Privacy policy
Last updated September 28, 2026. Daily Pet Log is operated by IQ Brands, LLC, 1950 W Corporate Way #20834, Anaheim, CA 92801.
This is written to be read. If something here is unclear, that is a fault worth reporting to hello@dailypetlog.com.
The short version
- We collect what the app needs to work, and nothing extra.
- There is no advertising, no tracking, and no analytics SDK. We do not know which screens you open or how long you spend in them. The one library from somebody else that collects anything is Google's, for Sign in with Google, and only if you choose it — see our suppliers.
- When the app crashes or stalls, it sends us the report Apple's MetricKit gives it, with nothing in it that says who you are.
- We do not sell or rent your information, and we do not share it for advertising.
- Your records are shared with the people you put in your household, because that is the point of a household.
- You can ask for a copy, or ask for all of it to be deleted.
What we collect
| Your account | Email address, whether you have confirmed it, the name you choose to display, and which sign-in method you used. If you sign in with a password we store a cryptographic hash of it and never the password itself. If you sign in with Apple or Google we store the identifier they give us, not your password with them. For Apple we also keep, encrypted, the token Apple issued us, because deleting your account means handing it back to Apple so our access ends too. |
|---|---|
| Your pets | Whatever you enter: name, species, breed, sex, color, date of birth, whether they are spayed or neutered, microchip and license numbers, notes, weights, what they eat, their medications and when they take them, and photos. |
| Your log | Each entry — what happened, to which animal, when, any note or measurement you added, any photo or video you attached, and which member of the household recorded it. Entries brought in from Dog Log also keep the name of whoever logged them there, and a fingerprint of the row each came from, so importing a newer export does not add them twice. The file you imported is not kept. |
| Your paperwork | Records you keep with a pet — invoices, insurance, lab results, clinic notes, certificates, prescriptions, and photos and videos you keep as records — as the file you scanned, took, recorded or chose, with its title, date and notes. A video carries the sound recorded with it. Your phone reads the words on each page, on the phone itself, and that text is stored with the record so it can be searched. |
| Vets and the shelf | The clinics you use: name, phone, address and notes. The foods, treats and medications you keep, how much is left, photos of their labels, and the text your phone read off those labels. |
| Your household | Its name, who is in it, each person's role, invitations you have issued, and the exports anybody in it has asked for. |
| Your devices | A hash of each signed-in device's session token. If you allow notifications, that device's push token, so a notification can reach it, and which kinds of notification you have switched off. |
| Assistants | Which assistants you have connected, what each may do, which households it covers, and when it was last used. |
| Purchases | If you subscribe, Apple's record of it, which Apple sends us: which subscription your account holds, when it reached us, when it renews or ends, whether it will renew, and whether it was refunded. We use it to decide what your household's plan allows. Apple takes the payment, so your card and payment details never reach us. |
| Subscription counts | How many subscriptions start, renew, are cancelled, end, are refunded or fail to renew, counted by day. Each count holds only what happened and the day, with nothing that says whose subscription it was, so it is not linked to you. It is how we know whether the service pays for itself. No analytics SDK is involved. |
| Crash and performance reports | When the app crashes, hangs, or works the processor or storage too hard, Apple's MetricKit gives the app a report and the app sends it to us: where in the code it went wrong, the app version, the iOS version and the phone model. MetricKit also includes the region format set on the phone, whether Low Power Mode was on, whether the app came from TestFlight, and the period the report covers. If our server ever refuses a purchase you made, the app sends us a short note of it the same way: what failed, the error our server gave, which plan, and whether it was a test purchase. Both are sent only while you are signed in, and stored without your account or household, with anything that could identify you removed, so neither is linked to you. |
| Server logs | Our servers record requests as they arrive — IP address, time, the address requested, and the browser or app version. This is ordinary operational logging: it is how a fault gets diagnosed and how abuse gets stopped. We do not use it to build a profile of you. |
We do not ask for and do not want: your location, your contacts, your photo library beyond the individual pictures you choose to attach, or anything about your phone beyond its push token and what a crash report carries.
Why we have it
To run the service you asked us to run: to keep your records, show them to the people you have shared them with, sync them between your devices, and let you back into your account. We also use your email address to send you the things the service has to send — a code to confirm your address, a password reset, a sign-in code, a notice that your password changed, the link to an export you asked for (or a notice that it didn't finish), and a notice that your account was deleted. Those are not marketing, and they cannot be unsubscribed from while you have an account, because they are the account's security.
Where the law requires a legal basis (the UK and EU GDPR), ours is the performance of our contract with you for everything above, and our legitimate interest in keeping the service running and secure for the server logs and crash reports.
Who else sees it
People you invite
Everyone in your household can see that household's pets and log. A member you invite as a caretaker — a pet sitter, say — sees less: roughly the last three months of everyday entries, the pets and their feeding routine, and — unless the household's owner turns it off — the medicines each pet is currently on and photos of their labels, so they can give them. A caretaker never sees the medical history, the vets, the paperwork, or anything to do with billing. Those limits are applied on our server, so they hold however the data is asked for.
If you remove somebody from a household, they stop seeing it. Entries they made stay in the log, credited to them — a record that rewrote itself when somebody left would not be a record.
An assistant, if you connect one
You may connect an AI assistant. If you do, the assistant's operator (Anthropic for Claude, OpenAI for ChatGPT) receives whatever it asks for within the permissions you granted, and what they then do with it is governed by their privacy policy and not this one. Nothing is connected unless you connect it, you are shown what is being asked for before you agree, and you can withdraw it at any time in the app.
Our suppliers
| Amazon Web Services | The server (EC2), the database (RDS), file storage (S3) and outgoing email
(SES). Data is held in the United States (us-east-1). |
|---|---|
| Apple | Sign in with Apple, if you use it, to verify that the sign-in is genuinely yours. Push notifications, which Apple delivers: each one says what was logged, for which pet, and by whom. And the App Store, which takes any payment. |
| Sign in with Google, if you use it, to verify that the sign-in is genuinely yours. Google also hosts our mailbox, so an email you send us is stored there. Sign in with Google runs Google's own sign-in library inside the app, and it runs only when you tap that button. Google declares that the library collects your name, email address, phone number, coarse location, a user ID, a device ID, usage data and other data, some of it for Google's own analytics of the sign-in, and none of it for tracking. That collection is governed by Google's privacy policy, not this one. We receive only the sign-in itself: your email address, your name, and Google's identifier for you. |
That is the whole list. We do not share your information with anyone else, except where we are legally required to, or where it is necessary to establish or defend a legal claim.
Where it is, and for how long
Your data is stored in the United States, and on the phones signed in to it. If you are in the UK or the EU, that is a transfer outside your region; it is covered by the standard contractual clauses in our agreement with Amazon Web Services.
We keep your records for as long as your account exists, because a health record whose old entries quietly disappeared would be worse than useless.
Deleting something in the app removes it from every screen and every device. Photos, videos, records and label photos you delete can be brought back for 30 days, and then their files are erased. Thirty days after anything is deleted — an entry, a pet, a record, a vet, a medication — what was written in it is cleared too, and so is any photo of a deleted pet or bottle.
What stays is a bare row, marked as deleted, until its household is deleted: that mark is how every other phone learns it is gone. The row keeps its dates, its kind or type, what it was linked to (which pet an entry was about, which bottle a medication came from), a food's or medication's amount and unit — though not the measurements in an entry — and, for an entry imported from Dog Log, the fingerprint that stops a later import adding it again. Two kinds of name last longer. The entry types and meal slots you made keep theirs, because they are settings rather than records. And a deleted pet or vet keeps its name for as long as an entry, record or medication that is not deleted still shows it; it is cleared once none does.
An export and its link last 7 days, and then the file is deleted. Crash reports, and the daily subscription counts, are deleted after 90 days. The record of a subscription stays with your account until the account is deleted. Backups of the database are kept for fourteen days, so deleted data can persist in a backup for up to that long after it is gone from the live service. Server logs that record IP addresses are deleted after 15 days at most. Our other server logs do not record them, and are capped in size and overwritten as they fill.
What you can ask for
- A copy of everything we hold about you. An owner or member can make one of a household in the app, under Household → Export data; the link is emailed and lasts 7 days.
- A correction, though most of it you can simply edit in the app.
- Deletion of your account and everything in it.
- To object to our processing, or to ask us to restrict it.
Deletion is in the app, under Settings → Delete account. It shows you what will happen to each of your households before you confirm it, and then it is immediate and final — the account row is deleted, not flagged. For anything else, write to hello@dailypetlog.com and we will act within 30 days. There is no charge.
Two things worth knowing about deletion. A household nobody else is in goes with you, its pets and its history and its photos. A household other people are still using stays, and so do the entries you made in it — they are that household's record, not ours to take away from four other people — but they stop being attributed to you, which is the part that was ever about you.
If you are the only owner of a household other people are in, the app will ask you to make somebody else an owner first. A household with no owner has nobody who can manage it and no way to fix that afterwards.
If you are in the UK or EU and think we have handled this badly, you may complain to your data protection authority — in the UK, the Information Commissioner's Office.
If you are in California
IQ Brands, LLC is based in California, and California law gives you the rights above under different names: to know what we collect and why, to get a copy of it, to correct it, and to have it deleted. Two things California asks us to say plainly:
- We have not sold or shared personal information in the last twelve months, and we do not intend to. “Shared” there has California's particular meaning — disclosing personal information for cross-context behavioral advertising — and we do not do that either. There is no opt-out link below because there is nothing to opt out of.
- We will not treat you differently for exercising any of these rights: no worse service, no different price.
We do not collect the categories California calls sensitive personal information — no precise location, no biometrics, no government identifiers, no financial account details. Apple handles any payment, and we never see a card.
Children
Daily Pet Log is not directed at children under 13, and we do not knowingly collect their information. If you believe a child has given us something, tell us and we will remove it.
Security
Everything travels over TLS. Passwords are stored as Argon2 hashes, and the tokens we issue — sign-in sessions, reset links and sign-in codes, assistant access, export links — are stored only as hashes, so reading our database does not let somebody log in as you. Changing your password signs out every other device.
No service is perfectly secure and we will not pretend otherwise. If we ever discover a breach affecting you, we will tell you.
Changes
If we change this materially we will say so in the app before the change takes effect, rather than editing this page quietly and moving the date.
Contact
hello@dailypetlog.com
IQ Brands, LLC, 1950 W Corporate Way #20834, Anaheim, CA 92801