Last updated: 26 August 2026
Vetted helps you work out how quickly your dog or cat needs to be seen, and how to describe the problem when you get there. Your pet's record lives on your phone. We do not keep it.
We never store what you write about your animal, and we never store your photos. When you run a symptom check, your description and any photos are sent over an encrypted connection, used to produce the answer, and thrown away when that request finishes.
There is no database table for them. There is no account, no email address, no password and no name — yours or your pet's.
Vetted is run by a sole trader based in Ireland. For data protection law, we are the data controller for the small amount of information described below.
Email: allenjoshsamson99@gmail.com
Written requests can go to the same address, and we will reply from it.
All of this is written to a file inside the app's own storage on your device, and none of it is uploaded to us:
Delete the app and that file goes with it. iCloud and iTunes device backups are handled by Apple under Apple's terms, not ours.
When you run a check and the app can reach our server, it sends, over HTTPS:
Our server passes that to Anthropic, which produces the assessment, and hands the answer straight back to your phone. Nothing in that list is written to our database. Your pet's name is never sent at all.
If the request fails, the app falls back to a rule engine that runs entirely on your phone, so you always get an answer.
This is a Vetted+ feature. Two photos plus species, breed, age and weight are sent the same way, scored by Anthropic, and discarded. The photos stay on your phone; we keep only a count of how many photos were processed.
Being straight about this matters more than sounding clean, so here is the whole list.
| What | Why |
|---|---|
| An install identifier | A random UUID generated on your phone and kept in its Keychain. It lets us count your free checks without knowing who you are. It is not your name, email, Apple ID or advertising identifier, and it is not shared between your devices. |
| Monthly counters | How many checks, body condition scores and photos that install used this month, and how many AI tokens they cost. This is how the free allowance works and the only place we measure spend. |
| A country code | The two-letter country Cloudflare works out from the connection. We do not store IP addresses. |
| Your plan | Whether the install is on the free tier or Vetted+, and when that runs out. |
| A coarse event log | One row per action, holding the install identifier, a timestamp, and a few labels: symptom check, dog or cat, which body area, the resulting urgency band, how many photos. Never a word you typed. |
| A safety audit log | Every time our fixed safety rules overruled the AI: which rule fired, what the AI said, what we showed instead, species and body area. No install identifier and no text. This is how we catch a rule that has become too twitchy before it matters. |
Being precise about the event log. It does not contain your description or your photos — but it does record that a particular install ran a check on, say, a dog's abdomen, and that the result was urgent. Over time that is a rough shape of your pet's history, tied to an anonymous identifier. We keep it because we need to know whether the app is actually helping and whether a safety rule is misfiring, and we delete it on a schedule. If you would rather it did not exist at all, email us and we will remove your rows.
Vetted contains no advertising SDK, no third-party analytics SDK, no tracking pixel and no cross-app tracking. We do not use the advertising identifier (IDFA) and we never ask for tracking permission. The event log described above, written by our own server, is the only analytics that exists.
Vetted+ is bought and managed entirely through Apple's In-App Purchase. We never see your card details, billing address or Apple ID. The app checks Apple's signed receipt to work out whether you are on a paid plan.
Where a subscription-management service (RevenueCat) is connected to validate receipts, it receives your install identifier and Apple's purchase events, and tells our server whether that install is entitled to Vetted+. Nothing about your pet is sent to it.
| Company | What they handle |
|---|---|
| Apple | App distribution and in-app purchases. |
| Cloudflare | Hosts our server and the database holding install identifiers and counters. |
| Anthropic | Produces the symptom assessment and the body condition score. Receives your description and photos for that one request. |
| RevenueCat | Validates App Store receipts and tells us whether an install is on Vetted+. |
Some of these are based in the United States, so some data is transferred outside the EEA. Those transfers rely on the European Commission's Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework.
We do not sell your data, and we do not use anything you send through Vetted to train AI models.
Not in the legal sense. GDPR's special protection for health data covers people. What you write in Vetted is about an animal, so it is ordinary personal data rather than a special category.
We treat it as sensitive anyway, because a description of a sick animal is personal and often upsetting, and because the simplest way to keep it safe is not to hold on to it. That is why there is no table for it.
We do not rely on consent for any of the above, so there is no cookie banner. We run no website analytics.
| Data | Kept for |
|---|---|
| Your description and photos | Not stored at all. The length of one request. |
| Event log and safety audit log | 90 days, then deleted automatically each night. |
| Rate-limit records | 24 hours. |
| Free-tier install records and counters | Deleted automatically once an install has not opened the app for about 400 days. |
| Paid install records | While the subscription is live, and for as long as we need them for tax records. Ask us and we will remove what we can. |
Settings › Delete everything in the app removes every pet, photo, symptom check, reminder and portion plan from your phone. It cannot be undone.
That is a local wipe. To have the anonymous server-side rows — the install record, counters and event log — removed as well, email allenjoshsamson99@gmail.com. So we can find the right rows without deleting a stranger's data, include your install identifier or send the request from the address you contacted us on before. Left alone, those rows delete themselves on the schedule above.
Under the GDPR you can ask us to:
Email allenjoshsamson99@gmail.com and we will answer within one month. In practice the answer to "what do you hold about me" is short, and you can read most of it above.
If you are unhappy with how we have handled it, you can complain to the Irish Data Protection Commission.
Vetted is not directed at children and we do not knowingly collect data from anyone under 16.
Everything between the app and our server travels over HTTPS. AI keys live on the server, never in the app. Requests are rate limited per install and the admin dashboard is behind a password. The strongest protection here is structural: the thing most worth protecting is never written down in the first place.
If we change what we do with data, we will update this page and change the date at the top. Material changes will also be mentioned in the app's release notes.
Questions, deletion requests, or anything on this page that does not match what you have seen the app do — please tell us.