Privacy Policy

Introduction

Furry Health LLC (“Furry Health,” “we,” “us,” or “our”) operates the Furry Health platform, an AI-powered pet health management service. We are based in Newton, Massachusetts. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our website, mobile application, and related services.

Information We Collect

Account Information

When you create an account, we collect your name and email address. If you sign up as a veterinarian, breeder, or rescue organization, we may also collect professional credentials and business details.

Pet Data

You may add your pet's name, species, breed, age, weight, and health records. This includes vaccination history, lab results, medications, allergy profiles, and dental records.

Health Events

We collect data you generate through our AI health features, including food scans, lab result uploads, dental scans, sleeping respiratory rate (SRR) readings, and AI-generated health assessments.

Payment Information

Subscription payments are processed by Stripe. We never store your credit card numbers, CVV, or full payment details on our servers. Stripe handles all payment data under PCI DSS Level 1 compliance.

FitBark Activity Data

With your explicit consent, we may connect to your FitBark device to collect your pet's activity, sleep, and movement data. You can disconnect FitBark at any time from Settings.

Usage Data

We automatically collect technical information such as device type, browser, IP address, pages visited, and feature usage patterns to improve the platform.

How We Use Your Information

• Power AI health features including food scanning, lab analysis, dental assessments, drug interaction checks, meal planning, and risk spotting
• Send real-time FDA recall alerts when a product your pet uses is flagged
• Connect you with licensed veterinarians through our marketplace
• Generate personalized health forecasts and pre-visit summaries
• Improve platform performance, accuracy, and reliability
• Process subscription payments and manage your account

Data Sharing

We do NOT sell your personal data. We share information only with the following service providers, strictly to operate the platform:

• Stripe — Payment processing. Stripe is PCI DSS Level 1 certified.
• Twilio — SMS notifications and recall alerts.
• Supabase — Database hosting. SOC 2 Type II certified.
• Vercel — Application hosting and delivery.
• OpenAI, Anthropic, Google, Perplexity — AI processing for health features. Per our data processing agreements, your data is not used to train their models.

AI Service Providers

Furry Health Intelligence (FHI) sends pet data to the following named third-party AI providers. App Store Connect privacy declarations match this list verbatim.

Veterinary Data

Pet health records are not considered Protected Health Information (PHI) under HIPAA, which applies exclusively to human health data. However, we recognize the sensitivity of your pet's medical information and treat it with equivalent care. We apply the same encryption standards, access controls, and data handling procedures that would be expected under HIPAA-compliant systems.

Data Retention

• Active accounts: Your data is retained for as long as your account remains open and active.
• Deleted accounts: When you delete your account, all personal data and pet records are permanently removed within 90 days. Anonymized, aggregated data used for platform improvements may be retained.

Your Rights

You have the right to access, export, and delete your data at any time. These actions are available directly from your account Settings:

• Access — View all data associated with your account and pets.
• Export — Download a complete copy of your data in a portable format.
• Delete — Permanently remove your account and all associated data.

Security

We implement robust security measures to protect your data:

• AES-256 encryption at rest for all stored data
• TLS 1.3 encryption in transit for all network communications
• Row-level security (RLS) ensuring users can only access their own data
• SOC 2 Type II certified infrastructure through our hosting providers