Privacy Policy

Last updated: 3 July 2026

This Privacy Policy explains how Profit Mining s. r. o. ("we", "us", "our") collects, uses, and protects your personal data when you use Pet Health (the "App"), a pet health-tracking web application.

We are committed to protecting your privacy and handling your data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Slovak law.


1. Who we are (Data Controller)

The controller of your personal data is:

Profit Mining s. r. o. Heydukova 2138/1, Bratislava, Slovakia IČO: 54829348

For any privacy-related question or to exercise your rights, contact us at: business@profitmining.sk


2. What data we collect

Account data. Your email address and authentication details, used to create and secure your account.

Pet profile data. Information you enter about your pets: name, species, breed, date of birth, weight, photos, and similar details.

Vet documents and health records. Documents and photographs you upload (for example, vaccination booklets and vet reports). These documents may contain your name and address and are therefore treated as your personal data. We do not treat pet health information as special-category (sensitive) personal data under the GDPR, as that category applies to human health data.

Records generated from your documents. Structured data automatically extracted from the documents you upload — such as vaccination dates, preventive-care schedules, and reminders.

Content you create. Training plans, notes, chat messages with the in-app AI assistant, and sharing relationships (for example, sharing a pet with a co-owner, viewer, or trainer).

We do not use third-party analytics or tracking tools, and we do not use advertising cookies.


3. Why we process your data and our legal basis

PurposeLegal basis (GDPR Art. 6)
Creating and managing your accountPerformance of a contract (Art. 6(1)(b))
Storing your pet records and documentsPerformance of a contract (Art. 6(1)(b))
Extracting structured records from your documents using AIPerformance of a contract (Art. 6(1)(b))
Sending reminders and transactional emailsPerformance of a contract (Art. 6(1)(b))
Keeping the service secure and preventing abuseLegitimate interests (Art. 6(1)(f))
Complying with legal obligationsLegal obligation (Art. 6(1)(c))

4. AI processing of your documents

To turn your uploaded documents into structured records, we send document content to Google (Gemini API), acting as our processor.

We use the paid tier of the Google Gemini API. Under Google's paid-tier terms, your content is not used to train Google's AI models.

This processing may involve a transfer of data outside the European Economic Area (see Section 7 on international transfers).


5. Who we share your data with (Processors / Subprocessors)

We do not sell your data. We share it only with service providers who process it on our behalf, under data processing agreements:

  • Supabase — database, file storage, and authentication. Your data is hosted in the European Union (EU region).
  • Vercel — hosting and delivery of the application.
  • Google (Gemini API) — AI extraction of structured data from your uploaded documents (paid tier; no model training on your content).

Transactional emails (for example, sign-in and account emails) are sent using Supabase's built-in email service. We do not use a separate marketing or email-campaign provider.


6. Sharing between users

The App lets you share a pet with another person:

  • Co-owner / viewer — can see the pet's records according to the access level you grant.
  • Trainer — receives training-only access and does not see the pet's medical or vet-document data.

You control these shares and can revoke them at any time. When you share a pet, the people you share with will see the data covered by their access level.


7. International data transfers

Some of our processors (in particular Google) may process data outside the European Economic Area, including in the United States.

Where data is transferred outside the EEA, we rely on appropriate safeguards under the GDPR, including the European Commission's Standard Contractual Clauses (SCCs) and the processor's Data Processing Agreement. You can request more information about these safeguards using the contact details above.

Your primary data storage (database, files, authentication) with Supabase remains hosted in the EU region.


8. How long we keep your data

We keep your data for as long as your account is active.

When you delete your account (see Section 9), we immediately and permanently delete your account and all associated data from our live systems. Residual copies contained in encrypted backups are purged within the backup-retention window, which is up to approximately 30 days.


9. Your rights

Under the GDPR, you have the right to:

  • Access your data,
  • Rectify inaccurate data,
  • Erase your data ("right to be forgotten"),
  • Restrict or object to processing,
  • Data portability (receive your data in a structured, machine-readable format),
  • Withdraw consent where processing is based on consent,
  • Lodge a complaint with a supervisory authority.

We have built the two most important of these directly into the App:

Delete your data. Under Account → Danger Zone, you can delete your account yourself. After you confirm by typing DELETE, the App immediately and permanently erases your account and all associated data (pets, records, documents, vaccinations, training data, chat, reminders, and sharing memberships) and removes your stored files. Backup copies purge within the retention window described in Section 8.

Export your data. Under Account → Your data → Export my data, you can download a JSON file containing all your data, together with time-limited (1-hour) download links to your original documents and photos.

To exercise any other right, contact us at business@profitmining.sk.

You also have the right to lodge a complaint with the Slovak supervisory authority: Úrad na ochranu osobných údajov Slovenskej republiky (Office for Personal Data Protection of the Slovak Republic), www.dataprotection.gov.sk.


10. Data security

Your data is stored with Supabase in the EU region, protected by authentication and access controls. We take reasonable technical and organizational measures to protect your data against unauthorized access, loss, or misuse. No system is completely secure, but we work to keep your data safe.


11. Children

The App is intended for adults (pet owners). It is not directed at children under 16, and we do not knowingly collect data from children.


12. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you within the App or by email. The "Last updated" date at the top shows when this policy was last revised.


13. Contact

Profit Mining s. r. o. Heydukova 2138/1, Bratislava, Slovakia Email: business@profitmining.sk