Privacy Policy

Last updated: September 2026

1. Overview

FelisCare is a reference work on illnesses of the cat. The app fetches the content from the server and stores it on your device; what you read of it and what you search for never leaves your device. You only need an account for a purchase or to synchronise across several devices. We are the data controller within the meaning of the GDPR for all data that arises in doing so.

We do not use advertising networks for profiling, no analytics or tracking services and no social media plugins. The one exception is the advertising banner in the Free plan (Section 8); it disappears entirely from Premium onwards. No automated decision-making takes place. Data is not sold to third parties.

2. Data Controller

Legal bases

We process personal data on the basis of Art. 6(1)(b) GDPR (performance of the usage contract, see Terms), Art. 6(1)(f) GDPR (legitimate interest in secure, trouble-free operation), Art. 6(1)(c) GDPR (statutory retention obligations for payments) and, where consent has been given, Art. 6(1)(a) GDPR.

SSL/TLS encryption

This site and all interfaces of the service are delivered exclusively encrypted (recognisable by https:// in the address bar).

3. Hosting

FelisCare is operated on a server in a data centre within the European Union. All application data (accounts, profile backups and collection backups) resides on this server.

4. Website Access Data

When a page is accessed, your browser transmits technically necessary information that the server records in log files: the address accessed, date and time of the request, data volume transferred and HTTP status code, browser type and version, operating system, referring page (referrer) where transmitted, and the IP address.

The legal basis is Art. 6(1)(f) GDPR; the legitimate interest lies in secure operation and defence against attacks. Logs are deleted after 30 days at the latest, unless needed to investigate a specific case of abuse.

Contacting us

If you write to us by email, we process your details to handle the request and for any follow-up questions. Legal basis: Art. 6(1)(b) or (f) GDPR.

5. Account and Login

For an account we process: email address and, if provided, name; the password: exclusively as a non-reversible hash, never in plain text; a session token that lets the app recognise you on every request; the plan purchased and the confirmation status of the account; timestamps of creation and last change; time-limited tokens for the confirmation email and password reset.

Legal basis: Art. 6(1)(b) GDPR. The account applies only to FelisCare. Other applications of the Provider maintain separate accounts with their own records, even with the same email address; no matching between them takes place.

6. Content, Bookmarks and Purchases

The app fetches the editorial content from the server without us learning what you read. The catalogue (regions, illnesses, emergencies, checklists and their sections ) is delivered as a whole and then resides on your device. Which entry you open, how long you read it and what you search for never leaves your device.

When the catalogue is fetched we process: your account ID and session ID (where you are logged in), your language, and the state your device already holds, so that only changes are transferred. The legal basis is Art. 6(1)(b) GDPR.

Bookmarks and notes are created by you. We process the ID of the saved entry, any note, and the times of creation and change. Without an account and on the Free plan they remain solely on your device. Where you are logged in and hold a plan that includes synchronisation (Premium or Premium Plus), they are additionally stored as a backup on our server so they are available on another device or after a reinstall. The file resides in a dedicated directory assigned to your account and is not directly accessible over the web; only the server reads it, and authorisation is checked on every access.

Purchases and unlocks: a purchase does not require an account and remains solely on your device without one. If you are signed in, we additionally store with your account which plan you hold and which individual entries or groups are unlocked for you, each with a timestamp. Without this record a purchase could not be restored on a second device. The legal basis is Art. 6(1)(b) GDPR.

Details about your cat (such as name, breed, age), where you enter them, are treated like your other content: locally, and in the same secured file during synchronisation. For us they are not health data about a person but a note about an animal; we do not evaluate them.

7. Email

The service sends emails only for specific occasions: confirming registration, resetting your password. Sending is handled through the Provider's mail server. There is no promotional or newsletter mailing.

8. Payment Provider & Advertising

Purchases (Premium, Premium Plus and the individual unlocks) are processed exclusively through the Apple App Store; complete payment data never reaches our server. Apple's privacy notices apply in addition.

In the Free plan, the app shows an advertising banner from an ad network (AdMob, Google Ireland Limited); its provider may process technically necessary identifiers in doing so. From Premium onwards the banner disappears entirely and so does this processing.

9. Storage on your Device

The service stores data locally on your device (IndexedDB, localStorage): the content catalogue, your bookmarks, notes and settings. If you are logged in and your plan includes synchronisation, bookmarks, notes and profile details are additionally transmitted to the server (see Section 6); the same applies to an optional PIN code, which is stored there exclusively as a hash. What stays local only: the session (account and session token) as well as your chosen language, appearance and sort order.

Legal basis: Art. 6(1)(b) GDPR; storage is required for operation. "Reset all local data" in the profile as well as deleting the app's data removes these entries on the device.

10. Push Notifications in the App

If you use FelisCare as an iOS app and consent to notifications, the operating system generates a device token via Firebase Cloud Messaging (Google Ireland Limited), which we assign to your account. Legal basis is your consent under Art. 6(1)(a) GDPR, given through accepting notifications in the operating system. You may withdraw it at any time in your device's system settings; the stored device token is then no longer used and is removed when the account is deleted.

11. Retention and Deletion

• Account data: until you delete your account.
• Collection backup (bookmarks, notes, profile details): until you or your account is deleted. We do not delete it on our own initiative.
• Unlocks: for as long as the account exists; they are the record of your purchase.
• Access logs: after 30 days at the latest.
• Payment records: per statutory retention periods, typically six to ten years.

You delete your account yourself via the danger zone in the profile. All server backups are removed and the account is deactivated. The process cannot be undone. Accounts with other applications of the Provider remain unaffected and must be deleted separately there.

12. Your Rights

You have the right at any time to free information about your stored personal data, its origin and recipients, and the purpose of processing (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object to processing based on a legitimate interest (Art. 21). Any consent given can be withdrawn at any time with effect for the future.

Contact us at [email protected].

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence, place of work, or place of the alleged infringement.

13. Changes to this Policy

We adapt this policy whenever the service or the legal situation changes. The version published here at any given time applies. For material changes we additionally inform account holders in the app or by email.