Teddy Journal app privacy policy
Effective: 2026-10-30
This policy covers the Teddy Journal iOS app (iPhone, iPad) and the service behind it. The website (visitor statistics) has its own privacy notice.
Data controller
- Company
- Prendev Korlátolt Felelősségű Társaság
- Registered office
- 3300 Eger, Hétvezér utca 3. 1. em.
- Company registration number
- Cg. 10-09-041721
- Tax number
- 32174601-2-10
- EU VAT number
- HU32174601
- Contact
- info@prendev.com
Account and sign-in
You sign in with Apple or Google. We receive the account identifier, your email address and – if you share them – your name and profile picture. On first launch you can add your birthday and gender; we store your chosen language, time zone and units. Legal basis: providing the service, performance of a contract (GDPR Art. 6(1)(b)). Retention: until you delete your account.
Pets and entries
What you record in the app: your pets’ details (name, species, breed, sex, date of birth, microchip number, allergies, conditions, photo), feeding, medication, health, grooming, measurement and journal entries (text, mood, photos), and contacts (e.g. your vet’s name and phone number). Legal basis: performance of a contract. Retention: until you delete them, at the latest until you delete your account.
Documents
Uploaded documents (e.g. vaccination record, pet passport) may contain personal data. We store them encrypted with AES-256-GCM on the server; only you and the pet’s co-carers can access them. For offline use the app also keeps a copy on your phone, protected by iOS file protection and excluded from backups.
Shared care
When you invite a co-carer, we email an invitation to the address you enter. Once accepted, the co-carer sees the pet’s details, entries and documents, and your name. If you delete your account, the primary owner role of shared pets passes to a co-carer.
Notifications
If you allow notifications, we store your phone’s push token for reminders (feeding, medication, invitations) and send them through the Apple Push Notification service. You can turn this off in iOS Settings at any time.
Operational and statistical data
For troubleshooting and abuse prevention the server logs technical request data (path, status code, user ID – without content, passwords or tokens); legal basis: legitimate interest (GDPR Art. 6(1)(f)). We keep the days on which you used the app for 200 days for aggregate statistics. For aggregate statistics we also store the device type (iPhone, iPad or iPhone Duo) and app version you last used; these are kept until you delete your account. Feedback you send includes the app version and device type. We don’t track you across other apps or websites, show no ads and never sell your data.
Error reporting
When an error occurs, the app and the server may send an error report to Sentry (error message, device type, app version), with personal data scrubbed and without storing IP addresses; legal basis: legitimate interest.
Retention and deletion
We keep your data until you delete your account. In Settings › Delete account you can delete your account and all related data, photos and documents in one step; for Sign in with Apple we also revoke the app’s access with Apple. Exception: the log of administrator actions (identifier, email address) is kept for 2 years for accountability. Technical session data and generated export files are deleted automatically after a few days.
Your rights
Access and portability: download all your data in the app’s Settings (CSV and PDF). Correction: everything can be edited in the app. Deletion: Settings › Delete account. For restriction, objection, withdrawing consent or any question, email us at the address above; we reply within one month.
Children
The app is not intended for children under 16, and we don’t knowingly process their data. If we learn of such an account, we delete it.
Changes
If this policy changes materially, we’ll let you know in advance in the app or by email. The current version is always available on this page.
Processors
We use the following providers; transfers outside the EU rely on the European Commission’s standard contractual clauses or the EU–US Data Privacy Framework.
- Railway Corporation (USA) – servers, database and file storage.
- Apple Inc. (USA) – Sign in with Apple and push notifications.
- Google LLC (USA) – Google sign-in.
- Resend, Inc. (USA) – sending emails (invitations, export ready).
- Functional Software, Inc. (Sentry, USA) – error reporting.
Complaints
If you think we have infringed your rights, you can lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH, 1055 Budapest, Falk Miksa utca 9–11., www.naih.hu) or go to court.