Privacy Policy

This Privacy Policy explains how Paw Miaw, currently based in Cozumel, Quintana Roo, Mexico ("Paw Miaw," "we," "us," or "our"), collects, uses, shares, and protects information when you use Paw Miaw's websites, applications, household tools, provider tools, reminders, notifications, communications, and related services (the "Service").

Paw Miaw is a global service. If you use the Service from outside Mexico, your information may be processed in Mexico, the United States, and other countries where we or our service providers operate.

1. Information We Collect

We collect information you provide directly, information generated through your use of the Service, and information from connected households, providers, staff members, app stores, payment processors, and service providers.

• Account information, such as name, email address, authentication method, profile photo, password credentials, email verification status, sessions, timezone, and security settings.
• Household and pet information, such as household members, pet names, species, breed, sex, birthday, weight, photos, microchip details, care routines, activity logs, reminders, appointments, notes, records, follow-ups, and attachments.
• Provider information, such as provider workspace details, clinic or business name, contact details, address, availability, services, catalog items, inventory, staff members, roles, permissions, clients, client pets, appointment details, medical or care records, follow-ups, invoices, payments, and activity logs.
• Communications and shared links, such as messages, household invitations, provider-client invitations, appointment confirmation links, reminder links, notification preferences, delivery attempts, and email-related metadata.
• Olfato AI information, such as the questions you ask Olfato AI, the photos you add to them, its answers, your ratings of them, and the record of your acceptance of its notice.
• Payment and subscription information, such as plan, billing status, transaction identifiers, invoices, payment method metadata, app store purchase metadata, and tax or accounting records. We do not intentionally store full payment card numbers.
• Technical information, such as IP address, device and browser type, operating system, installation identifiers, push notification tokens, log data, cookie identifiers, session information, pages viewed, actions taken, error reports, and approximate city, region, or country derived from IP address.

2. Sensitive Pet and Care Information

Paw Miaw may store pet medical, veterinary, medication, appointment, weight, activity, billing, and provider records that you or your provider choose to enter. Pet data is not always treated as human health information by privacy laws, but we treat care records as sensitive product data and use them only to provide, secure, support, and improve the Service, or as otherwise described in this Policy.

Olfato AI, the features of Paw Miaw that use artificial intelligence, is described in section 3.

3. Artificial Intelligence (Olfato AI)

Olfato AI is the name of the two features of Paw Miaw that use artificial intelligence: a chat where a family asks questions about its pets, and a short brief of a pet's record for the staff of a pet-care business. Both are optional and both are beta features.

These two are the only features of Paw Miaw that send content to an artificial intelligence provider. No other feature does. If that changes, we will update this Policy.

Olfato AI for families: the chat

The chat lets a member of a household ask questions about its pets and get an answer written by artificial intelligence. It is part of the household Premium plan, including its trial.

When it is on

• Nothing is sent until you accept the chat's notice, which says what is sent and to whom. Each person accepts it for themselves.
• We record when you accepted, which version of the notice, from which app and in which language, and the IP address and browser or device you used.
• You can withdraw your acceptance at any time in Olfato AI. From then on nothing more is sent, and you cannot ask new questions until you accept again. Your earlier chats stay until you delete them.
• If the notice changes in a way that matters, we ask you to accept it again.

What is sent

Each time you ask a question, we send the AI provider:

• Your question, and the earlier questions and answers of that chat. In a long chat, the older part is sent as a summary written by the same AI provider.
• The photos you add to a question, up to three. We store a reduced copy without the camera's data, such as the place where it was taken, and that copy is what is sent. The AI also writes a short description of each photo. We keep it with the chat and send it in place of the photo later in the chat.
• Today's date.
• The pet's profile: name, species, breed, sex, age, and whether it is neutered.
• Its health records: allergies, conditions, medications, vaccines, dewormings, recent weights, and other records and notes.
• What is in its medicine cabinet, including who prescribed it.
• Its routines and recent check-ins, with the notes written on them.
• Upcoming and recent appointments: the date, the title, the name of the provider, the status, and the notes. Not the place.
• The names and the text of the documents attached to its records, cabinet items, and appointments.

The pet information is what Paw Miaw holds about the pet the chat is about, as far as your own permissions in that household allow. A chat that is not about one pet sends it for every pet you can open. Very long records are sent in part.

Documents are read on our own servers first. A page our software cannot read, such as a photo of a handwritten prescription, is sent to the AI provider as an image so it can be read. This happens only after someone who accepted the notice asks about that pet. The text that comes back is saved with the document, and is used for any member of the household who may see that document and has accepted the notice.

What is never sent

• Your name, your email, your account or household identifiers, and the names of the other members of your household. They are not attached to the request.
• Invoices, payments, and other billing details.
• Your conversations with providers or with your household.
• Gallery photos and the photos of routine check-ins.
• The address or place of an appointment.
• Your ratings and comments about an answer.

We do not remove names, phone numbers, or email addresses from what is written in your questions, notes, and documents. That text is sent as written, so it can mention people, such as the veterinarian who signed a prescription. Do not write in a question anything you do not want sent.

Who receives it

The answers are written by an artificial intelligence model provider, a company outside Paw Miaw. We may change this provider, so we do not name it here. To know which one we use now, write to support@pawmiaw.com and we will tell you.

• Our servers send the request directly to that provider and return its answer to you. The request carries no account identifier.
• According to the terms that provider publishes for this kind of service, as of the date of this Policy, it does not use what is sent this way to train its models unless the customer chooses to share it for that. Paw Miaw does not.
• That is not a promise that nothing is kept. The provider may keep requests and answers for a limited time, and longer when the law requires it or when it needs to enforce its usage rules.
• The provider may process the data in the United States or in other countries where it operates.
• The AI has no access to the internet, to your account, or to anything beyond what is sent with each question.

Who sees your chats

• Only you. Other members of your household cannot see them, and neither can providers or clinics.
• Paw Miaw support staff cannot open your chats when they help you with your account.

What Paw Miaw keeps

• Your chats: your questions, the answers, and the summary of a long chat.
• The reduced copy of each photo you sent, and its description.
• Your thumbs up or down on an answer, the reason, and your comment. We use them to improve the feature.
• A log of each request: date, AI model, size, and result. It does not contain the text of your questions or of the answers.
• The record of your acceptance of the notice, and of its withdrawal.

Deleting your chats

• Chats are kept until you delete them. There is no automatic expiry.
• You can delete one chat or all of them in Olfato AI. The questions, answers, summary, and photos are erased from our systems, and the photos leave file storage shortly after. This cannot be undone. A copy can remain in our encrypted backups for up to 30 days.
• After a chat is deleted we keep the request log and, if you rated an answer, the rating and its reason. Your comment is erased.
• Withdrawing your acceptance, losing Premium, or deleting a pet does not delete your chats. You can still read and delete them.
• Deleting your account deletes your chats, photos, ratings, and acceptance records. The request log remains without any link to you.
• We cannot delete what the AI provider already received. Its own retention, described above, applies.

Not veterinary advice, and no automated decisions

Olfato AI is an AI, not a veterinarian. Its answers are general information: it does not diagnose and does not give doses, and it can be wrong. Paw Miaw does not use the chat to decide anything about you or your pet. If something may be urgent, call your veterinarian or an emergency veterinary clinic.

Olfato AI for pet-care businesses: the brief

The brief is an optional feature for the pet-care businesses that use Paw Miaw, such as veterinary clinics and groomers. It uses artificial intelligence to write a short brief of a pet's record, so staff can read what matters before they see the pet. In this part, "Olfato AI" means the brief.

When it is on

• Olfato AI is off unless a business turns it on. While it is off, nothing is sent to the AI provider.
• Only the owner of the workspace, or a staff member with permission to edit the workspace's settings, can turn it on. They must first read what is sent and to whom, and confirm it.
• New workspaces are offered Olfato AI in the last step of setup. The switch there is on by default, next to the same explanation, and can be turned off before finishing. Workspaces created before that step existed are never turned on for them.
• A business can turn Olfato AI off at any time in Settings. From then on, nothing more is sent and no brief is shown.

What is sent

When Olfato AI is on and a staff member opens a pet's chart, we send the AI provider the text of that pet's record that the staff member is allowed to see:

• The pet's profile: name, species, breed, sex, birth date, whether it is neutered, and notes about the pet.
• The care card: handling warnings, usual cut, tools and products, care notes, and how often the pet comes back.
• The business's records for the pet, such as allergies, diagnoses, medications, vaccines, lab results, and surgeries, and the records the family chose to share with that business.
• Prescriptions, weights, and follow-ups.
• Finished or missed visits: the service, the visit notes, what the owner asked for at a groom, and the visit report.
• Hospital stays: the reason, orders, treatments given, vital signs, updates, and discharge notes.
• The text of documents attached to the records, such as lab reports.

A brief is written again only when the pet's record changes. Very long records are sent in part, and the brief says so.

What is never sent

• The client's name, phone, email, and address fields.
• Invoices, payments, prices, and other billing details.
• Photos and images. Only the text read from attached documents is sent.
• Conversations between the business and the family.
• The ratings and comments staff give about a brief.
• Staff-only internal notes, unless the business turns on "Include internal notes" in Settings. That option is off by default. When it is on, internal notes are sent only for staff allowed to read them.

Before notes and documents are sent, we replace the email addresses and phone numbers we detect in them. Names and street addresses are sent as written, so notes and documents can still mention people. For example, a lab report may have the owner's name printed on it. We instruct the AI model to leave names and contact details out of the brief.

Who receives it

The brief is written by an artificial intelligence model provider, a company outside Paw Miaw. It receives the text, writes the brief, and sends it back to us. We may change this provider, so we do not name it here. To know which one we use now, write to support@pawmiaw.com and we will tell you.

• According to the terms that provider publishes for this kind of service, as of the date of this Policy, it does not use what is sent this way to train its models unless the customer chooses to share it for that. Paw Miaw does not.
• That is not a promise that nothing is kept. The provider may keep requests and answers for a limited time, and longer when the law requires it or when it needs to enforce its usage rules.
• The provider may process the data in the United States or in other countries where it operates.

Who sees the brief

• Only staff of that workspace who are allowed to see the pet's records. Each person's brief is written only from the records that person may see.
• Families and pet owners never see the brief. It is not shown in the household app.
• The brief is marked as written by AI and cites the records it used.

What Paw Miaw keeps

• The latest brief for each pet, the list of records it was written from, and the short phrases it quoted from them as evidence.
• A log of each request: date, AI model, size, and result. It does not contain the text of the records.
• The thumbs up or down, reasons, and comments staff give about a brief, linked to the person who gave them. We use them to improve the feature.
• Who confirmed the explanation of Olfato AI for the business, when, where (Settings or setup), and which version of it, and each change to the setting.

A brief is replaced when the pet's record changes. If the business turns Olfato AI off, saved briefs stop being shown but are not deleted. We have not set a separate retention period for this information. It is kept with the workspace's records, as section 11 describes.

Reading attached documents

To read attached documents (PDFs and images), Paw Miaw extracts their text on the servers that run Paw Miaw, with software we operate ourselves. Documents are not sent to any outside text-recognition or AI service for this. The extracted text is stored with the record. When Olfato AI is on, it is part of what is sent, as described above.

No automated decisions

Olfato AI is a reading aid. It makes no decisions about people or animals, and Paw Miaw does not use it to approve, refuse, price, or rank anything. Staff decide what to do. A brief can leave something out or be wrong, so it must be checked against the record.

Telling clients

The business that turns on Olfato AI chooses to use it on its clients' records. It is responsible for telling its clients, as its own policies and the law require. When it turns the feature on, it confirms that its clients are informed, and we record that confirmation. If you are a client and have questions about how a business uses Olfato AI, ask that business. You can also write to us.

4. Who Is Responsible for the Data

Who decides how personal data is used depends on how you use Paw Miaw.

• Your account, your household, and your subscription. Paw Miaw decides how this data is used and is the data controller (in Mexico, the "responsable"). This covers your account, the household tools, billing with us, and our website.
• The client records of a pet-care business. The veterinary clinic or pet-care business decides what it records about its clients and their pets, and why. It is the data controller (the "responsable") for that data and is responsible for informing its clients. Paw Miaw processes that data on its behalf, as a processor (in Mexico, the "encargado"), and uses the providers listed in section 8 to do so.

In both cases, Paw Miaw is responsible for the security of the Service, for choosing the providers it uses, and for handling data as this Policy says.

5. How We Use Information

• Provide, operate, maintain, and personalize the Service.
• Create and manage accounts, households, pets, providers, staff, clients, appointments, records, routines, reminders, notifications, invoices, payments, and signed links.
• Send transactional emails, verification codes, password reset links, reminders, appointment updates, security notices, and support communications.
• Process provider subscriptions, invoices, payments, refunds, billing disputes, app store purchases, taxes, and accounting.
• Protect accounts, detect abuse, prevent fraud, debug errors, enforce terms, audit activity, and maintain service security.
• Analyze product usage, improve performance, develop features, and understand how users interact with Paw Miaw.
• Comply with legal obligations, respond to lawful requests, and protect the rights, safety, and property of Paw Miaw, users, providers, pets, and others.

6. Legal Bases for Processing

Where laws such as the GDPR or UK GDPR apply, our legal bases may include performance of a contract, legitimate interests, consent, compliance with legal obligations, and protection of vital interests. Our legitimate interests include operating and improving the Service, securing accounts, preventing abuse, supporting users, and communicating about the Service.

In Mexico, we process personal data in accordance with applicable data protection requirements for private parties, including notice, purpose limitation, security, and rights to access, rectification, cancellation, and opposition where applicable.

7. How We Share Information

We do not sell personal information. We also do not use sensitive pet care, provider, client, record, invoice, or message content for third-party advertising. We may share information as described below:

• With household members, providers, staff, clients, or invitees when you create, approve, join, or use shared features.
• With the service providers listed in section 8, which help us operate Paw Miaw, and only as needed for what each one does.
• With payment processors, app stores, banks, or tax/accounting providers for billing, subscriptions, refunds, receipts, disputes, fraud prevention, and compliance.
• With professional advisors, authorities, courts, or other parties when required by law or when needed to protect rights, safety, security, or enforce our agreements.
• In connection with a merger, financing, acquisition, reorganization, sale of assets, bankruptcy, or similar business transaction, subject to appropriate protections.

8. Service Providers

These are the outside companies that process data for the Service, what each one does, and what data it receives.

We also keep encrypted backup copies of the database with Cloudflare. The copies are encrypted before they leave our servers.

The Service has links that open other apps or sites when you tap them, such as WhatsApp, Google Maps, Apple Maps, and Waze. The link carries the phone number or address you tapped. From there, that service's own terms apply.

If we add or replace a provider, we will update this list.

9. Cookies, Tracking, and Analytics

We use necessary cookies and similar technologies for login, authentication, security, session management, preferences, and core Service functionality. We use Cloudflare Web Analytics to see which pages are visited and how the site performs, so we can improve Paw Miaw.

The iOS app stores preferences and operational state locally, such as language, theme, notification status, and installation state. Paw Miaw and its authentication, app-store billing, and service infrastructure may process limited product interaction, subscription, and diagnostic information to operate, secure, and improve the Service.

We do not use the Apple advertising identifier, third-party advertising pixels, or information from Paw Miaw to track your activity across other companies' apps or websites. If that changes, we will update this Policy and provide legally required notice and choices.

You can control some cookies through your browser settings. Some browsers or devices support opt-out preference signals. Where legally required and technically feasible, we will honor applicable opt-out preference signals.

10. International Transfers

We and our service providers may process information in countries other than where you live, including Mexico and the United States. Those countries may have privacy laws that differ from your local laws. Where required, we use appropriate safeguards for international transfers.

The providers listed in section 8 are based in the United States, Europe, and other countries, and may process data wherever they operate. They receive data only to provide their service to us.

When a business turns on Olfato AI, the pet record text described in section 3 is sent to its AI provider, which may process it in the United States or in other countries where it operates. A business that does not want this transfer can leave Olfato AI off or turn it off at any time.

When you use the Olfato AI chat, your questions, photos, and the pet information described in section 3 are sent to its AI provider, which may process them in the United States or in other countries where it operates. If you do not want this transfer, do not accept the chat's notice, or withdraw your acceptance.

11. Retention

We keep information for as long as needed to provide the Service, maintain accounts, support household and provider records, comply with legal and tax obligations, resolve disputes, enforce agreements, prevent abuse, and protect the Service. Retention periods vary based on the type of data, account status, legal requirements, and operational needs.

If you request deletion, we will delete or de-identify information where required and feasible, but we may retain information that we need for legal, security, fraud prevention, backup, accounting, dispute, provider record, or legitimate business purposes.

When you delete a single item inside the Service, such as a record, a note, a routine, or a pet, it stops being shown to you and your household. We keep a copy for the household's activity history and audit trail until the household or its owner's account is deleted. Gallery photos and individual attachments you delete are erased.

Account deletion includes a 48-hour cancellation period during which normal account access is frozen. If the request is not cancelled, we delete the account, authentication sessions, device tokens, personal files, and every household owned by that account, including its pets, records, photos, attachments, routines, appointments, and conversations, unless the owner chose to leave a household to another adult member, in which case that household passes to that person with its contents and moves to the free plan. Households the user only joined remain; we remove the user's membership and de-identify messages they authored there. Provider-workspace records are controlled by the clinic or business and may be retained with the workspace, while the deleted user's personal profile and membership are removed.

Olfato AI chats are kept until you delete them. Section 3 says what is erased when you delete a chat and what remains.

12. Security

We use administrative, technical, and organizational safeguards designed to protect information. No online service can guarantee absolute security. You are responsible for keeping your login credentials secure and for controlling who can access your household, provider workspace, staff account, signed links, and devices.

13. Your Privacy Rights

Depending on where you live, you may have rights to access, correct, delete, export, restrict, object to, or withdraw consent for certain processing of your personal information. Residents of Mexico may have ARCO rights: access, rectification, cancellation, and opposition. Residents of the European Economic Area, United Kingdom, and similar jurisdictions may have additional rights under applicable law. Residents of California and other U.S. states may have rights to know, delete, correct, opt out of certain sharing or targeted advertising, limit certain sensitive information uses, and not be discriminated against for exercising privacy rights.

To make a privacy request, contact support@pawmiaw.com. We may need to verify your identity and account authority before responding. If your request relates to information controlled by a provider, household, clinic, app store, or payment processor, we may direct you to that party or work with them as appropriate.

If your request is about the records a veterinary clinic or pet-care business keeps about you or your pet, including their use in Olfato AI, that business decides on it (see section 4). You can ask the business directly or write to us, and we will help it respond.

You can withdraw your acceptance of the Olfato AI chat's notice at any time in Olfato AI, and delete your chats there.

14. Children and Teens

Paw Miaw is not directed to children under 13, and we do not knowingly collect personal information directly from children under 13. If we learn that a child under 13 has provided personal information directly to Paw Miaw without required consent, we will take appropriate steps to delete it. Users who are 13 or older but under the age of majority must use the Service with permission and supervision from a parent or legal guardian.

15. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version with a new "Last updated" date. If changes are material, we may provide additional notice through the Service, email, or other appropriate means.

16. Contact

Privacy questions and requests can be sent to support@pawmiaw.com. Please include enough information for us to understand and verify your request.