Privacy Policy

The personal data controller is Digital Zoo SRL, a limited liability company registered in the Republic of Moldova on 19.08.2026, IDNO 1026023135005. Registered address: MD-2052, Chișinău, Ciocana sector.

Contact for any personal data questions: [email protected]. We have not appointed a data protection officer (DPO); requests are handled by the management of Digital Zoo SRL.

We collect only what the service cannot work without:

• Account data: name (if you didn't enter one, the first part of your email address), email address and whether it is confirmed, password, interface language, main currency, time zone and whether recommendations are on. The password is stored only as a hash (scrypt with a random salt): we don't know it and can't recover it.
• Google sign-in: if you choose “Continue with Google”, Google gives us the permanent ID of your Google account, your email address and name. Your Google password, contacts, files and other Google data are not shared with us.
• Sign-in sessions: signing in creates a 30-day session. We store a hash of the session key rather than the key itself, your browser string (user agent), the sign-in time and last activity. You can see your devices in settings and end the other sessions there.
• One-time links in emails (email confirmation, email change, password reset): we store only a hash of the link, its validity (24 hours, 24 hours and 1 hour) and whether it was used; for an email change, the new address until it is confirmed.
• Calendar link: if you turned on calendar sync, we store its secret key. You can issue a new link or turn it off at any time.
• Abuse protection: to limit password guessing and spam, we temporarily count attempts to sign in, sign up and send emails and forms, by IP address, email address or account. The counter is deleted when the limit window ends (10 minutes to 1 hour).

We don't collect payment data (the service is free), don't use analytics, advertising trackers or social media buttons, and don't buy data from third parties.

In a pet's profile you can store its name, species, breed, sex, date of birth, coat colour, microchip or ring number, neutering, weight, photos and notes. In records: vet visits, vaccinations, parasite treatments, medication, illnesses and tests, diet and food, care, behaviour, notes, plans, reminders and expenses.

Information about animals isn't personal data in itself, but it is linked to your account, so we protect it the same way. Records may contain information about other people (for example a vet's name or a clinic's phone number), so only enter what you really need.

The medical record and its PDF are built from your records when you open or download them and are not stored separately. Vaccination and parasite recommendations are calculated automatically from your records and general international guidelines. They are a suggestion, not a decision: they have no legal effect on you, and the scheme and product are chosen by a veterinarian.

Every action in the “Access” section (invitations, role changes, pet transfers, turning on the QR card) is recorded in the pet's activity log: who did it and when. The pet's members can see the log.

You can attach files to a pet, such as test results, photos and scanned documents, up to 10 MB each. Files are stored in the database on our server together with the rest of the data and are not analysed automatically.

Only a pet's members can open its files: every request is checked on the server. A pet's photo is shown publicly only on the QR card or in a “Looking for a home” listing, if you turned them on and allowed the photo (see section 5).

When you delete a file or a pet, the file is deleted from the database. It may remain in backups until they are replaced (see section 10).

Everything is private by default. Only two things become public, and only if you turn them on:

• The QR card in case your pet gets lost: name, photo, your message to the finder, important medical information and the contact methods you chose. You can turn the card off or issue a new link at any time.
• A “Looking for a home” listing: details from the pet's passport (species, breed, sex, age, colour, neutering, whether it is microchipped, without the number), the city, your story and health notes, photos (the avatar if you allow it and up to 9 more photos, resized to 2560 px in your browser) and the contact methods you chose: phone, WhatsApp, Viber, Telegram or a message form. Numbers are not in the page code and are shown only when a visitor presses the button; the number of reveals is limited per IP address. The listing is available without signing in but is closed to search engine indexing. An unpublished listing stops opening, and the draft stays with you.

By publishing a phone number or messenger name, you choose to make it visible to visitors. Don't publish other people's details without their consent.

Messages from visitors. Someone who found your pet or is responding to a listing sends you their name (optional), contact, message and, for a found pet, the location through the form. To fight spam, we store the sender's IP address with the message and limit messages to 5 per hour per address. The sender is also a data subject, and this policy applies to them too.

“Looking for a home” favourites: for a guest, the list of favourite listings is kept in the mc_fav cookie in their browser; for a signed-in user, in their account. When you sign in, favourites from the cookie move to your account and the cookie is deleted.

• You and the people you gave access to a particular pet (see section 7).
• Visitors to the QR card and the “Looking for a home” listing: only what you published (see section 5).
• Support does not view your records: there is no admin interface for this. Only Digital Zoo SRL has technical access to the server, and uses it for maintenance, backups and troubleshooting.
• Processors that help us provide the service (see section 8), to the extent needed for their task.
• Public authorities, only on a lawful request in the manner set by the laws of the Republic of Moldova.

Access is given to a particular pet, not to the whole account. An owner invites a person by email address: we store that address, send an invitation email to it (it can be resent) and open access when the person signs in with that email. The invitation is valid for the period chosen, from 1 to 30 days, and can be revoked. Roles:

• owner: sees everything, adds and edits any records, manages access, the QR card and the listing, and can transfer the pet;
• editor: sees everything, adds records and edits their own;
• viewer: read-only, including expenses.

Members see each other's names and email addresses in the “Access” section. An owner can change a role or revoke access, and a member can leave on their own. A pet transfer takes effect only when the new owner accepts it; all of the pet's records and files go with it. When you invite someone, you open the pet's data to them, so do it deliberately.

We share data only with services micamic cannot work without, and only to the extent they need:

• DigitalOcean, LLC (USA): hosting. The server with the database, files and backups is located in Frankfurt am Main (Germany, EU).
• Cloudflare, Inc. (USA): DNS, secure connection, attack protection and site delivery. All traffic passes through Cloudflare, so it processes IP addresses and technical request data. Cloudflare also forwards email sent to [email protected] to the mailbox where we read it.
• Resend, Inc. (USA): sending service emails (email confirmation and change, password reset, pet invitations). It receives the recipient's address, name and the email text.
• Google LLC / Google Ireland Ltd.: only if you chose to sign in with Google, in which case Google confirms your identity and gives us the data in section 2. The support mailbox is hosted by Google (Gmail), so your emails to support are stored there.

Calendar sync works differently: you add your personal link to Google Calendar, Apple or Outlook yourself, and that service downloads your tasks through it (title, pet, date). From then on it processes this data under its own rules. Turn sync off or issue a new link in settings, and the old one stops working.

Fonts are served from our own server, so your browser doesn't contact Google Fonts or other third-party sites. There is no analytics, advertising or embedded social media content.

International transfers: data is stored in Germany (EU), while Cloudflare, Resend and Google are US companies and may process data outside the Republic of Moldova and the EU. We rely on the safeguards these companies provide in their data processing agreements (EU standard contractual clauses and/or the EU-U.S. Data Privacy Framework).

• Providing the service (storing and showing records, the medical record, recommendations, calendar, shared access, QR card and listings): performance of our contract with you (the Terms of Use).
• Sign-in and security, protecting the service from password guessing and spam, the activity log: performance of the contract and our legitimate interest in keeping the service secure.
• Sending service emails (email confirmation, password reset, invitations): performance of the contract. We don't send marketing emails.
• Publishing the QR card and the listing and passing visitors' messages to you: performance of the contract, since you turn these features on yourself and can turn them off at any time; for a visitor who writes to you, their own action and our legitimate interest in fighting spam.
• Answering support requests: performance of the contract or your request.
• Complying with the law, for example answering lawful requests from authorities: legal obligation.

We don't sell data, share it with advertisers or build profiles. The service makes no decisions based solely on automated processing that have legal effects on you.

• account, pets, records, foods and files: as long as the account exists or until you delete them;
• sessions: 30 days from sign-in or until you sign out; resetting your password by link ends all sessions;
• one-time email links: valid for 1 to 24 hours; used and expired entries are deleted;
• invitations: until accepted, revoked or expired (up to 30 days);
• attempt counters: 10 minutes to 1 hour;
• visitors' messages: until the owner deletes them or as long as the pet exists;
• a “Looking for a home” listing: until the owner deletes it or as long as the pet exists; an unpublished listing is not visible to visitors;
• activity log: as long as the pet exists;
• database backups: made before every service update, the last 20 are kept;
• emails to support: as long as needed to answer and resolve the issue, but no longer than 3 years.

Under Law No. 195/2024 you have the right to:

• get confirmation of whether we process your data and a copy of it;
• have inaccurate data corrected and incomplete data completed;
• have your data erased (“right to be forgotten”) when there are no grounds to keep it;
• have processing restricted;
• receive your data in a structured, machine-readable format and transfer it to another controller (portability);
• object to processing based on our legitimate interest;
• not be subject to decisions based solely on automated processing;
• lodge a complaint with the National Center for Personal Data Protection (Centrul Național pentru Protecția Datelor cu Caracter Personal, datepersonale.md) or a court.

You can correct or delete most data yourself in the pet's profile and in settings. Send other requests to [email protected] from the address your account is registered with. We will reply without undue delay and within one month at the latest; for complex requests the period may be extended, and we will let you know.

An owner can delete a pet in its profile. If a pet has several owners, only the last one can delete it; the others can leave. Deleting a pet also deletes its records, plans, files, listing and visitors' messages.

There is no button to delete the whole account in the interface yet. To delete your account, write to [email protected] from the address it is registered with. We will delete the account, sessions, Google link and the pets you are the only owner of, with all their records and files. Pets that have other owners stay with them. Data disappears from backups as they are replaced.

The connection to the site is encrypted (HTTPS). Passwords are stored only as hashes and the session key in a cookie that page scripts can't read. Access rights are checked on the server for every action, sign-in and form attempts are limited, and the database is backed up regularly. No system is perfectly secure, so if you notice anything suspicious, please write to us.

If a data breach occurs that may threaten your rights, we will notify the National Center for Personal Data Protection within the time set by law and, where the risk is high, you as well.

The service is intended for users aged 16 and over. If you learn that a child under this age signed up without parental consent, write to us and we will delete the account.

We use only necessary cookies: sign-in, language, theme, a guest's favourite listings and a short-lived cookie for Google sign-in. Details are in the Cookie Policy.

We update this policy when the service or the law changes. The current version is always published on this page with its date. We will let you know about significant changes in advance, on the site or by email.

Digital Zoo SRL, IDNO 1026023135005. Address: MD-2052, Chișinău, Ciocana sector. Email: [email protected].