Privacy policy

Last updated: October 27, 2026 · This page is available in Italian and English. The Italian text prevails.

This page brings together the Cloud Pet privacy policies: the one for the cloudpet.app website, the one for the iPhone app and the one for the Android app. In every case the data controller is STARS S.R.L. The three policies are separate: each covers only what it describes.

The cloudpet.app website

Last updated: 27 October 2026

This section covers only the cloudpet.app website. Hosting on Vercel and analytics with PostHog serve the website and do not concern the apps, which use neither: the policies below apply to the apps. The website uses no cookies or analytics tools until you give your consent.

Controller. STARS S.R.L., Via Mario Vinciguerra 75, 00128 Rome (RM), Italy, VAT / tax no. 18548941006. Email: info@stars.srl · PEC (certified email): stars@namirialpec.it.

Hosting and technical logs. The website is hosted by Vercel Inc. Like any internet service, the provider briefly records technical data about requests (for example IP address, date and time, requested page) for security and to run the service. Legal basis: legitimate interest (Art. 6.1.f GDPR). If processing involves a transfer outside the European Union, it takes place with the safeguards required by the GDPR (adequacy decision or standard contractual clauses).

Fonts and images. The site’s fonts and images are served by the site itself. We don’t load fonts or scripts from other sites.

Analytics, only with your consent. On your first visit we ask whether you want to help us understand how the site is used. If you accept, we use PostHog to count visits and clicks (for example on store buttons and languages). If you decline, we load no analytics tool and store nothing on your device other than your choice. You can change your mind at any time from “Cookies and statistics” at the bottom of every page. Legal basis: consent (Art. 6.1.a). PostHog data is kept for the time strictly needed for analysis and no longer than twelve months.

If you write to us. We use your email address and what you tell us only to reply (Art. 6.1.b) and keep them for as long as needed to handle the request.

The blog. You don’t need to sign up to read the blog, and we collect no comments or subscriptions.

Your rights. Under the GDPR you can ask to access your data, correct it, delete it, restrict its processing, object and receive it in a readable format. You can withdraw your consent to analytics at any time from “Cookies and statistics”. Write to info@stars.srl. You can also lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it) or with your local authority.

Cloud Pet app for iPhone

Cloud Pet collects no data: what you enter stays on your iPhone and in your iCloud, and only the people you invite to share the profile can see it. We see nothing.

This policy covers Cloud Pet, the iPhone app published by STARS S.R.L. on the App Store to follow your pet’s care together with family and pet sitters, and explains where the data you enter goes. In short: on your phone, in your iCloud and on the devices of the people you invite to share the profile. Never to us.

Who is the controller

The data controller is STARS S.R.L., Via Mario Vinciguerra 75, 00128 Rome (RM), Italy, VAT / tax no. 18548941006.

Email: info@stars.srl · PEC (certified email): stars@namirialpec.it

What data we collect

None. Cloud Pet has no STARS S.R.L. server and contains no third-party services: no analytics, advertising or error-reporting tools, and no tracking. What you enter — your pet’s profile, medications, visits, documents, diary, weights — never reaches us, and we neither see nor keep it. Reading the text of photographed documents also happens on the phone.

The app’s privacy label on the App Store says the same: no data collected.

Where your data lives

On your iPhone and in your iCloud. The app saves data on the phone and syncs it through your personal iCloud account, that is with Apple’s service, under Apple’s own privacy policy. Photos stay on the phone: they leave the device only if you share the profile, to reach the people you invited.

On the devices of the people you invite. If you share a pet’s profile, sharing goes through CloudKit, also Apple’s, and reaches only the people you invite by name. Whoever accepts sees and can edit that pet’s whole profile as long as you have Premium, whatever role they have in the circle list: personal details, microchip, allergies and conditions, vet, medications and doses with the name of who confirmed them, visits, documents with their photos, diary, weights and the circle list. Their changes come back to you too. While you share, your phone writes into the shared profile the date until which your subscription is paid: the phones of the people you invited use it to know whether they can still edit. If the subscription ends, whoever doesn’t have one of their own can still see the profile but can no longer edit it. STARS S.R.L. is not part of the sharing and does not see its content.

To stop sharing a profile use the app’s command to stop sharing; to remove access for a single person use “Invite or manage”, which opens Apple’s management screen. What the invited people have already received may stay on their devices.

Where you decide. You can share the vet report as a PDF or as text: it goes only where you send it, with the iPhone’s sharing tools.

Phone permissions

Cloud Pet works even if you grant no permission: each one serves a specific feature.

  • Notifications, for medication and visit reminders and, the day before, to tell you the free trial is about to end. They are prepared on the phone, not sent by a server.
  • Calendar, only if you turn on calendar syncing in the app’s settings: visits go into a “Cloud Pet” calendar on your phone. First the app only asks to add events; if you want it to update or remove the ones you change, it also asks for full access. From there events follow the settings of the calendar you use.
  • Camera, to photograph documents, reports, medication packaging or your pet.
  • Photos: the app does not see your library. You choose, from the iPhone’s picker, the photos to attach, and only those reach the app.

You can change your mind at any time in Settings › Privacy & Security, and for notifications in Settings › Notifications.

Purchases

Cloud Pet is free to try for fourteen days, with everything except sharing. Then, to keep using it, you need the Premium subscription — monthly, yearly or Pack — which also lets you share the profile with other people: one pet’s with monthly and yearly, up to three with Pack. Invited people use the profile they receive for free; for pets of their own they need their own subscription. Subscriptions go through the App Store and are managed by Apple: payment data does not reach STARS S.R.L.

The trial’s start date is stored in the iCloud Keychain of your Apple ID, so the trial doesn’t restart if you reinstall the app or change iPhone. It stays between the phone and Apple: it doesn’t reach us.

Who it is passed to and how long it stays

We pass data to no one, because we receive none. Your data stays on the phone and in your iCloud until you delete it; data of shared profiles also on the devices of the people you invited.

How to delete it

From the app you can delete a single pet (Settings › Pets, when you have more than one) or everything (Circle › “Start over” › “Delete everything”). These two actions remove data and photos from the phone, remove from the calendar the visits the app had written there and also close sharing: if the profile was yours, its shared copy disappears from iCloud and the invited people lose access; if someone else had shared it with you, you leave it, and the profile stays with whoever created it. Without a network, sharing closes at the first connection. What the invited people had already received may stay on their devices. Other data saved in your iCloud you delete from the iPhone’s iCloud settings, in storage management. Deleting the app removes the data left on the phone. The trial’s start date stays in the iCloud Keychain even afterwards: it only serves to keep the trial from restarting, and contains nothing else.

There is no consent to withdraw with us: the app asks for none, because it sends us no personal data.

Your rights

Under Arts. 15–22 of Regulation (EU) 2016/679 (GDPR) you have the right to access your data, to have it corrected or deleted, to restrict its processing, to object and to receive it in a portable format. With Cloud Pet we hold no data of yours to apply them to: data in iCloud is managed by Apple, under the rules of your account. You can still write to us at any time at info@stars.srl or by PEC at stars@namirialpec.it: we reply within one month, as Art. 12 GDPR provides.

You always have the right to lodge a complaint with the Italian Data Protection Authority.

Changes to this policy

If the app changes the way it handles data, this policy changes with it. The date at the end of the page shows the latest revision.

Last updated: 26 September 2026

Cloud Pet app for Android

Last updated: 6 October 2026

This policy explains what data the Cloud Pet for Android app processes, why, where it goes and how you control it. It applies to the app downloaded from Google Play. The iPhone app has a separate policy. The Italian version of this policy prevails.

In short:

  • What you write in Cloud Pet stays on your phone.
  • No account is needed. The app shows no ads and uses no tracking or profiling tools.
  • If you share a pet’s profile with other people, the data travels end-to-end encrypted: only the phones of the people you invite can read it. Stars S.r.l. and the server provider cannot read it.

1. Data controller

STARS S.R.L., Via Mario Vinciguerra 75, 00128 Rome (RM), Italy, VAT no. / tax code 18548941006
Email: info@stars.srl · PEC (certified email): stars@namirialpec.it

For any question about this policy or your data, write to info@stars.srl.

2. Data that stays on your phone

Everything you enter is saved in the app’s storage on your phone:

  • pets: name, species, breed, date of birth, photo, weight;
  • treatments, times, doses confirmed or skipped and who confirmed them;
  • visits, appointments, day notes, diary, expenses;
  • photographed documents (reports, prescriptions, health booklet) and the text read from them;
  • the people in the Circle, with the name and role you give them;
  • your preferences (your name in the app, reminders, icon).

Stars S.r.l. does not receive this data. It stays on the phone until you delete it.

Reading text from documents (OCR). Text is read from photos on the phone with Google’s ML Kit. The images and the text read never leave the phone.

Reminders. Dose, visit and care notifications are scheduled on the phone. They do not go through any server.

Calendar (optional). Only if you turn on sync in Settings, visits are written to the phone calendar you choose. From there they follow that calendar’s rules: for example, a Google calendar syncs with your Google account.

Camera and photos. Photos are taken with the phone’s camera app or picked with the system picker. Cloud Pet only receives the photo you choose and does not read your gallery.

3. Backup and export

Google backup. If Android backup is on, the system copies this Cloud Pet data to your Google account: the database, the preferences and the pet photos. Document photos stay out of the Google backup and only move with a direct phone-to-phone transfer. Google runs the backup under its own terms, and you can turn it off in the phone settings. Stars S.r.l. has no access to it. If you use the shared profile, the backup also holds the keys of the shared profiles, so a new phone picks them up again; the server access tokens stay on the phone and are not backed up.

Exported archive. “Export archive” in Settings creates a file with all your data and photos. You save it wherever you want. Stars S.r.l. does not receive it. If you use the shared profile, the archive also holds the keys of the shared profiles: whoever has the file can read them, so keep it as safe as your phone.

Free trial start date. So the 14-day trial applies only once, even after a reinstall, its start date is saved with Google’s Block Store, in your Google account backup. Only the date is saved.

4. The shared profile (optional)

If you share a pet’s profile, or join someone else’s with an invite, that pet’s data is synced between the Circle’s phones. The server is in the European Union.

How it is protected.

  • Each shared pet has its own encryption key (AES-256), created on the sharer’s phone.
  • The key only travels inside the invite link, in the part after the # sign, which no server receives.
  • Only encrypted data reaches the server: the pet’s data, the photos, people’s names. Stars S.r.l. and the server provider cannot read it.

What remains readable on the server. Only what the sharing needs to work:

  • an anonymous identifier for each phone, created automatically (not linked to your name, email or number), and that phone’s access tokens;
  • which shared profiles each identifier belongs to, and who created them;
  • for each phone and each profile, a cryptographic fingerprint of a secret code that stays on the phone (never the code): it lets a new phone take back its place in the profile;
  • the technical identifier of each item (for example a dose), its type (dose, treatment, visit…) and when it changed;
  • for doses, a “confirmed yes/no” flag. The server uses it to prevent a dose already given from going back to “to give” and being given twice. The server does not know which medicine it is;
  • until when the profile is paid for by the person who shared it, and for invited people until when they have Premium, if they do: with their own Premium they can edit the profile even if the person who shared it no longer pays for it;
  • for invites, a cryptographic fingerprint of the invite code (never the code itself) and its expiry, after 30 days. An invite works for one person: once used it is deleted;
  • as for any internet service, the server’s technical logs (for example IP address and time of requests), kept for a short time for security and troubleshooting.

Provider. The server is provided by Supabase, Inc., acting as data processor on behalf of Stars S.r.l. under a data processing agreement. Data is stored in a data center in the European Union. If a transfer outside the EU were needed, for example for the provider’s technical support, it takes place under the standard contractual clauses approved by the European Commission. In any case it would only involve data the provider cannot read.

Who sees what. The people you invite see and edit the shared pet’s profile, with the names you wrote, and see your name as “owner”. You can remove a person at any time. What they already received stays on their phone.

5. Subscriptions and purchases

Subscriptions are bought through Google Play. Payment data is handled by Google under its own terms, and Stars S.r.l. does not receive it. The app only receives your subscription status from Google Play: which plan is active and whether it is valid.

If you share a profile, your phone writes on the server until when the profile is paid for (see above), so the people you invited can keep using it.

6. Data collected by Google libraries

The app uses two Google libraries: ML Kit, to read text from photos on the phone, and the Google Play Billing library, for subscriptions.

ML Kit sends Google some technical information to measure and improve how it works:

  • an installation identifier;
  • the app’s name and version;
  • the phone’s model and system version;
  • recognition performance, such as processing times.

It does not send the images or the text read. Google processes this data under its own policy: policies.google.com/privacy.

  • Running the app and the shared profile you asked for (GDPR art. 6.1.b, performance of a contract): syncing the profile with the people you invite and applying the sharer’s subscription.
  • Security and prevention of abuse of the service (art. 6.1.f, legitimate interest): the server’s technical logs.
  • Support: if you write to us, we use your email address and what you tell us only to reply (art. 6.1.b).

We do not use data for advertising, profiling or automated decisions, and we do not sell it to anyone.

8. How long

  • On the phone: until you delete it, or uninstall the app.
  • On the shared profile server:
    • as long as the profile stays shared;
    • if you stop sharing or delete the pet, the profile and its encrypted data (photos included) are deleted from the server;
    • if you leave someone else’s profile, by removing the pet from your phone, your membership is deleted;
    • invites expire after 30 days;
    • with “Start over” (in the Circle) the app deletes everything from the server too: the profiles you shared, your memberships and the phone’s anonymous identifier. Without a connection, the deletion starts as soon as the phone is back online;
    • if you uninstall the app without deleting, the data stays on the server as long as the profiles stay shared. You can ask for deletion at info@stars.srl.
  • Support emails: as long as needed to handle the request.

9. Your rights

Under the EU General Data Protection Regulation (GDPR) you can ask to:

  • access your data;
  • correct it;
  • delete it;
  • restrict its processing;
  • object to its processing;
  • receive it in a readable format (portability). For data on the phone, “Export archive” does it.

You can delete everything yourself, server included, with “Start over” in the Circle. To exercise the other rights, or if you no longer have the app, write to info@stars.srl. On the server, data is encrypted and linked only to an anonymous identifier: without the app we may not be able to tell which data is yours. That is why complete deletion goes through the app.

You can also lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it), or with the authority of your country.

10. Children

Cloud Pet is not intended for children under 14 and does not knowingly collect their data.

11. Security

  • Shared profile data is encrypted on the phone before it leaves, and all communication with the server uses encrypted connections (HTTPS).
  • Access to the server is limited by rules that let each phone read only the profiles it belongs to.
  • On the phone, data is protected by Android: lock your phone with a PIN or fingerprint.

12. Changes

If this policy changes, the new version will be published at this address with its update date. If something important changes, for example a new provider or a new kind of data, we will also say so in the app or in the release notes.

Cloud Pet helps you get organised and does not replace your vet’s advice.