication
- Restricted access to databases and servers
8. Your Rights
Under GDPR, you have the following rights:
- Right of access: obtain a copy of your personal data
- Right to rectification: correct inaccurate or incomplete data
- Right to erasure: request deletion of your data (available directly in the App)
- Right to data portability: receive your data in a structured, readable format
- Right to object: object to the processing of your data
- Right to restriction: request that processing be restricted
To exercise these rights, contact us at support@keia.app. We will respond within 30 days.
You may also lodge a complaint with your local data protection authority.
9. Cookies and Trackers
The mobile App does not use cookies. The keia.app website may use strictly necessary cookies for the site to function.
10. Minors
The App is suitable for all ages. Users under 16 must obtain permission from a parent or legal guardian before creating an account.
11. Changes
We may update this Privacy Policy. For significant changes, we will notify you via a notification in the App.
12. Contact
Little Owl Media SRL
Nicopole 65, Brașov, Romania
Email: support@keia.app