Privacy Policy

Last updated: June 8, 2026

🐾 Scope: Pet (animal) records only. Pawdex is exclusively a pet record-keeping service for the use of pet owners and pet-related businesses. Every reference in this Policy to “vaccinations,” “health records,” “health diary,” “medical notes,” “clinical notes,” “weight,” “allergies,” “dietary notes,” “treatment,” “prescription,” or any similar term refers exclusively to records of pets (companion animals). Pawdex does not collect, store, or process human medical, health, or personally identifiable health information of any kind. Pawdex is not a healthcare provider, not a telemedicine service, not a HIPAA-covered entity, and not a substitute for any human medical service.

This Privacy Policy explains how Pawdex (“we”, “us”, “our”, the “Service”) collects, uses, and protects your personal information when you use mypawdex.com and its related features to manage your pet's records. By using the Service, you agree to this Policy. Please read it together with our Terms of Service.

1. Who We Are

Pawdex is a product of PixelPath Software Publishing House, a sole proprietorship registered with the Philippine Department of Trade and Industry (DTI Business Name Registration No. 8145950), based in Cebu City, Philippines. PixelPath Software Publishing House is the data controller of personal information collected through Pawdex and is subject to the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, “DPA”).

2. Information We Collect

2.1 Account Information (the pet owner)

When you, the pet owner, create a Pawdex account we collect your full name, email address, password (hashed), and optional phone number. You may also voluntarily provide a profile photo. We use Supabase Auth as our authentication provider; your password is never stored in plaintext on our servers. Note: this is the only information we collect about you as a human; everything else described below is about your pet (animal).

2.2 Pet (Animal) Profile Information

When you register a pet on Pawdex you provide the following about the pet (animal), not yourself: the pet's name, species (dog, cat, etc.), breed, color, sex, date of birth, weight, microchip ID (optional), spay/neuter status, pet allergies, pet dietary notes, and a separate emergency contact name and phone number. You may also upload photographs of your pet. This pet profile information is data that you choose to enter about your animal; we do not independently verify any pet record, microchip number, or contact information.

2.3 Pet Health Records (Pet Vaccinations and Pet Health Diary)

You may add pet vaccination records (vaccine type given to the pet, dates, veterinarian name, veterinary clinic name) and pet health log entries (your pet's vet visits, your pet's illnesses, your pet's surgeries, your pet's weight check-ins, photographs of receipts or prescriptions issued for your pet by a veterinary clinic). For Pawdex Pro+ subscribers, you may submit photographs of paper pet vaccination cards for our AI scanning feature (see Section 5).

To be clear: every entry in the Pet Health Diary, every Pet Vaccination record, and every photograph submitted to Paw Vault OCR concerns an animal (your pet), not a human. Pet Health Diary entries are private to your account; pet vaccination records appear on your pet's public passport page (see Section 4).

2.4 Pet Memories and User Content

Memory Book posts — photos and captions you upload about your pet — are stored by us and may appear on your pet's public passport page when published. You are responsible for ensuring you have the right to upload any image or content you submit.

2.5 Public Pet Passport Scan Logs

When anyone scans your pet's Pawdex QR code or visits your pet's public passport page, we may log the approximate location (city, region, country) derived from the visitor's IP address, along with the visitor's user agent (browser and device type) and timestamp. This information is used to email you scan notifications when your pet is in Lost Mode and to detect abusive scanning patterns. We do not store full IP addresses for longer than is necessary to process a scan.

2.6 Payment Information

Pawdex Pro and Pro+ subscriptions are currently paid via GCash QR code with manual receipt verification. We collect a screenshot of your payment confirmation, the GCash reference number, and the email address associated with the subscription. We do not collect or store credit-card, debit-card, or full GCash account details on our servers. When automated payment processing is added in the future, payments will be handled by an external processor (such as PayMongo) under their own privacy terms.

2.7 Communications

We retain a record of emails, support messages, and feedback you send us so that we can respond to your inquiries.

3. How We Use Your Data

To create and operate your pet-owner account and your pet's digital passport.
To display your pet's public passport page when its QR code is scanned.
To send transactional emails (account verification, pet vaccination expiry reminders, lost-pet scan notifications, subscription receipts, support replies).
To process your AI OCR pet vaccination card scans when you submit them (Pro+ only — see Section 5).
To facilitate appointments with pet businesses (veterinary clinics, pet groomers, pet boarding kennels) you choose to book with.
To improve the Service through analytics and product usage measurement (see Section 7).
To detect and prevent fraud, abuse, and violations of our Terms of Service.
To comply with our legal obligations under Philippine law.

We do not sell your personal information to advertisers, data brokers, or any third party. We do not use your pet's records to train AI models. We do not share your data except with the service providers listed in Section 6, or where required by law.

4. Public Pet Passport Pages and Lost Mode

Each pet you register receives a unique Pawdex code and a public passport URL (e.g. mypawdex.com/p/PDX-XXXX). This page is designed to be publicly accessible without authentication — that is its purpose, so that a veterinarian, barangay officer, or kind stranger can reach you when your pet is found.

The following information about your pet (animal) is shown on the public passport page:

Pet name, species, breed, color, sex, age, weight, microchip ID, and pet spay/neuter status
Pet photo(s)
Pet vaccination records (vaccine type, dates, veterinary clinic name)
Pet allergies and pet dietary notes
Published Memory Book entries about the pet
The emergency contact name and phone number you entered for the pet
When the pet is in Lost Mode: the lost-since date and the reward amount, if any

By registering a pet on Pawdex, you acknowledge and accept that the information above — including the emergency contact phone number — may be viewed by anyone in the world with the URL or who scans the QR code. You should only list a contact number you are comfortable making public. We are not responsible for unsolicited calls, messages, or contact attempts that may result from this public visibility. Pet Health Diary entries, your account email, and your payment records are never shown on the public passport.

Once a passport page has been indexed by a third-party search engine or shared on social media, we cannot guarantee its removal from those external services even after you delete the pet from your account.

5. AI Processing — Paw Vault OCR for Pet Vaccination Cards

Pawdex Pro+ includes “Paw Vault OCR,” a feature that lets you photograph a paper pet vaccination card and have its contents auto-extracted into your pet's records. When you use this feature, the photograph you submit (which depicts a pet vaccination card, not a human document) is sent to Google Gemini (a service of Google LLC) for optical character recognition. Google processes the image according to its own terms and privacy policy.

Extracted pet vaccination data (vaccine type, dates, veterinarian name, veterinary clinic name) is returned to you for review before it is saved. Pawdex does not retain the raw image after OCR processing other than in the form of an optional R2-hosted photo you choose to keep alongside the pet record. Pawdex does not use OCR submissions to train any model. OCR is best-effort and may produce incorrect or incomplete extractions; you are required to review the results before saving.

OCR usage is rate-limited (currently 20 scans per user per 24-hour period) for fairness and cost-control reasons.

6. Service Providers

We use the following third-party service providers to operate Pawdex. Each has its own privacy and security obligations and we are not responsible for their independent practices:

Supabase — database hosting and user authentication
Cloudflare R2 — object storage for pet photos and uploaded pet vaccination card images
Vercel — web hosting, edge networking, and IP-based geolocation headers used for scan logs
Brevo (Sendinblue) — transactional email delivery (verification, pet vaccination reminders, lost-pet notifications)
Google LLC (Gemini API) — AI OCR processing of pet vaccination card images (Pro+ only)
GCash — mobile-wallet manual payment receipts for subscriptions
Google Analytics, Meta Pixel, and Microsoft Clarity — product analytics and session recording for usage measurement (see Section 7). Microsoft Clarity may include heatmaps and anonymized session replays.

These providers may be located outside the Philippines. By using the Service you consent to the transfer of your data to, and processing in, jurisdictions which may have different data-protection laws than the Philippines.

7. Cookies, Analytics, and Tracking

Pawdex uses cookies and similar browser storage technologies for the following purposes:

Strictly necessary — to keep you logged in (Supabase Auth session) and remember UI state such as dismissed onboarding panels.
Analytics — Google Analytics, Meta Pixel, and Microsoft Clarity to understand which features people use, where users drop off in flows, and which marketing channels bring visitors. These tools may set cookies in your browser and may collect device, browser, language, and approximate location data.
Session replay (Microsoft Clarity) — Clarity records anonymized session interactions. Sensitive form fields are masked. We use this to debug usability issues.

You may disable cookies in your browser settings; however, doing so may break parts of the Service (for example, you will not stay signed in). You may also opt out of Google Analytics, Meta Pixel, and Microsoft Clarity tracking by installing the respective browser opt-out tools, by enabling “Do Not Track” (where supported), or by using a browser content blocker.

8. Data Retention

Account data — retained for as long as your account is active.
Pet records and Pet Health Diary entries — retained while you keep the pet on your account.
Scan logs and notification metadata — retained for up to twelve (12) months.
OCR pet-vaccination-card submissions — retained only as long as needed to deliver the OCR result; optional photos you choose to keep are retained until you delete them.
Account-deletion requests — we delete your personal account data and associated pet records within thirty (30) days of receiving a verified deletion request, except where law requires retention.
Residual copies — encrypted backups may retain copies of deleted data for an additional limited period until they are routinely overwritten.

9. Data Security

We use industry-standard security measures including HTTPS in transit, server-side encryption at rest with our infrastructure providers, row-level security policies on our database, and password hashing for accounts. However, no system is completely secure. You use the Service at your own risk and you are responsible for keeping your account credentials confidential. If you suspect unauthorized access to your account, contact us immediately at the address in Section 13.

10. International Data Transfers

Our service providers operate servers that may be located outside the Philippines (including the United States, the European Union, and Singapore). By using Pawdex you consent to the transfer, storage, and processing of your information in those jurisdictions, which may have data-protection laws different from those in the Philippines.

11. Children's Privacy

Pawdex is intended for users eighteen (18) years of age and older. We do not knowingly collect personal information from anyone under 18. If we become aware that a user is under 18, we may suspend or delete the account. If you believe a minor has registered an account, please contact us at support@mypawdex.com.

12. Your Rights Under the Data Privacy Act of 2012

As a data subject under Republic Act No. 10173, you have the following rights regarding your personal information:

Right to be informed — what personal information we process and why (this Policy).
Right to access — request a copy of the personal information we hold about you.
Right to object — refuse processing for marketing or non-essential purposes.
Right to rectification — correct inaccurate or outdated information.
Right to erasure or blocking — request deletion of your information (subject to retention obligations).
Right to data portability — receive a structured electronic copy of your data.
Right to file a complaint — complaints may be lodged with the National Privacy Commission (privacy.gov.ph).

To exercise any of these rights, email support@mypawdex.com. We aim to respond within thirty (30) days of receiving a verified request.

13. Changes to This Policy

We may update this Policy from time to time to reflect changes to the Service or to applicable law. When we do, we will update the “Last updated” date at the top of this page. Continued use of the Service after a change has been posted constitutes your acceptance of the revised Policy. For material changes, we will make reasonable efforts to notify you by email or in-product banner.

14. Contact

Questions, requests, or complaints about this Policy or your personal data can be sent to:

Pawdex Support
PixelPath Software Publishing House
Cebu City, Philippines
Email: support@mypawdex.com