Privacy Policy

Draft — not yet in force. Based on the app policy dated August 10, 2026.

Draft for review. This text has not been reviewed by a lawyer. Sodalius processes personal data and is subject to the GDPR: have this checked by someone qualified before the app is published, and replace this notice with the effective date.

This policy covers both the Sodalius app and this website. Sections 1 to 14 describe the app; section 15 describes the website you are reading now.

In short: the data you enter is stored on secure servers in the European Union (Ireland) through our provider Supabase, and may be cached on your device for offline use. We use it only to run the app and to let you share it with your family. We do not sell your data, do not share it with third parties for their own purposes, and use no advertising, tracking or analytics. If you choose to sign in with Apple or Google, they only identify you: they receive none of your dog's data. You can delete everything at any time.

1. Data controller

The data controller is Ansen Studio di Antonietta Di Cicilia (a natural person), Italy. For any question about this policy or your data, contact: [email protected].

2. What data we process

You enter the data using the app. It may include:

Account: the name and email you choose at sign-up. The password is handled in encrypted form by the authentication service; we never access it in plain text. If instead you sign in with Apple or Google, there is no password at all: we receive your name and email address from them (see section 5).
Dog profile: name, breed, sex, date of birth, weight and photos.
Health: medications, vaccines, allergies, body measurements, documents (e.g. microchip number, passport, insurance) and daily log. This is data about your dog, not about you.
Contacts and family: your vet's details (name, phone, email, address) and any family members you invite. An invite only asks you for a name, so you can recognise it: invites are accepted with a code, and we never ask for the email address of the person you invite. By entering other people's details you confirm you are allowed to do so.
Other: nutrition, costs and hazard reports, with optional photos and notes. If you choose to use GPS for a report, the coordinates of that spot are stored as well (see section 7).

3. Why we process data and legal basis

We process your data solely to provide the service: to create and manage your account, save and sync your dogs' information, send you reminders and let you share data with your family. The legal basis is the performance of the contract/service you accept by using the app (Art. 6.1.b GDPR) and, where applicable, your consent or a legal obligation. We do not process data for marketing purposes.

4. Where data is stored and who hosts it

Data is stored on infrastructure provided by Supabase (database, authentication and photo storage), with servers located in the European Union (Ireland). Supabase acts as a data processor on our behalf. A copy of the data may be stored locally on your device so you can view it offline. The data we store is not transferred outside the European Union. The one exception is the moment of sign-in, if you choose Apple or Google: that exchange happens directly between your device and their systems, under their own policies (see section 5).

5. Signing in with Apple and Google

Besides email and password, you can enter Sodalius with "Sign in with Apple" or "Sign in with Google". It is your choice: the two buttons are alternatives, not requirements.

When you use them, identification happens directly between your device and Apple or Google, who act as independent controllers for their own part and learn that you signed in to Sodalius. From them we receive only your name and email address, plus a technical identifier that lets us recognise you on later sign-ins. We do not receive your password, your contacts, or any other data from your Apple or Google account.

Nothing travels the other way: Apple and Google do not receive your dog's data, photos, daily log or health information from us.

If you use Apple's "Hide My Email", we only receive an anonymous relay address ending in @privaterelay.appleid.com: your real address is never disclosed to us and we cannot trace it. Note that this is the address other members of your family will see, and the one any service emails would reach.

Processing carried out by Apple and Google is governed by their own privacy policies, which we encourage you to read. You can revoke Sodalius' access at any time from your Apple or Google account settings; doing so does not delete the data you entered in the app, for which section 10 still applies.

6. Sharing with your family

The app lets you share a dog's data with people you invite to your "pack". When you invite a member, they can see (and, depending on the role you assign, edit) the family's data. Sharing happens only at your initiative; you can remove a member at any time from the family settings.

7. Permissions requested

Photo library: to pick images of your dog, documents or hazards. The app only accesses the photos you select.
Camera: requested only if you choose "Take a photo" instead of the library, to shoot a picture of your dog, a document or a hazard on the spot. The photo you take is saved with the card you are filling in; the app never captures anything in the background.
Notifications: for medication and vaccine reminders. Notifications are scheduled locally on the device.
Location: requested only if you tap "Use my location" while reporting a hazard, to record its exact spot. Your location is read once, at that moment, and saved together with the report (which is shared with your family members). The app does not track your movements and never accesses your location in the background. You can always decline and type the location manually.
Calendar: requested only if you tap "Calendar" on a reminder. The app opens the system's "New Event" sheet, already filled in with the medication or vaccine name and the reminder's date and time: saving it is your decision. The app does not read the events already in your calendar, never writes one on its own, and sends nothing to our servers. On Android the system also asks for read access, but the app does not use it.

The app does not access the microphone or contacts.

8. System backups

If you have device backup enabled (iCloud on iOS, Google Backup on Android), the operating system may include the app's local data in its backups. Those backups are managed by Apple or Google under their own policies. The infrastructure provider also makes periodic backups of the data on its servers to ensure service continuity.

9. Sharing PDFs

You can export or share summaries as PDF files. Sharing happens only at your request, through your device's share features, to the app or recipient you choose. Sodalius sends nothing automatically.

10. Retention and deletion

We keep your data as long as your account is active. You can delete your account and all associated data at any time from Settings → "Delete account and data": this removes your data from our servers and is irreversible. Simply uninstalling the app removes the local copy from the device but does not delete the data from the servers — to do that, use the account deletion feature.

11. Your rights (GDPR)

You have the right to access, rectify, erase, restrict or object to the processing of your data, and to request its portability. Many of these actions can be done directly in the app (view, edit, delete account and data). For any other request, write to [email protected]. You also have the right to lodge a complaint with the competent supervisory authority (in Italy, the Garante per la protezione dei dati personali).

12. Security

Data travels encrypted between the app and the servers (HTTPS), and access to each family's data is restricted through database-level security rules. No system is 100% secure, but we take reasonable measures to protect your information.

13. Children

The app is intended for dog owners and is not directed at children under 14. We do not knowingly collect data relating to children.

14. Changes to this policy

Any updates will be published at this address and, when relevant, flagged inside the app. The date at the top shows the latest revision.

15. This website

This website is a showcase for the app. You do not need an account to browse it, and it asks you for nothing: there are no forms, no sign-up, no comments.

No cookies. The site sets no cookies of any kind, neither technical nor for measurement, so no consent banner is needed.
No analytics or tracking. We use no statistics, advertising or profiling tools. We do not know who visits, nor how many.
Hosting. The site is served by Cloudflare Pages. Like any web server, Cloudflare's infrastructure processes the technical data needed to deliver the pages (including your IP address), under its own privacy policy and as our processor.
No third-party requests. Everything the pages need — text, images, fonts — is served from this same site. The Montserrat typeface is hosted here rather than loaded from Google Fonts, precisely so that your browser never contacts anyone else and no third party gets to see your IP address.

The site links to the Apple App Store and Google Play. If you follow those links you leave this site, and from that point Apple's or Google's policies apply.

Contact

Questions about privacy: [email protected].