Privacy Policy
Last updated: August 1, 2026
This policy describes what data Laki (the "App") collects, how we use it, where it's stored, and what rights you have over it. It's meant to be short and clear: Laki is designed to collect the minimum information possible.
1. Who is responsible
Laki is developed by Hernán Anabalón. For any question or to exercise your data rights, email us at contacto@laki-app.com.
2. What data we collect
2.1 Data you enter
- Your name (or nickname) — to identify who gave each dose within the group.
- Your pet's information — name, type (dog, cat, other) and, optionally, a photo.
- Treatments and medications — name, dose, frequency and schedule.
- Dose log — which dose was given, when, and who marked it.
2.2 Technical data generated automatically
- Anonymous identifier created by Firebase Authentication. It is not linked to your real name, email, or any personal identity.
- Push notification token (if you enable them), generated by Expo. It is used solely to send you reminders and group alerts.
- Group identifier — a random UUID that links your session with your partner's.
2.3 What we do NOT collect
- We don't ask for email, phone number, or password.
- We don't access your location.
- We don't access your calendar, contacts, messages, or gallery (unless you choose to upload a pet photo).
- The App has no ads or third-party trackers (no Google Analytics, no Facebook Pixel, no trackers). The website is a different matter: there we do use analytics, but only if you accept it — see section 12.
- We don't sell or rent your data to anyone.
3. What we use your data for
- Display and sync your pet's treatments between group members.
- Schedule and send you dose reminders.
- Keep the history of given doses to avoid duplicates.
- Notify the other group member when someone gives a dose or adds a treatment.
We don't use your data for advertising profiling, credit scoring, or commercial analysis.
4. Where it's stored
- On your device: your name and the group identifier are stored locally in hardware-encrypted storage (Keychain on iOS, Keystore on Android).
- In Firebase (Google Cloud): the group's shared data (pets, medications, doses) lives in Firestore. Firebase applies encryption at rest and in transit (TLS).
- Firestore security rules restrict access only to group members.
5. Who we share your data with
- With your partner or caregiver within the Laki group — this is the very purpose of the App.
- With Google (Firebase) as infrastructure provider. Firebase privacy policy.
- With Expo to deliver push notifications (if enabled). Expo privacy policy.
We don't share data with advertisers, data brokers, or third parties for commercial purposes.
6. How long we keep your data
- While your account is active, we keep your data so the App works.
- If you delete your account from the App, we remove your anonymous identifier, anonymize your name in the dose history, and remove you from the group. This is immediate and irreversible.
- If the group is left with no members, the group's data becomes inaccessible.
7. Your rights
As a user, you have the right to:
- Access your data — it's visible from within the App.
- Rectify it — you can edit your name, pets, and treatments at any time.
- Delete it — from Settings → Delete my account.
- Object to the processing of your data — email us at contacto@laki-app.com.
- Portability — if you want to export your data before deleting it, contact us.
8. Children and minors
Laki is not directed at children under 13 and is not intended to be used by them — the account always belongs to a responsible adult. We do not knowingly collect data from a user under 13, in line with COPPA. If you believe a child is using the App without a responsible adult's consent, email us and we'll delete it.
If you track a person instead of a pet: Laki is built for pet care, but nothing stops you from using it for a family member's medication, a child's included. If you do, that data is about a person and is entered by whoever is responsible for them. It stays visible only to your group and is deleted along with the group. We recommend using a first name or a nickname.
9. Security
We apply several layers of protection: Firestore security rules that restrict access by group membership, encrypted on-device storage, server-side push token validation, and restrictions on Firebase API keys. No system is 100% impenetrable, but we do everything reasonable to minimize risks.
If a breach happens: if unsecured data of yours is exposed, we will notify the affected users and the relevant authority without undue delay, and describe what was exposed and what we did about it.
10. International transfers
Firebase may process and store data on servers located outside your country (mainly the United States and the European Union). By using Laki, you accept this transfer. Google applies standard safeguards to protect data during transfer.
11. United States
We do not sell or share your personal information, as those terms are defined by the California Consumer Privacy Act (CCPA, as amended by the CPRA), and we never have. There is no advertising, no data brokers, and no cross-context behavioral advertising anywhere in the App or on this site. Because we do not sell or share, there is no "Do Not Sell or Share My Personal Information" link to offer.
Laki is run by an independent developer and does not meet the CCPA's applicability thresholds (annual revenue, volume of California consumers, or revenue derived from selling data). We still describe our practices here as if it applied, because you deserve to know regardless of which side of a revenue threshold we sit on. Residents of California and of other US states with comparable laws can exercise the rights in section 7 through the contact address, and we will not discriminate against you for doing so.
On health data: what you enter is about a pet. If you choose to use Laki for a person's medication instead, that information is about a human being's health, and we treat it under the same rules described in this policy: it stays inside your group, it is never sold or used for advertising, and it is deleted with the group. We are not a HIPAA covered entity and Laki is not a medical record.
12. The laki-app.com website
Everything above describes the App. The website is a separate, simpler case: no account is needed and we collect nothing that identifies you.
- Analytics with your consent: we use Google Analytics 4 to know which pages get visited and from which country. It only loads if you accept it in the notice shown on arrival. If you decline, nothing is downloaded from Google and no cookie is written.
- Cookies: if you accept, Google Analytics stores first-party cookies (_ga and _ga_*) to tell visits apart. We use no advertising or personalization cookies, and ad features are turned off in our configuration.
- If your browser sends the "Do Not Track" signal, we load no analytics and show you no notice.
- You can change your mind: your choice is stored in your browser. Clear the site data and the notice comes back.
- Hosting statistics: the site is served from Cloudflare Pages, which records aggregate traffic metrics without cookies or cross-site tracking, and processes the access logs needed to serve and protect the site.
More detail in Google's privacy policy and Cloudflare's privacy policy.
13. Changes to this policy
If we modify this policy, we'll update the "Last updated" date above. For substantial changes, we'll notify you within the App.
14. Contact
Any question, complaint, or to exercise your rights: contacto@laki-app.com.