Privacy policy

About this policy

This policy explains what data MeuCusco collects, what it is used for, where it is stored, who it is shared with and what your rights are, in accordance with Brazil's General Data Protection Law (LGPD, Law No. 13,709/2018). The party responsible for processing your data (the "controller", under the LGPD) is MeuCusco.

What data we collect

From your account: name, email and password. The password is stored in protected form (hashed), in a way that not even we can read it. From your pets: name, breed, sex, date of birth, weight and the history of vaccines, medications and baths you record. From the vaccination record reading, if you use it: the photo you send and the date and time of each reading, handled as described in its own section below. From support: the messages you send through "Send feedback", along with your name and email. We do not collect location, contacts, browsing data or information for advertising.

Pet photos

If you choose a photo for your pet, the app asks for permission to access your photos and uses only the image you select. Currently this photo is stored only on your phone: it is not sent to our servers, which receive only a reference to the file on the device. That is why the photo does not appear if you sign in to your account on another phone.

Vaccination record reading

If you use the automatic reading of the vaccination record (a Premium plan feature), the app asks for permission to use the camera or access your photos and sends only the image you take or choose. Before the first reading, the app asks for your confirmation to send the photo. It goes through our servers and is sent to Anthropic, the company that provides the artificial intelligence (Claude) that identifies the vaccines and dates. The image is used only for this reading: it is not stored on our servers, and Anthropic does not use this content to train its models and deletes it within 30 days, keeping it longer only when required by law or when it is flagged for violating its usage policies. The record may show other information, such as your name and the details of the veterinarian or clinic. This information is not used: only the vaccines you check and confirm are saved. To enforce the plan's reading limit, we keep only the date and time of each reading (nothing from the photo or from what was read), and this record is deleted along with your account. Anthropic may process the image outside Brazil, under the same conditions described in "Where the data is stored".

What stays only on your phone

Reminders are scheduled on the device itself, without going through our servers. The app also stores on the phone the sign-in data that keeps you signed in and your notification preference. When you sign out, the sign-in data and the scheduled reminders are deleted from the device.

How we use this data

We use your data only to make MeuCusco work: show your pets and care items, calculate due dates and reminders, read the vaccines from the record photo when you ask, send the password reset email when you ask, reply to your support messages and keep your account protected. The legal basis is the performance of the service you sign up for when you create the account (art. 7, V, of the LGPD). We do not sell your data, do not use it for advertising and do not build profiles about you.

Where the data is stored

MeuCusco does not have its own servers: your account and pet data are stored on servers of a cloud infrastructure provider we hire, which is currently Railway. These servers may be outside Brazil; in that case, the transfer takes place to perform the service you signed up for, as the LGPD allows. Communication between the app and the servers is encrypted (HTTPS), and access to each account's data is restricted to its owner.

Who we share it with

Only with companies that help us run the app, and only what each task requires: Railway, which hosts the servers and the database; Resend, which sends the password reset emails and forwards support messages; and Anthropic, which provides the artificial intelligence that reads the vaccination record photo when you use this feature. These companies process the data following our instructions and may not use it for other purposes. We may also provide data when required by law or a court order.

How long we keep it

For as long as your account exists. When you delete your account, we immediately delete your account details, your pets, the care records and the sign-in sessions. Backups kept by the provider may contain this data for a limited period, until they are replaced. The vaccination record photo is not stored: it is discarded right after the reading. Messages sent to support stay in our email inbox; if you want them deleted, ask through the contact below.

Your rights

Under the LGPD, you can confirm whether we process your data, access it, correct it, take it to another service, request its deletion and find out who it has been shared with. Most of this is in the app itself: account and pet details can be edited at any time, the file with everything is in Profile > Privacy & security > Download my data, and deletion is in Profile > Delete my account. For anything else, contact us at the address below.

Changes to this policy

This policy may change, for example when the app gets new features. When the change is relevant, we will let you know in the app, and the update date at the top of this page changes too.

Contact

Questions or requests about privacy can be sent to privacidade@meucusco.com.br.