Snouty

About Snouty

Snouty is a mobile application that helps pet owners (especially cat and dog owners) manage the care

of their pets.

Pet Profiles

Create and manage pet profiles with detailed information

Care Routines

Track feeding, litter, nail clipping, and more

Play Activities

Plan and track play activities for your pets

Veterinary Records

Manage vaccines, treatments, medications, and surgical procedures

Cost Analytics

Track expenses and get detailed cost reports

Reminders

Receive timely notifications for pet care tasks

Cross-Device Sync

Access your data across all your devices

37 Languages

Multilingual support for global users

1. Data Collected

At Snouty, we respect your privacy and implement the highest security standards to protect your

personal data. When using the Application, we collect the following types of data:

Personal Information

- First name, last name, email address

- Password (encrypted)

- Preferred language and currency

Device Information

- Device ID, operating system version

- Application version, device model

Pet Information

- Your pet's name, species (cat/dog), breed

- Date of birth, weight history, photos

Care and Activity Data

- Care routines, play activities

- Health events, completion records

Veterinary Records

- Vaccination records, parasite treatments

- Veterinary visits, medication usage

- Surgical procedures, cost information

- Clinic and veterinarian names, insurance information

Photos

Your pet's photos (EXIF metadata is preserved but not analyzed or shared)

Usage Data

In-app interactions, feature usage, error reports (via Firebase Crashlytics)

Financial Data

Premium subscription purchases (processed via Apple App Store or Google Play Store, credit card

information is not stored by us)

6. Photos and EXIF Data

When you upload photos of your pet:

- Photos are stored encrypted on your device and in Supabase cloud storage

- EXIF metadata (location, camera information) is preserved but not analyzed or extracted

- Your photos are never shared or sold to third parties

- We do not perform face detection or biometric analysis on photos

- All photos are solely for your in-app use

You can delete or change your photos at any time.

2. Data Usage Purposes

We use the collected data solely for the following purposes:

- Provide application services and manage your pet care tracking

- Create and authenticate your account

- Send reminder notifications for care routines, play activities, and health events

- Manage subscriptions for premium features (via Apple/Google)

- Enable cross-device synchronization

- Improve application performance and user experience

- Detect and resolve technical issues (error reports)

- Provide user support

- Fulfill our legal obligations

Your data is never used for marketing, advertising, or third-party sales purposes.

4. Data Security and Encryption

The security of your data is our highest priority. We implement the following security measures:

AES-256 Encryption

Secure Key Management

TLS 1.3 Protocol

bcrypt Password Hashing

Row Level Security (RLS)

Security Details

- Local Database Encryption: All local data is protected using SQLCipher with

AES-256 bit encryption

- Secure Key Management: Encryption keys are stored in platform-native secure

storage mechanisms such as iOS Keychain and Android Keystore

- Network Security: All server communications are protected with TLS 1.3

encryption protocol

- Password Security: User passwords are hashed using bcrypt algorithm and never

stored in plain text

- Row Level Security (RLS): In Supabase database, each user can only access their

own data

- Regular Security Updates: We quickly apply security patches and keep them up to

date

However, no internet transmission or electronic storage system is 100% secure. While we take

reasonable security measures, we cannot guarantee absolute security.

5. Sensitivity of Veterinary Data

Your veterinary records (vaccinations, treatments, medications, surgical procedures, health events)

are classified as sensitive health information and are specially protected.

Can only be viewed and managed by you

Is stored encrypted within the application

Is never used for advertising or analytics purposes

Is not shared with any third party unless you request it

You can delete your veterinary records at any time.

7. Data Retention Period

Your data is retained for the following periods:

- Active Account Period: All your data is retained as long as your account is

active

- After Account Deletion: When you delete your account, all your personal and pet

data is permanently deleted within 30 days

- Legal Obligation: Some data (transaction records, invoice information) may be

retained longer due to legal obligations

- Backup: Deleted data is completely cleaned from backup systems within 30 days

You can delete your account using Settings > Account > Delete Account section.

11. Cookies and Tracking Technologies

Snouty does not use traditional web cookies as it is a mobile application. However, we use the

following local storage technologies:

Mandatory Data (Cannot Opt-out)

- Session Management: Secure tokens to maintain your login status (Supabase Auth)

- Account Data: Username, email, pet information (required to provide service)

- Preferences: Language, currency, theme preferences (required for user

experience)

Optional Data (Consent Requested on First Launch)

- Notification Tokens: OneSignal device tokens to send reminder notifications

(can be toggled in-app)

- Error Reports: Firebase Crashlytics error reports (can be disabled in Settings

> Privacy)

- Cache: Temporary data caching for application performance

Consent Mechanism

- Users are asked to accept Privacy Policy and Terms of Service on first app launch

- Data collection consent is obtained during account creation (explicit consent)

- Separate permission is requested for notifications (iOS/Android system permission)

- Users can disable notifications anytime in Settings > Notifications

- Error reporting can be disabled in Settings > Privacy (planned feature)

This data is stored locally on your device and you can clear it at any time by deleting the

application.

3. Third-Party Services and Data Sharing

We absolutely do not sell, rent, or share your personal data or pet information with

third parties for commercial purposes.

However, we work with the following trusted third-party service providers to deliver application

services:

Supabase (Backend and Database)

All user, pet, and application data is securely stored on AWS servers (US/EU regions).

Privacy Policy: https://supabase.com/privacy

OneSignal (Notifications)

Processes device ID and notification segments to send reminder notifications. Data center: USA.

Privacy Policy: https://onesignal.com/privacy_policy

Apple App Store / Google Play Store (Subscription Management)

Premium subscription purchases are processed by Apple or Google. Billing information (name, address,

payment method) is stored by Apple/Google and not shared with us. Credit card/bank information is

never stored on our servers. We only receive subscription status (active/cancelled) and purchase

date information.

Firebase Crashlytics (Error Reporting)

Sends anonymous error reports to detect application crashes and errors.

Privacy Policy: https://firebase.google.com/support/privacy

Important: Users will be notified in advance for planned maintenance (in-app

notification and/or email). In case of emergency outages, post-incident notification will be

provided. We reserve the right to disclose your data to authorities in case of legal obligation

(court order, legal process).

10. International Data Transfer

Snouty is a Turkey-based application, but some third-party services we use may store your data on

international servers:

- Supabase: AWS US/EU regions

- OneSignal: US servers

- Firebase: Google Cloud servers (global)

GDPR Compliance and Schrems II Ruling

These transfers are protected by Standard Contractual Clauses (SCC) under Article 46 of GDPR. In

accordance with the European Court of Justice's Schrems II ruling (C-311/18), additional security

measures are implemented for US transfers:

- End-to-End Encryption: All data transfers are encrypted with TLS 1.3 protocol

- Storage Encryption: Data on servers is stored encrypted with AES-256

- Access Control: Only authorized users can access their data through Row Level

Security (RLS)

- Data Minimization: Only necessary data is transferred to third-party services

- Regular Security Audits: Our service providers have SOC 2, ISO 27001

certifications

EU-US Data Privacy Framework

Supabase is registered with the EU-US Data Privacy Framework and implements GDPR-compliant data

protection standards.

User Rights

EU/European Economic Area (EEA) users can object to the transfer of their data to the US and exercise

their right to erasure. To object, contact legal@bearcodestudio.com .

Snouty may offer premium subscription features. Payment and subscription handling is described in the Terms of Service and is managed by the relevant app store or payment provider.

8. User Rights (GDPR/KVKK Compliance)

Under the European Union General Data Protection Regulation (GDPR) and Turkish Personal Data

Protection Law (KVKK), you have the following rights:

Right of Access

Right to learn what personal data is collected

Right of Rectification

Right to correct incorrect or incomplete data

Right to Erasure

Right to request permanent deletion of your data (right to be forgotten)

Right to Data Portability

Right to receive your data in structured, machine-readable format

Right to Object

Right to object to data processing

Right to Restriction

Right to request restriction of data processing

To Exercise Your Rights:

- You can use the Settings section in the app

- You can send an email to legal@bearcodestudio.com

Your requests will be answered within 30 days.

9. Children's Privacy

Snouty is not intended for use by children under 13 years of age. We do not knowingly collect

personal data from users under 13 years of age.

If you are a parent of a child under 13 and discover that your child has provided us with personal

data, please contact us immediately at legal@bearcodestudio.com . We will delete such data

immediately upon detection.

In the European Union, the age limit for digital services may vary between 13-16 depending on member

countries.

12. Changes to Policy

We reserve the right to update this Privacy Policy from time to time. When significant changes occur:

- You will be notified via in-app notification

- You will be informed via email (to your registered email address)

- You will be asked to accept the new policy

The update date is shown at the top of this page as 'Last Updated'. By continuing to use the

application, you are deemed to have accepted the current policy.