Privacy Policy

Version of 30 October 2026

Senkyno is a health diary for senior dogs: the website senkyno.com (for dog owners and vets) and the Senkyno app for Android (for owners). This policy explains which personal data we process, for what purposes and on what legal basis, who receives it, how long we keep it and what rights you have. It provides the information required by Articles 13 and 14 of the GDPR (Regulation (EU) 2016/679).

1. Controller and contact

The controller is:

For anything about personal data, write to kontakt@senkyno.com. We have not appointed a data protection officer, as we are not required to (Article 37 GDPR, Section 38 of the German Federal Data Protection Act, BDSG). The full provider details are in the Legal notice.

2. What data we process and where it comes from

2.1. Account

E-mail address, name or display name, how you sign in (Google account or a link sent by e-mail), account ID, account type (dog owner or vet), chosen language, dates of account creation and sign-in. This data comes from you; when you sign in with Google, Google passes us your name and e-mail address.

2.2. Your dog and its health diary

• Dog profile: name, breed, date of birth or age, weight, conditions, photo, and the time zone of your device (for example Europe/Warsaw), so that reminders arrive at the right time.
• Daily entries (mobility, symptoms, mood, appetite, pain, energy), weight, medicines and doses given, events, quality-of-life ratings, notes, saved reports (the dossier).
• Photos and videos. Before upload we remove their metadata, location included, and we scale photos down.

Your dog's health data is not data about your health within the meaning of Article 9 GDPR: it concerns an animal. It is personal data because it is linked to your account, and we protect it like all other data. Please do not put information about your own health or other people's health into notes.

2.3. Working together and sharing

• Invitations to a dog (for a caregiver or a vet) and the list of people with access to the dog, with their names.
• Visits a vet records and shares with the owner, messages in the thread between owner and vet, reports sent to a vet.
• Public report links (senkyno.com/r/…): the report contains the dog's data and the owner's name, and anyone who has the link can open it.
• Clinic link and QR code: a verified vet can have a permanent link for their clinic. An owner who opens it chooses a dog and confirms sharing it with that vet. Anyone signed in who opens such a link sees the vet's name, the clinic and whether the vet's licence to practise is verified.

2.4. Vets

Name, e-mail address, licence number (PWZLW), clinic name and e-mail, verification request (number, clinic, an optional scan of the licence, status, date and who decided), verification badge, clinic link code, visits, private notes and messages.

2.5. Notifications

Device tokens for notifications (Firebase Cloud Messaging) with the device's language and platform, and reminder settings (dose times, the dog's time zone).

2.6. Technical and security data

• Server logs: requests to our server functions with IP address, time, browser and account ID.
• Error reports. In the Android app: Firebase Crashlytics (the course of the crash, device model, system and app version, an installation ID). On the website: the error message and stack trace, the first segment of the page address, version, language, platform and browser description (User-Agent), without link tokens, which the server cuts out. Reports contain neither your name nor your e-mail address. The switch "Send error reports" on the website and "Send crash reports" in the app is on by default; when it is off, no reports are sent.
• Browser reports of blocked page resources (Content-Security-Policy): the page address without parameters and the blocked address.
• Counters of failed attempts to enter an invite code or an access code, or to open a clinic link with a code that does not exist, kept per account or per hash of the IP address with a secret value added (salt). They stop codes from being guessed. A counter applies for one hour; its record is then deleted automatically, usually within a day.
• A count of the dogs an account has connected to vets through clinic links within 24 hours, so that a clinic code, which is printed and public, cannot be misused.
• The Firebase installation ID, needed for notifications and error reports.

2.7. Usage statistics (only with your consent)

If you agree, we use Google Analytics 4 on the website (stream G-539VT17F33) and Google Analytics for Firebase in the Android app. Google signals and ad personalisation are off. Without your consent no statistics are collected.

• What we collect: page and screen views, basic events, device and browser type, language, approximate location (country, region), which Google derives from the IP address, and a random identifier of the browser or app installation, not linked to your account.
• What we never send: health data about the dog, names, e-mail addresses, identifiers of accounts, dogs, reports or invites, anything you type, or anything else about the dog. Page addresses are reduced to their route pattern (for example /r/:token instead of the link to a report), without parameters.

2.8. E-mail contact

When you write to kontakt@senkyno.com: your address, the message and its attachments.

2.9. Account for Google Play reviewers

Google Play reviews the app with a separate account that opens with an access code. It is meant to be used with sample data. Google's reviewers share it, so each one sees what earlier ones entered until the account is deleted in the app's settings. Failed attempts to enter the code are counted as described in 2.6.

2.10. Features where data goes to other companies at your initiative

• Dictating notes uses the speech recognition of your system or browser (on Android usually Google, in Chrome also Google). The audio may go to that provider's servers; we receive only the text.
• Reading text from a medicine package runs on your device (ML Kit on Android, Tesseract.js in the browser on the website). The photo for reading is not sent to our server.
• The recommendations shop: 8 products stored in the app; a link opens the shop's website in your browser. We pass no data about you to the shops; a shop only sees the visit to its website itself.
• Searching for a medicine opens Google Search in your browser with the medicine's name.

2.11. Sample dog

A new account may get a sample dog with made-up data. It is stored in your account until you remove it.

3. Purposes and legal bases

• Account and service (diary, reminders and notifications, reports, sharing, the public links you create, the clinic link, the sample dog, data export and deletion, questions about the service): Article 6(1)(b) GDPR, performance of the contract set out in the Terms of Service.
• Vet verification (PWZLW number, clinic, optional scan): Article 6(1)(b) GDPR, as the vet asks for verification, and Article 6(1)(f) GDPR: our interest, and that of dog owners, in the verification badge going only to people entitled to practise.
• Security and abuse prevention (server logs, attempt counters, the count of clinic link connections, Content-Security-Policy reports): Article 6(1)(f) GDPR. Our legitimate interest is protecting the service and users' data from unauthorised access, guessed codes and attacks.
• Error reports: Article 6(1)(f) GDPR. Our legitimate interest is finding and fixing errors so that the app works. You can switch them off (section 8).
• Usage statistics: your consent, Article 6(1)(a) GDPR. Storing and reading information on your device (cookies, the app installation ID) also requires consent under Section 25(1) of the German TDDDG, Article 399(1) of the Polish Electronic Communications Law (Prawo komunikacji elektronicznej) and the corresponding laws of other EU countries.
• Necessary device storage (sign-in session, settings, the e-mail address waiting for a sign-in link, the notification token, your choice about statistics): needs no consent, as it is necessary for the service you asked for (Section 25(2) no. 2 TDDDG, Article 399(3) of the Polish Electronic Communications Law); the processing is based on Article 6(1)(b) GDPR.
• Vet archive (section 7): Article 6(1)(f) GDPR. The vet's legitimate interest is documenting the care they gave and being able to show it, also after their account has been deleted, for example in a dispute about that care.
• E-mail correspondence: Article 6(1)(b) GDPR where it concerns the contract, otherwise Article 6(1)(f) GDPR (answering questions).
• Legal obligations and claims: Article 6(1)(c) GDPR (for example handling GDPR requests and answering requests from authorities), Article 6(1)(f) GDPR (establishing, exercising or defending legal claims).
• Account for Google Play reviewers: Article 6(1)(f) GDPR. Our interest is letting the app be reviewed before publication.

4. Recipients and processors

• Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) and Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) as our processors, under Google's data processing terms: the Firebase and Google Cloud services, that is sign-in and sending sign-in e-mails (Firebase Authentication), database (Cloud Firestore), files (Cloud Storage), server functions (Cloud Functions), website hosting (Firebase Hosting), notifications (Firebase Cloud Messaging), crash reports (Crashlytics), logs and error reports (Cloud Logging, Error Reporting, Cloud Monitoring), installation ID (Firebase Installations), and with your consent statistics (Google Analytics).
• Hostido (hostido.pl, Poland): the domain's DNS and the kontakt@senkyno.com mailbox. It processes the e-mails you send us.
• People you share a dog with: caregivers and vets (section 5), and anyone who has a public report link.
• Companies whose services you use at your own initiative, each under its own terms: Google when you sign in with a Google account, install the app from Google Play or search for a medicine; the speech recognition provider of your system or browser; your browser's push service (for example Google in Chrome, Mozilla in Firefox, Apple in Safari), which delivers notifications on the website; the shops you open from the recommendations shop.
• Public authorities, only where the law requires it.

We do not sell data or pass it on for advertising.

5. Who sees your dog's data

• The owner sees and edits the whole diary of the dog and decides whom to share it with.
• A caregiver, a person the owner has invited to help care for the dog, sees the whole diary of the dog and can add to it.
• A vet connected to the dog sees the whole diary of the dog: profile, daily entries, weight, medicines and doses, events, quality-of-life ratings, notes, photos and videos, saved reports (the dossier), the reports sent to them, and the names of the people with access to the dog. They can add visits (shared with the owner or not) and private notes, and message the owner. The owner does not see the vet's private notes. The vet sees no other dogs and no other data of your account.
• People with access to a dog see the names of the others with access, and for a vet also the clinic and the verification badge.
• A public link shows a report with the dog's data and the owner's name to anyone who has the link, for 30 days or until revoked.

The owner can take access away from a caregiver or a vet at any time. When a vet leaves a dog, the visits shared with the owner stay with the dog, and the vet's unshared visits and private notes go to the vet archive (section 7).

6. Where the data is and transfers outside the EEA

The database, files and server functions run in the Google Cloud region europe-central2 (Warsaw, Poland). Some Google services run outside the European Economic Area: Firebase Authentication runs only in data centres in the USA, and hosting, notifications and Crashlytics are global services that may process data in any Google data centre. With Google Analytics, access by Google LLC in the USA cannot be ruled out.

Transfers to the USA rely on the European Commission's adequacy decision for the EU-US Data Privacy Framework (Article 45 GDPR), under which Google LLC is certified, and on the European Commission's standard contractual clauses in Google's data processing terms (Article 46(2)(c) GDPR). We will send you a copy of these safeguards on request.

7. How long we keep data

• Account and dog data: until you delete it (a single entry, a dog or the whole account). Deleting the account removes from the server the account, your dogs with their whole diary, files, saved reports, public links, invites and notification tokens, with the exceptions below.
• Your dog that you share with a caregiver (or another owner): when your account is deleted, the one of them who has had access longest becomes its owner and keeps its diary. A dog shared only with a vet is deleted, and the vet keeps an archive copy (below). A dog you look after as a caregiver stays with its owner.
• Messages, reports and visits added for other people: stay with them, signed "deleted account", without name or ID.
• Confirmation of an account deletion: after an account is deleted, only a record that the deletion was completed remains: the date and a one-way hash of the account ID, with no name, e-mail address or other data. It serves as proof that the deletion request was carried out (Article 6(1)(c) and (f) GDPR), and we keep it for as long as it may be needed for that.
• Backups: the database can be restored to any moment of the last 7 days, and daily backups are kept for 14 days; deleted files can be recovered for 7 days. After that they disappear automatically.
• Public report links: 30 days or until revoked. Invites: 7 days or until used or revoked.
• A vet's licence scan: deleted as soon as the verification is decided. The result itself (number, clinic, status, date, who decided) is kept until the vet's account is deleted.
• Vet archive: when a vet leaves a dog, or the dog or the owner's account is deleted, a copy of that vet's visits and notes (with the dog's name) goes to the vet's archive, which the vet sees in Senkyno. When a vet deletes their own account, a copy of the visits and notes they recorded is kept as well. Each copy is deleted automatically 3 years after it was made, also when the vet's account no longer exists.
• Notification tokens: until you turn notifications off, sign out on the device or the token expires, at the latest until the account is deleted.
• Failed-attempt counters: 1 hour; the record is then deleted automatically, usually within a day.
• Count of clinic link connections: 24 hours; the record is then deleted automatically, usually within a day, and in any case with the account.
• Server logs and website error reports: 30 days. Crashlytics: 90 days.
• Statistics: event-level and user-level data 2 months in Google Analytics (aggregated reports without identifiers may remain longer); the cookies _ga and _ga_539VT17F33 expire after 13 months.
• E-mails: as long as needed to deal with the matter; correspondence about GDPR requests and complaints up to 3 years after it ends, in case of claims.
• Data on your device: session and settings until you sign out or clear the browser's or the app's data.

8. Your rights and how to use them

• Access (Article 15 GDPR): on the website choose "Export my data" in Settings; in the Android app choose "Export data (GDPR)" in your profile. You get a JSON file with the data of your account and dogs. You can also write to us.
• Rectification (Article 16 GDPR): change your name in Settings, and edit your dog's data and entries in the app. We correct anything else on request.
• Erasure (Article 17 GDPR): delete single entries, photos and a dog in the app; delete the account on the website in Settings, "Delete account", and in the Android app in your profile, "Delete account". Without access to the app, write to us from the address you sign in with. Details: Deleting your account.
• Restriction of processing (Article 18 GDPR): write to us.
• Data portability (Article 20 GDPR): the export as a JSON file, as for access.
• Objection (Article 21 GDPR) to processing based on Article 6(1)(f) GDPR: switch error reports off with "Send error reports" in Settings on the website, or with "Send crash reports" in your profile in the app; for anything else, write to us. We will stop unless we show compelling legitimate grounds or need the data for legal claims.
• Withdrawing consent (Article 7(3) GDPR): withdraw your consent to statistics at any time, as easily as you gave it: on the website under "Privacy settings" in the footer of the site's pages, such as the home page, also without signing in, and when signed in with the "Usage statistics" switch in Settings; in the Android app with the same switch in your profile. From then on nothing is sent, the _ga cookies are deleted, and in the app the statistics data stored on the phone is deleted together with its identifier. You give and withdraw consent separately on each device and in each browser. Withdrawal does not affect the lawfulness of processing before it, and not consenting does not limit your use of Senkyno.

We answer without undue delay and at the latest within one month (Article 12(3) GDPR), free of charge. We may ask you to confirm your identity, for example by writing from the address you sign in to Senkyno with.

Complaint to a supervisory authority (Article 77 GDPR): the authority competent for us is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de. You can also complain in the country where you live, work or where the infringement took place, for example in Poland to the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl.

9. Do you have to provide data

Providing data is voluntary and not required by law, but without an e-mail address and sign-in you cannot create an account, and a vet without a PWZLW number and clinic details cannot be verified. What you record about your dog is up to you. Consent to statistics is voluntary.

10. Automated decisions

We make no decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you (Article 22 GDPR). The trend hints in the diary are calculated automatically from your entries, but they are only hints for you. A person decides on a vet's verification.

11. Children

Senkyno is meant for adults (18 and over); we declare this in Google Play as well. We do not knowingly collect children's data. If you know a child has created an account, write to us and we will delete it.

12. Cookies and device storage

• Necessary (no consent): the Firebase sign-in session in the browser's or app's storage, settings (language, theme, text size, the error report switch, your choice about statistics, the dog chosen last), the e-mail address waiting for a sign-in link, the Firebase installation ID and the notification token (when notifications are on), the notification script (service worker) on the website, and in the Android app the photo cache and an offline copy of the data you open, such as your dogs' diaries and messages (up to 100 MB), which is deleted at sign-out.
• With consent: the Google Analytics cookies _ga and _ga_539VT17F33 on the website (13 months), and the Google Analytics for Firebase installation ID in the Android app.

We use no advertising cookies and not the Android advertising ID.

13. Security

Transmission is encrypted (HTTPS), data at Google is also encrypted at rest, and server-side rules check every access, separately for owner, caregiver and vet. We strip metadata from files, keep error reports to a minimum and back up the database regularly.

14. Changes to this policy

We update this policy when the way we process data changes; the version date is at the top. We tell you about significant changes in the app or by e-mail before they take effect. If a new purpose needs your consent, we will ask for it.