01
Who processes your data
Noovia is an app for keeping pet health records and care routines. The data controller is Vadim Anosov, independent developer of Noovia (Russia). For any privacy question write to privacy@noovia.pet — we reply within 30 days, usually sooner.
This policy explains what the app processes, why, and how you stay in control. By installing and using Noovia you agree to it. You can delete your account in the app or through the
account deletion page.
02
How storage works
Noovia is offline-first: the primary copy of your records lives in a local database on your device, and the app keeps working with no internet connection — records created offline reach the cloud once you are back online. The app does need an account: you sign in on first launch, before you add your first pet, so records are copied to the cloud from the very start.
Your records are copied to our server in Russia so you can restore a pet's history after reinstalling, switching phones, or open it on a second device.
cloud_uploadGoes into the cloud backup
Owner and pet profiles, vaccinations, vet visits, surgeries, parasite treatments, microchip records, reminders and events, diary, weight entries, walks, care-routine completion marks, the photos attached to records, and game progress: XP, streaks, badges, coins and habits.
smartphoneStays on the device only
The local reminder schedule and app settings. The records those reminders point at are in the cloud: after a reinstall and sign-in they come back, and the app schedules the reminders again.
03
What data is processed
Account — only if you choose to sign in
- Email address and internal account identifier
- Account identifier from Google or Apple sign-in (we never receive those passwords)
Data about you as the owner
First name, last name, date of birth and email address — if you fill in your personal details in the owner profile. That is everything the app knows about you: we never ask for or store your city, phone number or postal address.
Pet data you enter yourself
- Pet profile: name, species, breed, colour, sex, birth date, country, veterinary passport number, weight, sterilisation date, notes and a photo
- Medical records: vaccinations (product, date, lot, next due date), parasite treatments, vet visits, surgeries, medication and allergies; any record may include the clinic name, the veterinarian's name, a note and photos of documents
- Microchip: chip number, implantation date and location, a photo of the document
- Care and calendar: routines, reminders, the place of an event, completion marks
- Diary and activity: notes, weight entries, walks (duration, steps, distance) and photos attached to records, walks and care marks
badge
Vet details are another person's data
A veterinarian's name and a clinic name are personal data of a third party. We use them only to display your record and include it in the PDF summary: we never verify, enrich or share them. These fields are optional — add them at your discretion.
Device data
- Steps during a walk. The app reads the device step counter while a walk is running. That is steps and duration, not a route: Noovia does not use or request GPS or location. These are your steps rather than your pet's, so we treat them as fitness data.
- Photos. Taken from your gallery or camera only when you pick them, and stored in the app's files.
- Technical data. The app reads the device time zone and language to schedule reminders correctly and to show the right interface; those stay on the device. Separately, app authenticity checking (Firebase App Check) sends Google and Apple app and device integrity signals — but not your records. Noovia does not collect advertising identifiers.
- Support requests. The text of your message and the address you wrote from.
04
What we never do
sellWe never sell your data or share it for advertising
location_offWe do not request location or track walk routes
contactsWe do not read contacts, calls, messages or other apps
ads_clickNo advertising identifiers, no analytics, no third-party trackers
05
Why we need it
- Store the medical card, calendar and diary and show them to you
- Calculate the next due dates and deliver local reminders
- Compute the care index, XP, streaks, badges and coins from your own records — and back that progress up to the cloud together with them when you are signed in
- Build the vet PDF summary: the file is generated on the device and you decide who receives it
- Authenticate sign-in, sync and restore data across devices
- Answer support requests and fix defects
Legal bases: performance of our agreement with you (the Terms of Use), your consent for notifications, step counter and photo access, and our legitimate interest in keeping the service secure and working.
06
Who we share it with
We only involve the services that sign-in and backup cannot work without. They process data on our instructions and may not use it for their own purposes.
Firebase Authentication (Google)
Email, Google and Apple sign-in. Processes your email and account identifier.
Noovia server (cloud.ru, Russia)
The cloud copy of your records and photos. The virtual machine and object storage are rented from the Russian provider cloud.ru; access to anyone else's records is blocked by an ownership check on the server.
Firebase App Check (Google)
Confirms that a request comes from the genuine app rather than a bot. The check runs through Play Integrity on Android and App Attest on iOS: Google and Apple receive an attestation token and app and device integrity signals. Your records take no part in this check.
App Store and Google Play
If paid features are introduced, the store handles payment under its own terms. We never receive card details.
We may disclose data where the law directly requires it, for example on a lawful request from a competent authority.
Records and photos are stored in Russia. The only thing that leaves the country is what sign-in cannot work without: your email address and account identifier, processed by Firebase Authentication on Google's servers under the Google Cloud Data Processing Addendum and the Standard Contractual Clauses approved by the European Commission.
07
Device permissions
Every permission is requested at the moment it is needed and can be declined — the app keeps working, just without that feature.
notificationsNotifications
Reminders are scheduled locally on the device. Without it records are still saved, but no reminders arrive.
directions_walkPhysical activity
Step counter access for walks. Without it a walk can still be tracked by time.
photo_cameraPhotos and camera
Only for images you attach to a pet or record. We never scan your whole gallery.
08
Security and retention
On-device data is protected by the operating system; sign-in tokens are kept in secure key storage. Data travels over encrypted connections only, and cloud records are restricted by server-side security rules.
Records are kept as long as you use them: local data until you delete it in the app, clear app storage, or uninstall; cloud data while your account is active. A deleted record does not vanish from the server at once: a deletion marker stays in its place for up to 90 days so that your second device learns about the deletion on its next sync. Deleting your account deletes both the cloud copy and the local database together with the stored photos. Support correspondence is kept for up to a year.
No safeguard is absolute, so we recommend exporting important records to PDF as well.
09
Your rights and account deletion
- Access and correction. Edit or delete any record, pet or photo right inside the app
- Copy of your data. The medical card and care plan export to PDF from the pet screen. If you need a machine-readable export of the cloud backup, write to us and we will prepare it within 30 days
- Objection and withdrawal of consent. You may object to processing, withdraw notification, step counter and photo permissions in device settings, and keep using the app locally
- Restriction and erasure. Ask us to correct, restrict or erase your data by email, or do it yourself in the app
key_off
Deleting your account erases everything
Owner profile → Delete account. This removes the account, the cloud backup
and the local database with photos on your device. The data cannot be recovered, so export a PDF first. If you lost access to the app, send a request through the
account deletion page or write to privacy@noovia.pet from the account address.
If our reply does not satisfy you, you may contact a supervisory authority: Roskomnadzor in Russia, or the data protection authority of your country in the EEA and the UK.
10
Children
Noovia is made for pet owners and is not directed at children under 13. We do not knowingly collect their data. If you believe a child has provided us personal data, contact us and we will delete it.
11
Changes and contact
We update this policy when app features change. The current version always lives on this page, with the update date at the top. We will announce material changes in the app.
Questions, requests and complaints: privacy@noovia.pet.