Privacy Policy

1. Who this policy covers

This Privacy Policy describes how Furlii handles information through its mobile apps, website and customer portal. It covers pet parents using a personal space and people using a pet-care business workspace. Contact the Furlii team at [email protected] with privacy questions.

A pet-care business decides what client and care information it records, who on its team has access and what it publishes. That business may have its own privacy obligations and policy. Contact it about its own care records; contact us about your Furlii account and the operation of the service.

2. Information we handle

Account information includes your name, email address, language preference, optional profile photo, verification status and authentication records. Passwords are stored as hashes. If you use Apple or Google sign-in, we receive the identifiers and account information that provider shares.

Personal pet information includes names, species, breeds, birthdays, photos, feeding and care instructions, allergies, medication notes and emergency contacts you enter. Records can include vaccination dates and certificates, veterinary reports, insurance documents, receipts, reminders, photos and everyday notes. Documents and emergency contacts can contain information about people as well as pets.

Business information includes workspace and team details, roles, client names and contact details, invitations, business pet profiles, stays and visits, locations entered by staff, tasks, care notes, observations, handoffs, published updates, comments and activity history.

Content includes text, photographs, videos, voice recordings, transcripts and attachments you or authorized collaborators provide. Upload only information you have permission to use and share.

When notifications are enabled, device registration can include a push token, device model, operating system and app version. We also process technical request information, such as IP addresses and request times, to deliver and secure the service. Support messages include the information you send us.

Where purchases are offered, Apple or Google processes payment. We handle transaction identifiers, product and subscription status, renewal and expiry information needed to verify access. We do not receive your full payment-card details from the stores.

3. How information is used

We use information to create and secure accounts; store pet records and files; manage business workspaces, stays and care tasks; enforce access permissions; connect parents with providers; deliver updates and replies; operate reminders; verify purchases; provide support; and investigate errors, abuse and security incidents.

Account verification, invitations, password resets and published-update notices may be sent by email. Push notifications depend on device permissions, the event and the recipient. Not every email or activity produces a push notification.

Where data-protection law requires a legal basis, processing may be necessary to provide the service you request, comply with legal obligations, or pursue legitimate interests such as security and reliable operation, subject to your rights. Optional permissions and consent-based processing can be withdrawn as described below.

4. Personal spaces, businesses and sharing

You can use a personal space without connecting to a pet-care business. Connecting does not merge your personal records with the business workspace. A verified pet connection makes basic profile details available to that business, including the pet name, species, breed, birthday and photo. The business may keep a copy of the linked pet photo in its own storage.

Additional personal records require a sharing grant. You choose the available record categories, can set an expiry and can revoke access. Revocation stops future access through that grant; it cannot erase information a recipient has already viewed, downloaded or independently recorded.

Business staff see information allowed by their workspace role. Pet parents see updates published to them and the associated conversation, rather than internal working notes or unpublished AI drafts. Businesses retain their own operational records when a parent disconnects.

Content is not made public merely because you save it in Furlii. Sharing and invitations should be checked carefully, especially when files include client or emergency-contact information.

5. AI-assisted features

AI features can send relevant content to external model or transcription providers. For example, daily-update drafting sends pet or visit context and care-record titles, notes, types and times. Capture assistance may process text and supported images; transcription processes the voice recording submitted for that purpose.

AI Care Manager can review observations, replies, team context and related visit records to suggest routine follow-up actions. Staff must accept a suggestion before it changes the record. Daily-update drafts remain internal until a staff member reviews and publishes an update.

AI output can be incomplete or incorrect. People should check it before relying on or sharing it. Saving a document does not, by itself, mean Furlii reads its dates or contents with AI. Do not submit information to an AI feature that you are not authorized to provide.

AI processing involves a third party even when the result is only an internal draft. Contact [email protected] for information about the providers used for your deployment and their data handling. This policy does not promise zero provider retention or a particular model-training arrangement.

6. Service providers and other disclosures

Furlii uses service providers for hosting and database operations, file storage, AI and transcription, email delivery, and push notifications. The file-storage implementation uses Cloudflare R2. Apple and Google may process sign-in, store purchase and notification information when their services are used. Providers receive the information needed for the relevant function.

We may disclose information when required by applicable law, to respond to a valid legal request, or as necessary to investigate abuse and protect users and the service. A business transfer may involve service data, subject to applicable law and notice where required.

The website uses essential session and security cookies for sign-in and form protection. Its current layout also requests fonts from Google Fonts, which exposes technical request information to that service. Product demonstration cards use sample data; they are not public customer records.

7. Security and international processing

Furlii uses access controls, workspace permissions, authentication and protected file-access mechanisms to limit access. Keep your credentials secure and manage team membership and device permissions. No online service or storage system can guarantee complete security.

Depending on the infrastructure and service providers used, information may be processed outside your country. Applicable transfer requirements and safeguards must be considered for that processing. Contact us for information relevant to your location or business deployment.

8. Retention and account deletion

Information is kept while needed to operate your account or workspace and for applicable legal, security and recordkeeping purposes. Retention depends on the type of information and the workspace that holds it. This policy does not specify a universal deletion deadline for all records, logs, providers or backups.

In the app, open Settings → Delete account to review the deletion consequences and confirm. You can also email [email protected] to request account deletion or help if you cannot access the app. We may need to verify your identity; never send us your password.

Account deletion revokes access, removes sign-in and push registrations, and anonymizes the account profile. Personal and solely owned workspaces selected by the deletion process are removed, with associated stored files queued for deletion. If you own a workspace with other members, ownership must first be transferred so their shared work is not unexpectedly erased.

Content contributed to shared workspaces can remain as part of their history, with account attribution changed to a deleted-user identity. Client contact records, invitations and independent care records held by a business may remain in that business workspace. Ask that business, or contact us for assistance, about deletion or correction of those records.

Account deletion can affect other products using the same shared account, as shown in the deletion preview. Deleting the app or account does not itself cancel an App Store or Google Play subscription; manage renewal with the store.

9. Your choices and rights

You can edit supported profile and pet details, manage sharing grants and connections, and change camera, microphone, photo and notification permissions in your device settings. Withdrawing a permission may prevent the feature that needs it from working.

Depending on your location, you may have rights to access, correct, delete or receive a copy of personal information, restrict or object to processing, withdraw consent, or complain to your local data-protection authority. Contact [email protected] to make a request. Furlii does not currently offer a self-service export; you can still contact us about access or portability requests.

We may verify requests and consider applicable exceptions and the rights of other people. If a business controls the requested records, we may need to direct the request to or coordinate with that business.

10. Children and other people’s information

Furlii is intended for people able to manage a pet-care account or act for a business, not as a service directed to children. Do not create an account if you cannot legally agree to the Terms of Service in your location. If you believe a child has provided personal information inappropriately, contact us.

Please avoid uploading unnecessary information about children, staff, clients or other people. Obtain any permissions needed for their photographs, voice recordings or contact details.

11. Changes and contact

We may update this policy when the service or its data practices change. The date above identifies this version. Where required, we will provide additional notice or seek consent for a material change.

For privacy questions, access or deletion requests, or complaints, email [email protected]. Include enough information to identify the account or issue, but do not send passwords or unnecessary sensitive documents.