Pet Legacy Life Privacy Policy
V1.3 | Effective date: October 15, 2026.
Pet Legacy Life helps organize your pets' care, health information, and memories. The party responsible for the service is ADA Tech Group LLC, a Georgia company. Business address: 8735 Dunwoody Place, Suite 13876, Atlanta, GA 30350, USA. Privacy requests and support: support@petlegacylife.com; legal matters: legal@petlegacylife.com.
We collect your email address, authentication data, preferences, acceptance records, and the profile information you provide: first and last name, optional phone number, country or region, time zone, and profile photo. Your browser may suggest your country and time zone.
We store the pet information you add: health information, vaccinations, medications, clinical history, reminders, weight, microchip number, a saved clinic directory with current and previous clinics and their contact details and optional addresses, journal entries, memories, photos, and documents. When you save a scanned record, we retain the image of the document as the scanner prepared it on your device: reduced in size, not the original file from your camera. That image stays attached to the vaccination or medication record and is included in its deletion process. We retain the fields you review and confirm. We also store Vet AI conversations, generated tips, support messages, and subscription information.
We use this information to provide requested features, personalize your experience, send service communications and reminders according to your preferences, manage subscriptions, respond to inquiries, and protect accounts. Technical logs may contain account and pet identifiers and feature usage information.
An account owner can invite another person by email to share a pet. We store the invited email address even if that person has no account, the role and permissions, invitation and access dates, and invitation and revoked-access history. The invitation email includes the owner's name and the pet's name. After acceptance, the guest sees the owner's name and the owner sees the guest's email. Basic shared profile access includes the pet's name, species, breed, sex, neutered status, birth and family-arrival dates, color, weight, microchip, traits, and cover photo; it does not include clinic contact details. Access ends when revoked by the owner or at its end date.
Where additional sharing permissions are available and enabled, a guest may also view journal entries, memories, vaccinations, medications, and reminders, receive pet reminder emails, and add notes and photos, vaccinations, weight entries, and records of doses given. Contributions remain in the owner's pet records with the contributor's display name, or email if no profile name was provided, after access ends and after the guest deletes their own account. Deleting the guest's account removes their membership but does not remove their email from the owner's invitation history or their name from those contributions. Those records remain with the owner's account or pet records until the relevant records or account are deleted. Guests may request access, correction, or deletion of their personal information at support@petlegacylife.com; deleting their account alone does not remove it from another owner's records.
A pet owner can separately enable or disable a public memorial page. Anyone with its link can view the pet's name, cover photo, species, breed, birth and family-arrival years, memories individually selected for publication, and, if the owner chooses, the owner's first name. The page does not show health records or journal entries. The link is random and the page asks search engines not to index it, but it is public and anyone receiving the link can share it. Public photo addresses use opaque tokens that do not reveal the account identifier; each request checks that the page remains public.
Visitors do not need an account to light a candle or submit a message. When lighting a candle, you may optionally leave your name; if provided, it is visible only to the family that owns the pet's profile. If left blank, the candle is saved without a name. The public page displays only the candle count, even if messages are closed. Messages include the name entered by the visitor, the text, and the date, and become visible only after the owner approves them. To limit abuse and support visitor blocking, the memorial feature derives and stores a stable coded identifier from the visitor's IP address using a secret server key. It does not store or log the raw IP address in this feature. The coded identifier is pseudonymous, not anonymous: it stays the same for the same IP address and does not rotate or automatically expire. It is kept with each candle or message until the owner deletes that contribution or the pet is deleted; blocking records remain until the visitor is unblocked or the pet is deleted. The owner can approve messages, delete contributions, block visitors, and turn off the page. Turning it off stops public display but does not itself erase stored messages or identifiers. Report a page or request help with your visitor data at support@petlegacylife.com.
Supabase provides authentication, database services, and storage; Vercel hosts the application; Resend sends service emails; Hostinger provides the domain and mailboxes; and Stripe manages subscriptions and payments. Each provider receives information needed for its role.
Anthropic processes AI features. Vet AI may send your question, recent conversation history, and pet information including the profile, vaccinations, active medications, and recent journal notes. The scanner sends the document image and language; any personal information written on the document is included. Personalized tips use relevant pet information. When our team requests an AI-assisted support reply, we send Anthropic the customer's support message and subsequent replies to prepare a draft that a person reviews before sending. We do not separately send the customer's name or email for that purpose, but those details may be present in the message itself. Avoid including unnecessary personal information about other people.
Anthropic's general commercial terms state that it does not train its models on inputs and responses by default, except with authorization or under other exceptions described in its terms. We do not have a zero-data-retention agreement with Anthropic. Its standard API policy provides for deletion of inputs and outputs within 30 days, subject to its contractual, legal, and security exceptions; this does not delete the records stored in our application.
Our main database, hosting, and service-email infrastructure is in the United States, in the Northern Virginia and Washington, D.C. region. Other providers may process information where they operate. Authorized personnel may access information needed for support and administration, subject to access controls.
Canceling a plan does not by itself delete photos, documents, or memories. We retain content while the account exists, subject to these rules and the service terms. Turning on Legacy Mode alone does not publish or delete data; publication requires separately enabling the public memorial page described above. Certain health information remains stored even when hidden in the interface.
AI conversations currently have no defined automatic expiration period. Support messages, replies, and internal support notes also have no automatic expiration period. Deleting the account clears the message text and internal notes and deletes the support replies; the record identifier, language, status, and creation, closure, and clearing dates remain, as applicable. Acceptance records are deleted with the account and may remain in daily database backups for up to seven days.
When a journal entry, memory, or cover photo is deleted or replaced, the corresponding file enters a deletion queue processed daily. Document images associated with vaccinations or medications are included in the deletion process for those records. Deleting a clinical-history entry does not delete the document attached to it: that document belongs to the pet and stays in its Documents section until you delete it there, delete the pet, or delete your account. We do not describe current self-service deletion as complete deletion.
You can view or update information through available features and request access, correction, or deletion at support@petlegacylife.com. We may verify your identity. Rights and exceptions depend on applicable law.
We offer a JSON download of pets, vaccinations, medications, journal entries, memories, and reminders, without files. We also offer a ZIP copy containing photos and attached documents, a data file, and a browser-readable summary. It is prepared in the background, downloaded from Settings while signed in, and available for seven days; the email notice contains no download link.
The JSON download includes pets, vaccinations, medications, journal entries, memories, and reminders only. The ZIP copy is complete: it also includes Vet AI conversations, the clinical history, weight history, generated tips, preferences, acceptance records, support messages, and plan data, including items in the trash. It does not include our internal staff notes on your support messages, our payment-system identifiers, or operational quota counters. Contact support@petlegacylife.com for anything you cannot find in either file.
We use private storage and access controls. No system guarantees absolute protection. Database backups run daily, are kept for seven days, do not provide point-in-time recovery, and do not include file contents, including photos and documents. Separately, each night we copy uploaded pet, journal, and memory photos, profile and background pictures, and attached documents to private backup storage, with a copy for each file version, to help recover accidental deletions. Deleting an item on screen may precede removal of the file from active storage because the deletion queue is processed daily. When a file is removed from active storage, including when emptied from the trash, or a version is replaced by writing another at the same path, its backup copy is deleted in the next daily processing run after 30 days have elapsed from that event. If we could not verify that the copy matched the original, it is kept while the account exists. All backup copies belonging to a deleted account, including unverified copies, are deleted in the next daily processing run after 30 days have elapsed from account deletion. A file uploaded and deleted on the same day may never be copied. Backup copies can retain metadata from an earlier file version. Keep your own copies of important files.
Photos have been processed on your device before upload since October 1, 2026, and attached images since October 2, 2026, to remove metadata including GPS location. Older eligible photos were cleaned on October 7, 2026. Some files cannot be safely processed and may retain metadata, including a previously uploaded photo left unchanged to avoid corruption. PDF documents are not processed by this image-cleaning step and may retain their own metadata, including PDFs uploaded before October 2. If your browser cannot process an image, it is uploaded as it is and metadata may remain. This cleaning of active files does not remove metadata from older backup versions.
We use authentication cookies and functional storage for language preferences and email verification. We do not use third-party advertising or analytics tools in the launch version described by this policy.
Accounts are for adults aged 18 or older. A minor may participate only through a parent or guardian's account and under their supervision. We will date policy updates and communicate relevant changes when appropriate.