Privacy Policy
Last updated: 4 July 2026
In short: Pet Note only collects what it needs to run your pet's profile, timeline and reminders, your account details, the pet information you choose to enter, and a little device data so we can schedule local notifications. Everything is stored on secure, encrypted servers in Sydney, Australia. We don't sell your data, we don't run ads, and we don't use third-party analytics or advertising trackers. Only you can see your own records. You can delete your account and everything in it at any time.
Who this policy covers
This Privacy Policy explains how Wondertree Studios Pty Ltd (ACN 699 886 498, ABN 82 699 886 498), trading as "Pet Note", referred to here as "we", "us" or "our", collects, uses, stores, discloses and protects information when you use the Pet Note mobile app, this website, and any related services (together, the "Service").
We're a small, independent studio based in Sydney. Our registered office is Level 10, 387 George Street, Sydney NSW 2000, Australia. If anything in this policy is unclear, email us at [email protected] and we'll explain it in plain English.
This policy applies to everyone who uses Pet Note. It doesn't apply to third-party websites, apps or services that Pet Note may link to, including the app stores you download Pet Note from.
The information we collect
Pet Note is built around information you choose to enter to manage your pets' care. We don't ask for anything beyond what's needed to run the features described on this page.
| Category | Examples | Why we collect it |
|---|---|---|
| Account profile | Email address, display name, optional avatar photo, timezone | To create and secure your account, personalise the app, and work out your local time for reminders |
| Pet profiles | Name, species (dog or cat), breed, sex, date of birth, weight history, neutered/desexed status, microchip number and registry, insurance provider and policy details, primary vet clinic, optional photo | To build each pet's profile and passport-style record so you have one organised place for their details |
| Timeline events | Daily notes (food, water, weight, exercise, mood, sleep), appointments, medications, preventive care and vaccinations, symptoms, each with optional notes, photos and receipt images | To let you log, review and search your pet's day-to-day care and history over time |
| Reminders | Reminder title, linked pet, and schedule | To schedule local notifications so appointments, medications and preventive care aren't missed |
| Device records | Device identifier, operating system version, timezone | To schedule and correctly deliver reminder notifications on your device |
We don't ask for payment card numbers, government identification numbers, or passwords, Pet Note doesn't use passwords at all (see below). If you subscribe to Care+, the small optional subscription that helps support the app, that payment is handled entirely by the App Store or Google Play, we never see or store your card details. Please avoid entering sensitive information about other people (for example, a co-owner or a vet's personal details) unless you have their permission to do so.
How you sign in
Pet Note doesn't store passwords. You sign in using one of three methods: Sign in with Apple, Google sign-in, or a passwordless email magic link (we email you a one-time link, you tap it, and you're in). Whichever method you choose, your authentication session is stored securely on your device, in the iOS Keychain or Android Keystore, and is never stored in plain text.
How we use your information
We use the information described above to:
- create and maintain your account and pet profiles;
- let you log, view, edit and search timeline events and care history;
- schedule and deliver local reminder notifications on your device;
- keep your data in sync and available wherever you sign in;
- secure your account and detect and prevent misuse of the Service;
- respond to your support requests; and
- meet our legal, accounting and regulatory obligations.
We do not use your information for advertising, and we do not build advertising profiles from it. We do not sell, rent or trade your personal information to anyone, for any purpose.
Our legal basis for handling your information
As an Australian company, we handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Broadly, this means we only collect information that's reasonably necessary for Pet Note's functions, we're transparent about what we collect and why, we take reasonable steps to keep it secure, and we give you ways to access, correct or delete it.
Where a legal basis is required for a particular use, we rely on one of the following:
- Performance of a contract, to provide the app and account features you've signed up for;
- Consent, for optional features, such as granting notification or camera permissions;
- Legitimate interests, to keep Pet Note secure, reliable and working as intended; and
- Legal obligation, where we're required to retain or disclose information by law.
If you're visiting from the UK or European Economic Area
Pet Note is an Australian product and most of our users are in Australia, but if the UK GDPR or EU GDPR applies to you, you have the following rights over your personal information, subject to certain conditions and exceptions:
- the right to be informed about how your information is used;
- the right to access a copy of your personal information;
- the right to have inaccurate information corrected (rectification);
- the right to request deletion of your information (erasure);
- the right to restrict or object to certain processing;
- the right to data portability, where technically feasible;
- the right to withdraw consent at any time, where processing is based on consent; and
- the right to lodge a complaint with your local data protection supervisory authority.
To exercise any of these rights, contact us at [email protected].
California residents
We do not sell or share personal information as those terms are defined under the California Consumer Privacy Act (CCPA), and we never have. If you're a California resident, you still have the right to know what personal information we hold about you, to request its correction or deletion, and to be free from discrimination for exercising these rights. You can make any of these requests by emailing [email protected].
How long we keep your information
We keep your account and pet data for as long as your account is active, so that your timeline and reminders stay complete and useful. If you delete your account, whether in-app or by emailing us, your profile, pets, timeline events, photos, receipts, reminders and device records are deleted. Deletion requested in-app takes effect immediately; deletion requested by email is actioned within 30 days. See Delete your account for the full process.
Some limited information may remain briefly in encrypted backups or logs after deletion, purely as a by-product of how backups work, until those backups naturally cycle out. We don't use that residual data for any active purpose.
How we protect your information
We take a few concrete, practical steps to keep your information secure:
- Row-level security. Our database enforces rules so that only your account can read or write your own data, not other users, and not us, by default.
- Private photo storage. Photos and receipt images live in private storage buckets, not public ones. They're only ever accessed through short-lived signed URLs (valid for a maximum of around eight days), so links can't be guessed or reused indefinitely.
- Secure session storage. Your sign-in session is stored on-device using the iOS Keychain or Android Keystore, the platform-provided secure storage for credentials.
- No passwords to steal. Because Pet Note uses Sign in with Apple, Google sign-in or email magic links, there's no Pet Note password that could be leaked or reused elsewhere.
No system is perfectly secure, and we can't guarantee absolute security. But we've deliberately kept Pet Note's data footprint small and its access model strict, so there's less that could go wrong and less that's exposed if something does.
Who can access your information
Only you can access your account's data, enforced technically through row-level security, not just by policy. Wondertree staff do not routinely access user content. The only exceptions are where you ask us for support and accessing your data is necessary to help you, or where we're required to by law (for example, a valid legal process).
Where your information is stored
Pet Note's data is stored on managed, encrypted cloud infrastructure located in Sydney, Australia. We chose this deliberately so that Pet Note data is hosted onshore rather than routinely transferred overseas.
The main exception is authentication: if you sign in with Apple or Google, those providers process your sign-in on their own global infrastructure, which may be located outside Australia. That processing is governed by Apple's and Google's own privacy policies.
Who we share information with
We use a small number of service providers ("processors") to run Pet Note. They only receive the information necessary to provide their service to us, and they're not permitted to use it for their own purposes.
| Processor | What they do | Where |
|---|---|---|
| Our managed database and storage provider | Database, authentication session handling, and photo/receipt storage | Sydney, Australia |
| Apple (Sign in with Apple, App Store) | Authentication, if you choose this sign-in method, and billing if you subscribe to Care+ on iOS | Apple's global infrastructure |
| Google (Google sign-in, Google Play) | Authentication, if you choose this sign-in method, and billing if you subscribe to Care+ on Android | Google's global infrastructure |
Beyond these processors, we only disclose personal information where required by law, to protect the rights or safety of a person, or in connection with a genuine business transition (such as a merger), in which case we'd tell you first wherever possible. We do not share your information with data brokers, advertisers, or analytics companies, because we don't use any.
Cookies and tracking on this website
This website (petnote.io) does not set tracking or advertising cookies, and does not run any third-party analytics or advertising scripts. The Pet Note app similarly contains no third-party advertising or analytics SDKs. Any technical, strictly necessary storage used to make the site or app function isn't used to track you across other sites or apps.
Children's privacy
Pet Note is not directed to, and is not intended for use by, children under 13. We do not knowingly collect personal information from children under 13. If you're a parent or guardian and believe your child has provided us with personal information, contact us at [email protected] and we'll act promptly to remove it.
If a minor uses Pet Note with a parent or guardian's involvement, that parent or guardian is responsible for the account and for supervising its use.
Your rights and choices
Regardless of where you live, you can always:
- review and edit the information in your account and pet profiles directly in the app;
- turn device notification permissions on or off in your device settings;
- ask us what information we hold about you; and
- delete your account and all associated data, see Delete your account.
To make a request about your information, email [email protected]. We'll respond as soon as we reasonably can, and in any event within the timeframes required by applicable law.
Changes to this policy
We may update this Privacy Policy from time to time, for example as Pet Note's features evolve. If we make a material change, we'll update the "last updated" date at the top of this page and, where appropriate, let you know in the app. We'd encourage you to check back occasionally.
How to make a complaint
If you have a concern about how we've handled your personal information, please contact us first at [email protected] so we can try to resolve it directly, we're a small team and genuinely want to fix it.
If you're not satisfied with our response, Australian residents can lodge a complaint with the Office of the Australian Information Commissioner (OAIC), the independent regulator for privacy in Australia:
- Website: www.oaic.gov.au
- Phone: 1300 363 992
Questions?
If anything in this policy is unclear, or you'd like to talk to a person rather than read a policy, email us at [email protected]. We read every message ourselves.