MazlioPrivacy Policy
This policy describes how the Mazlio app (a pet care mobile application) and this website process your personal data.
1. Data Controller
The data controller is Štěpán Kameník (an individual). Contact: stepan@kamest.dev.
2. Data We Process
Account data
- email address and name,
- password (we store only a cryptographic hash — never the password itself), or an identifier when you sign in with Apple / Google,
- app settings (language, units, notification preferences).
Pet data
- pet profiles and health records you enter into the app (weight, symptoms, medications, vaccinations, vet visits, expenses, diary entries),
- photos and documents you upload (e.g. vet reports).
Technical data
- a device token for delivering push notifications (if you enable them),
- operational and security records (audit log of access, IP address, request identifiers) to the extent necessary to secure and operate the service.
Website waitlist
If you enter your e-mail into the waitlist on this website, we store only the address and your language. We use it solely to send a one-time notice that the app is available — the legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time by e-mail. Addresses are deleted no later than after the launch announcement is sent, or immediately upon request.
3. Purposes and Legal Bases
- Providing the service (account, data sync, reminders, household sharing) — performance of a contract (Art. 6(1)(b) GDPR).
- Push notifications — your consent given in the system dialog; you can revoke it anytime in device settings.
- Security and abuse prevention (audit logs, login rate limiting) — legitimate interest (Art. 6(1)(f) GDPR).
- AI features (document summaries, health insights) — performance of a contract; processing happens only to fulfil your specific request in the app.
4. Who We Share Data With
We do not sell your data and do not use it for advertising. We use the following processors to run the service:
- Hosting: servers located in the European Union (Hetzner Online GmbH, Germany).
- Apple / Google: push notification delivery and optional Sign in with Apple / Google.
- AI service provider: when you use AI features (document analysis, insights), the content required for that feature is sent to a language-model provider solely to process your request.
- Sentry (Functional Software, Inc.): crash and error reporting for the iOS app so we can fix issues; data is hosted in the European Union.
- PostHog EU (PostHog, Inc.): product analytics for the iOS app (anonymous feature-usage events); data is processed in the EU cloud.
- Vercel Inc.: hosting of this website (not of app data). We measure website traffic with Vercel Analytics — it works without cookies and stores no personal data.
5. Retention
We keep your data for as long as your account exists. You can delete your account anytime directly in the app (Settings → Delete account) — your data, including uploaded files, will be removed. You may also request deletion by email. Database backups are kept short-term for disaster recovery and are rotated automatically.
6. Your Rights
Under the GDPR you have the right to:
- access your data and obtain a copy — a data export is available in the app,
- rectify inaccurate data,
- erasure (“right to be forgotten”),
- data portability,
- object to processing based on legitimate interest,
- lodge a complaint with a supervisory authority — in the Czech Republic the Office for Personal Data Protection (ÚOOÚ), uoou.gov.cz.
To exercise your rights, contact us at stepan@kamest.dev.
7. Children
The service is not directed at children under 13 and we do not knowingly collect personal data from them.
8. Changes to This Policy
We may update this policy; we will announce material changes in the app or on this website. The current version is always available on this page.