Privacy Policy
Last updated: 2026-05-13
This Privacy Policy explains how CatMD ("we", "us", "our") collects, uses, and protects information when you use the CatMD mobile application (the "App"). CatMD is an informational app for cat owners — it is not a substitute for professional veterinary advice. See the Medical Disclaimer and Terms of Service.
1. Summary in plain English
- We collect as little as possible. By default you use CatMD with an anonymous account — no email, no name, no real-world identity.
- Your cat's profile, scans, diary, and chat history live on your device first. We mirror them to our secure database so you can recover them if you change phones, but we never sell or share them.
- Photos, videos, and audio recordings you submit (for scans, body-language readings, meow translations, postcards, themed art) are sent to our AI processing partner (OpenAI) to generate the response you asked for. They are stored with the corresponding record in your history so you can revisit it; deleting the record deletes the file.
- Approximate location (rounded to ~10 km, e.g. city-region level) is used only to fetch local weather so your cat can reference real conditions in chat and diary. We never store precise GPS coordinates. Location is optional — the App works without it, minus the weather references.
- AI-generated content. Chat replies, diary entries, meow translations, postcards, themed art, daily cards, and scan summaries are AI-generated — treat them as creative interpretation or observations, not as factual claims or medical advice.
- You can delete everything at any time. The "Forget everything about my cat" button in Settings permanently erases your cats, scans, photos, videos, audio, diary, and chat history from our servers and your device. You can also request deletion without the app at /delete-account.
2. Who we are
The App is operated by CatMD ("we", "us"), based in Singapore. For privacy questions, email support@catmd.pet.
3. What we collect and why
3.1 Data you provide directly
- Cat profile: name, breed (optional), date of birth / age (optional), weight (optional), sex, spay/neuter status, indoor/outdoor, known medical conditions, current medications, photo, free-text notes, emergency vet contact. Why: so CatMD can tailor responses to your specific cat.
- Scan inputs: the text you type describing symptoms and any photo you attach. Why: to analyse the situation.
- Body-language videos (~6 seconds): short clips of your cat for posture and motion analysis. Why: to generate a body-language reading.
- Meow audio recordings (~4–20 seconds): short audio clips of your cat vocalising, optionally paired with a still photo. Why: to generate a meow translation.
- Chat messages: text you type to your cat. Why: to generate the cat's reply.
- Daily check-ins: mood, appetite, water, litter, weight — all optional. Why: to feed the diary and surface health trends.
- Tagged photos: photos with optional people / other-pet tags. Why: so the cat can reference named family members and other pets in chat and diary.
- Account email (only if you choose to add one — anonymous use does not require an email). Why: to let you recover your data on a new device and confirm Pro subscriptions. No password is required — we use one-time 6-digit codes ("OTP") sent to your email.
- Health-log entries: vaccinations, medications, weights, appointments, symptom photos, water intake, litter-box use, respiratory rate, pain scores, outcome check-ins, feeding notes — all optional and owner-entered.
3.2 Data we generate for you
- Scan / triage results: observation summary, severity score, plain-language interpretation, suggested next steps. Stored with your scan.
- Body-language readings: structured observations (eyes, ears, tail, body, motion). Stored with the reading.
- Meow translations: AI-generated interpretation of the vocalisation paired with the audio and any optional photo.
- Diary entries: AI-written daily journal in your cat's voice, based on the day's activity.
- Daily card, weekly reading, postcards, themed art: AI-generated shareable content.
- Chat replies: AI-generated responses from your cat's perspective.
- Memory items: objects, places, named people, and pets the AI extracts from your photos and chat. The cat then references these by name to feel personalised.
- Reminders: if you enable a medication or check-in reminder, we schedule a local notification on your device. These are not sent through our servers.
3.3 Data we automatically receive
- Anonymous account identifier — a randomly generated user ID that lets the App persist your data without knowing who you are.
- Approximate location — when you grant location permission, we fetch your coarse coordinates (rounded to ~10 km, e.g. city-region level) only to retrieve local weather from Open-Meteo so your cat can reference real weather in chat and diary. We never store precise GPS coordinates. If you deny location permission, the App works exactly the same minus weather references.
- Technical data: app version, OS version, device model, crash reports, anonymised usage analytics. Helps us fix bugs and improve the App.
- Purchase data: if you subscribe to Pro, our subscription processor (RevenueCat) receives your anonymous user ID and the Google Play / Apple receipt. We do not receive or store your credit card or payment method — that stays with Google / Apple.
4. AI-generated content
CatMD uses generative AI to produce chat replies, diary entries, meow translations, daily cards, postcards, themed art, and scan summaries.
- Content is AI-generated, not authoritative. Treat scan and body-language outputs as observations to discuss with a vet, never as a diagnosis. Treat chat / diary / postcard content as creative interpretation, not factual claims.
- You can report problematic AI output. If a generated response is inaccurate, offensive, or unsafe, email support@catmd.pet with the screenshot or the scan / chat ID. We review reports within 7 days and update our prompts and guardrails accordingly.
- No training on your data. Our AI partners process your inputs in real time to return a result. We do not consent to your data being used to train their general-purpose models.
5. Who we share data with
We use the following sub-processors. Each is contractually obliged to handle your data for our purposes only.
| Processor | Purpose | Data shared |
|---|
| Supabase, Inc. | Hosting, database, authentication | Cat profile, scans, body-language reads, meow translations, diary, chat, account identifier, optional email |
| OpenAI, LLC | AI text + image + audio analysis (chat, diary, scan, body-language read, meow translation, postcard captions, themed art) | Your text, attached photos, attached videos, audio clips — sent at the moment of the request |
| Open-Meteo | Weather data | Coarse coordinates rounded to ~10 km, no identifier |
| Cloudflare, Inc. | Network proxy, landing pages | All API + web traffic (metadata only, not bodies at rest) |
| Sentry, Inc. (if enabled) | Crash reporting | Crash reports with de-identified device info |
| PostHog, Inc. (if analytics enabled) | Product analytics | Anonymous usage events |
| RevenueCat, Inc. (if you subscribe) | Subscription management | Anonymous user ID + purchase receipts |
| Google LLC / Apple Inc. | Store billing | Payment processed by Google Play Billing or Apple App Store — they receive your payment method, we never do |
We do not sell your personal data. We do not share your data with advertisers.
6. How long we keep data
- Cat profiles, scans, body-language readings, meow translations, diary entries, chat history, photos, videos, audio, health logs, reminders: kept until you delete them or your account.
- Photos attached to scans, postcards, or studio art: kept with the record. Deleting the record deletes the file.
- Audio recordings (meow translator): kept with the translation record. Deleting the translation deletes the audio.
- Videos (body-language): kept with the reading record. Deleting the reading deletes the video.
- Weather coordinates: cached locally for 6 hours, never persisted server-side beyond that cache.
- Anonymous analytics: retained for 24 months maximum.
- Crash reports: retained for 90 days.
- Scan-usage counters (for fair-use limits): retained indefinitely, tied to your user ID only.
7. Your rights
Depending on your location, you have the right to access, rectify, erase, port, restrict, or object to the processing of your data, and to withdraw consent at any time. In Singapore, the Personal Data Protection Act 2012 (PDPA) governs these rights; residents of the EU/UK also have rights under the GDPR.
To exercise any right:
- Use Settings → Forget everything about my cat in the App to hard-delete your data immediately, OR
- Visit /delete-account to request deletion without the app, OR
- Email support@catmd.pet.
We respond to rights requests within 30 days.
8. Children
CatMD is not intended for users under 13 (under 16 in the EU/UK or equivalent jurisdictions). We do not knowingly collect data from children. If you believe a child has used CatMD, email us and we will delete the associated data.
9. Security
- Data in transit is encrypted with TLS 1.2+.
- Data at rest in our database is encrypted (AES-256, managed by Supabase).
- Photos, videos, and audio you submit are sent over TLS to OpenAI for processing. See OpenAI's API data-usage policy at openai.com/policies/api-data-usage-policies.
- You can run the App entirely anonymously. No identifier ties your scans to a real-world identity unless you add an email address.
No system is perfectly secure. If we become aware of a breach affecting your data, we will notify you within 72 hours as required by law.
10. International transfers
Your data may be processed in the United States, the European Union, or other locations where our sub-processors operate. Where required, we rely on Standard Contractual Clauses or an adequacy decision for transfers out of your home jurisdiction.
11. Changes to this policy
If we change this policy we will update the "Last updated" date above and, for material changes, notify you in-app before the change takes effect.
12. Contact
For any privacy question or request, email support@catmd.pet. For account deletion without the app, see /delete-account.
Contact: support@catmd.pet
· Based in Singapore.