Privacy policy

Last updated 26 October 2026

Who we are

Pawperwork is run by Paulino Rui Cardoso Jr., based in Aveiro, Portugal. We're responsible for your data under the EU General Data Protection Regulation (GDPR). Contact us at hello@pawperwork.app.

What we collect, and why

• Your plan (route, dates, your pets' names, breeds, weights, birth, microchip and vaccine dates). It's stored in your browser's local storage so your plan is there when you come back. It stays on your device and isn't sent to us, unless you use the assistant (below) or have an account.
• Your account, if you unlock a pass. Accounts are only for people who unlock a pass. We store your email address, your pass, your plan, the steps you've ticked off, and a summary of your latest document check (what was read, such as microchip numbers and dates), so you can get back to them on any device. We never store certificate photos. You sign in with a one-time link or code sent to your email; we store only scrambled (hashed) versions of these, and a sign-in lasts up to 30 days on a device. You can delete your account at any time from the Account screen, which removes all of this straight away. Accounts unused for 12 months are deleted automatically.
• Email reminders, if you turn them on. Reminders are free and optional, and you don't need an account. We store your email address, the dates you want reminding about with their short titles and notes (for example "Luna: rabies booster due", or a step in your plan such as the vet visit), and two random keys: one lets this device update the dates when your plan changes, the other is the stop link in each email. We don't store your plan itself. You confirm your address with a one-time code, which we store only in scrambled (hashed) form for up to a day. We email you 7 days and 1 day before each date (for treatments that repeat monthly, only the day before). Every reminder has a link to stop them, and your email app's own unsubscribe button works too; stopping deletes your address and dates straight away. Our emails have no tracking pixels and no tracked links. Dates that have passed are deleted after 2 days, and an address with nothing left to remind about is deleted after 12 months without changes. Deleting your account also stops reminders sent to the same address.
• Crew letters, if you sign up. Crew letters are occasional emails from Dino, Miso and Toula with pet travel tips, rule changes and Pawperwork news. They're separate from reminders: you sign up with your own unticked box, and nothing is sent until you confirm with the link we email you. We store your email address, when and where on the site you signed up, the wording you agreed to, and a random key for the links in each letter. If you choose to tell us, we also store where you're travelling from and to, roughly when, what kind of pets you have, whether you'd like news about our phone app, and your answers (and any comment) to the one-tap questions in our letters. We use these answers to decide what to write about and to improve Pawperwork, and we only look at them as totals, never to profile you. Every letter has an unsubscribe link, and your email app's own unsubscribe button works too; unsubscribing deletes your address and all your answers straight away. If you don't confirm within 7 days, we delete your address. Our letters have no tracking pixels and no tracked links. Deleting your account also unsubscribes the same address.
• Beta check-in. During our beta, passes are free in exchange for feedback: the unlock form says so before you continue. We send you one email 3 days later asking 3 quick questions about how it's going. It's only sent once you've confirmed your address with the sign-in code or link, and the email has a link to remove your address. We store your email address, when you unlocked, the deal you were shown, the language, and a random key for the answer links. Your answers (and any comment) help us improve Pawperwork and are only looked at as totals. We delete your address 60 days after the email is sent; the answers are kept without it. Deleting your account deletes both straight away. It's the only check-in we send.
• Messages to the assistant. When you chat, your message and a summary of your plan are sent through our server to our AI provider to write a reply. We don't save the conversation.
• Documents you check. Photos or PDFs of certificates are made smaller in your browser, then sent through our server to our AI provider to be read. We don't store them. Documents can show your name and address, so you can cover anything you don't want to share; the dates and microchip numbers are what matter.
• Feedback you send. If you fill in our feedback form, we store your answers and, only if you give it, your email address, so we can improve Pawperwork and ask you a follow-up question. We don't store your IP address with your answers. We delete feedback when testing ends, or sooner if you ask.
• Requests for a person to check your documents. If you ask for a human check, we store your email address, your note and a short summary of what the check found (route, arrival date, pet's name, species and breed, and the microchip number it read), so we can reply to you. Your documents aren't sent with the request; you choose whether to send them when we reply. We delete the request once it's handled.
• Documents you email us for an Expert review. If you buy an Expert review and email us your pet's documents, a person reads them to check your plan. They're kept in our email inbox only until your review is done, then deleted.
• Messages you send us. If you use the contact form, we store your name, email address, topic and message so we can reply, and delete them once your question is handled.
• Anonymous statistics from document checks. When you check documents, we record the route, whether it's a dog or a cat, how many days before travel, which kinds of documents were read, and which kinds of problems were found (for example "microchip numbers don't match"). We don't record names, microchip numbers, dates or any part of your documents. We use this to see which mistakes are most common and to make the check better.
• Trip reports. If you tell us how your trip went, we store your answers with the route, species and month you travelled, but not your name or email. We share tips only if you tick the box, and only anonymously. If you have an account, we email you once after your arrival to ask; every email has a link to stop these, and that doesn't affect your account.
• Technical data. Like any website, our host sees your IP address and basic request details. We use the IP address to limit how many requests one person can make, to prevent abuse. Technical logs are kept for a few days, then deleted.

Our legal basis

• Providing the service you ask for (your plan, your account, chat replies and document checks).
• Your consent, for email reminders, crew letters and the answers you give with them, and for feedback, messages and human-check requests you choose to send, which you can withdraw at any time.
• Our legitimate interest in keeping the service secure and working, and in improving it with anonymous statistics.

Who we share data with

• Anthropic, our AI provider, which processes chat messages and documents to produce answers. Under its commercial terms, it doesn't use this data to train its models and keeps it only for a limited time. Anthropic is based in the United States.
• Cloudflare, which hosts the website, runs our server and stores accounts, reminders, crew letter sign-ups and answers, feedback, messages and human-check requests.
• Resend, which delivers sign-in emails, reminders and crew letters to you, and an email alert to us when you ask for a human check or send a message. The alert contains your request or message.

These providers may process data outside the EU. Where that happens, transfers are covered by safeguards such as the European Commission's Standard Contractual Clauses. We don't sell or rent personal data to anyone.

Cookies and what we store on your device

We don't use advertising or tracking cookies, so there's no cookie banner. Everything below is there only to make a feature you chose work, which EU rules allow without asking first. You can clear all of it at any time in your browser settings.

• Your plan (local storage, slp-move): your trip, pets and ticked steps, so your plan is there when you come back. Clear it with "Start a new plan" on your plan.
• Your language (local storage, pw-lang): only if you choose English or Portuguese.
• Signing in (cookie, pw_session, and local storage, pw-acct): only if you sign in to an account. It keeps you signed in on that device for up to 30 days and is removed when you sign out.
• Reminders (local storage, pw-remind): only if you turn on email reminders. It holds your address and a key so this device can update your reminder dates.
• Tools you use (local storage): your crate calculator measurements (pw-crate), the ticks on the flying checklist (pw-flying-checklist), and whether you've already played with the crew on the home page (pw-played).
• This visit only (session storage, pw-src and pw-step-…): the post or link you came from and the steps already counted, so each one is counted once. Your browser deletes these when you close the tab.

To see how far people get, we count steps anonymously, such as "a plan was started" or "the document check was used", as daily totals. The counts include the name of the post or link you came from, if it has one, and nothing else: no cookies, IP addresses or anything that identifies you. We also use Cloudflare Web Analytics, which counts page visits without cookies.

Our fonts are served from our own site, so opening a page doesn't contact Google or any other font service.

Your rights

You can ask us to access, correct or delete personal data we hold about you, to restrict or object to how we use it, or to receive it in a portable format. Email hello@pawperwork.app. Because we don't keep your plan, chats or documents, the only things we may hold are your account (if you unlocked a pass), your reminders (if you turned them on), your crew letter sign-up and answers (if you signed up), and feedback, messages and requests for a human check that you sent us. You can delete your account yourself from the Account screen. You can also complain to Portugal's data protection authority, the CNPD, or the authority where you live.

Age

You must be 18 or older to buy a pass or create an account, and to sign up for email reminders or crew letters. Anyone can use the free plan, which is saved only in your browser. If you think someone under 18 has given us their email, write to hello@pawperwork.app and we'll delete it.

Changes

If we change how we use data, for example when we add accounts or payments, we'll update this page and the date at the top before the change takes effect.