Privacy policy
Last updated 8 November 2026
Mamori is a shared health record for dogs and cats. This page explains what data the app and the website collect, why, where it is stored and how you stay in control.
Our commitments in short (free record export, no ads, never sold) are gathered in the data charter.
Who is responsible
The data controller is MARCO SOLUTIONS (SAS), 35 avenue Sainte-Marguerite, building B2, 06200 Nice, France. For any question about your data: contact@mamori.pet.
The data we process
Your account
- A technical identifier created on first launch, with no form to fill in.
- Your first name, so the household knows who gave a dose.
- Your email address or Apple identifier, only if you provide them to invite someone or to restore your data on a new phone.
Your pet’s record
- The pet’s profile: name, species, breed, sex, date of birth, neutering, microchip number, photo.
- The vaccines, treatments, vet visits and weigh-ins you enter.
- The documents you add (Premium): prescriptions, vet reports, invoices, certificates, as PDFs or photos. They are stored in Paris in a private space: only the members of your household can open them, through temporary links.
- Checked-off doses: which dose, when, and by which household member.
Invites
- When you enter an invite code, we record your technical identifier and IP address, to limit code guessing. This data is erased after 24 hours.
Usage statistics, only if you accept them
- App opens and main actions (pet created, dose checked, invite sent), crashes, device model and iOS version.
- They are tied to your technical identifier, never to your email. They contain neither your pet’s name nor the contents of its record.
Your subscription
- The status of your Premium subscription (active or not, end date). Payment goes through Apple: Mamori never sees your payment details.
Reminders are scheduled on your phone. The mamori.pet website sets no cookies and uses no trackers.
Why we use it
| Purpose | Legal basis |
|---|---|
| Providing the record, sharing it with your household, sending reminders | Performance of the service you use |
| Emailing you a sign-in code | Performance of the service |
| Measuring usage and fixing crashes | Your consent, which you can withdraw at any time |
| Managing the subscription | Performance of the subscription contract |
| Limiting invite code attempts | Legitimate interest: protecting households from intrusion |
Your data is never sold, rented or used for advertising.
Who can access it
- Your household’s members see the records of the household’s pets and who gave each dose.
- The people you give a pet-sitter card to, only if you create one. The card is a mamori.pet page, opened from a QR code or a secret link, kept out of search engines. It shows the pet’s name, photo, species, breed, age, sex, neutering and microchip, its current treatments, its latest vaccines, the household’s first names, and the phone number and instructions you add. Never your email, your other pets or the dose history. Anyone with the link sees the card until its end date or until a household member revokes it in the app; the link then stops working at once.
- Our technical providers, each limited to its role:
- Supabase: database, authentication and storage of photos and documents, hosted in Paris (European Union);
- Brevo: sending the emails that contain your sign-in code (France);
- PostHog: usage statistics, hosted in the European Union, only if you accept them;
- RevenueCat: subscription status (United States, under the European Commission’s standard contractual clauses);
- Expo: relaying household notifications (dose given, new member) to Apple. They contain the person’s first name, the medication name and the pet’s name (United States);
- Apple: Sign in with Apple, subscription payment, notifications;
- Cloudflare: hosting of the mamori.pet website.
How long we keep it
Your data is kept as long as your account exists. When you delete your account, a pet, a document or the household, that data disappears from the app at once, with two exceptions:
- a phone that stayed offline keeps its copy until it next connects;
- a link to a photo that is already open stays valid for 1 hour at most, a link to a document for 5 minutes at most.
It is then erased from our servers within 30 days, photos, documents and backups included. Our servers’ technical logs (sign-ins, errors) do not follow this period: they follow Supabase’s retention periods.
If other people share your household, the record stays for them. The doses, care and journal entries you added stay too, attributed to “A household member”.
Invite data (technical identifier and IP address) is erased after 24 hours.
An account with no email and no Apple identifier is tied to your phone only. If you uninstall the app without deleting it, its data stays on our servers: for now, it is not erased automatically. Delete your account before uninstalling the app, or add your email so you can get it back.
At our providers:
- PostHog keeps usage statistics for 1 year, then erases them. The technical profile that links them (no email) stays at PostHog until we delete it.
- RevenueCat keeps your subscription status and history, tied to your technical identifier, until we delete them.
- Brevo keeps a record of the sign-in emails sent, and Expo a record of the notifications sent, under their own retention periods.
- Apple: if you sign in with Apple, deleting your account also removes the link between Mamori and your Apple identifier. If that fails, you can remove it yourself in your Apple account settings.
For now, deleting your account does not automatically erase this data at PostHog, RevenueCat, Brevo and Expo: write to us at contact@mamori.pet and we will delete it, or ask the provider to.
Your rights
At any time you can:
- access and export your data: “Export for the vet (PDF)” on the pet’s page;
- correct it directly in the app;
- delete your account and your data: Household → Delete my account;
- withdraw your consent to statistics: Household → Privacy;
- write to us for any other request (objection, restriction, portability) at contact@mamori.pet. We reply within one month.
If you believe your rights are not respected, you can lodge a complaint with the CNIL (cnil.fr).
Security
Traffic between the app and our servers is encrypted. Each household is isolated in the database: one household cannot read another’s data.
Children
Mamori is not intended for children under 15 without a parent’s consent.
Changes
If this policy changes, the date above is updated, and you are told in the app about any significant change.