Privacy Policy

The NossoVet mobile app and the website www.nossovet.pt are operated by Patinhas Inquietas, Lda. (Portuguese tax number 518627799), registered at Rua Luís de Freitas Branco, 42 D, 1600-491 Lisbon, Portugal, trading as NossoVet. Patinhas Inquietas, Lda. is the controller of your personal data.

Privacy contact: geral@nossovet.pt

Account data (app) — when you create an account: your email address (sign-in with a one-time code; we don't use passwords), name and mobile number.

Link to a clinic client record — if your mobile number matches a client record, the team may link your account to that record after a manual check. We never link accounts automatically without checking.

Your animals' data — name, species, breed, sex, date of birth, weight, microchip, passport, health booklet, neutering status, vaccinations and clinical documents uploaded by the clinic.

Appointment requests — type of appointment, preferred date and time, preferred contact method and any messages you send us (in the app or through the website form).

Appointment requests without an account — if you request an appointment without creating an account, we process the name, mobile number and email address you give us, your animal's details and the message in your request, so that we can reply. If you later sign in with the same email address, the request is linked to your account.

Clinic clients' data — for people who are already clients of the clinic, we process the contact details (name, phone, email) and the animal data held in the clinic's management system, including scheduled vaccinations and periodic treatments and their dates. This data is also used when you don't use the app.

Notifications (app) — your device's push notification identifier (only if you turn notifications on), the history of notifications and of service emails about your appointments, and the record of your marketing consent, with its date.

Newsletter — if you subscribe to the newsletter, we process your email address and, if you give it, your name, together with the date and source of your consent (website, clinic or app).

What we don't do: we don't use advertising or cross-app tracking, and we don't sell or pass data to third parties for marketing. The mobile app does not use any behavioural analytics tools.

• Creating and managing your account and processing appointment requests — performance of a contract (GDPR Art. 6(1)(b))
• Replying to enquiries and requests made on the website — steps prior to entering a contract (Art. 6(1)(b))
• Checking whether you are a client of the clinic and linking your account to your record — legitimate interest (Art. 6(1)(f))
• Replying to appointment requests made without an account and emailing you about their status — steps prior to entering a contract / performance of a contract (Art. 6(1)(b))
• Sending service emails and notifications about appointments (confirmation, proposed new date, decline) — performance of a contract (Art. 6(1)(b))
• Reminders about your animals' vaccinations and preventive treatments, by push notification and email, with a suggestion to book — the clinic's legitimate interest in keeping up preventive care for its clients (Art. 6(1)(f)). You can object at any time: through the «stop receiving reminders» link in every email, in your Profile in the app, or at geral@nossovet.pt. We don't send these reminders to anyone who has objected.
• News and campaigns notifications — consent (Art. 6(1)(a)), only if you turn them on; you can withdraw it at any time in your Profile
• Sending the weekly newsletter by email, written by Dr. Maria Loureiro (news, pet-health tips and campaigns) — consent (GDPR Art. 6(1)(a) and Portuguese Law 41/2004), confirmed by email. You can withdraw your consent at any time: the link in every newsletter, your Profile in the app, or geral@nossovet.pt.
• Keeping veterinary clinical records — legal obligation (Art. 6(1)(c))

The data is hosted in the European Union (Supabase, Ireland region). We use processors that handle data on our behalf:

• Supabase Inc. — database hosting and authentication (EU, Ireland)
• Expo (650 Industries, Inc.) — push notification delivery (USA; standard contractual clauses)
• Resend, Inc. — sending the emails with sign-in codes and the service emails about appointments and reminders, and the newsletter (USA; certified under the EU-U.S. Data Privacy Framework, with standard contractual clauses provided for in the data processing agreement)
• Google LLC — delivering requests made through the website form to the clinic (USA; Data Privacy Framework)
• Vercel Inc. — website hosting (USA; Data Privacy Framework)
• Apple / Google — distributing the app in their app stores

The clinical management software used by the clinic (VetManager) is the source of the clinical records and client contact details.

• Account and preferences — until you delete your account.
• Appointment requests — for as long as the account exists; deleted with it.
• Appointment requests without an account — for as long as needed to handle the request; if they don't lead to an appointment, they are deleted within 6 months at most.
• Reminders — we keep the history of emails sent for 12 months, to avoid sending duplicates.
• Animals' clinical records — these are the clinic's records, kept for the legal periods that apply to veterinary practice, regardless of your account in the app.
• Notifications — history linked to the account; deleted with it.
• Newsletter — subscription requests that are not confirmed are deleted after 7 days. Active subscriptions are kept until you unsubscribe; after that, we keep only your email address and the date you unsubscribed, to respect your choice.
• Enquiries made on the website — for as long as needed to reply to and follow up on the request.

You have the right of access, rectification, erasure, restriction, portability and objection, and to withdraw consent at any time:

• Delete your account in the app: Profile → «Delete account». This permanently deletes the account, appointment requests, notification identifiers and preferences. Your animals' clinical records stay with the clinic (section 5).
• Withdraw marketing consent: Profile → turn off «News and campaigns».
• Stop receiving reminders: the link in the email itself, your Profile in the app, or geral@nossovet.pt.
• Unsubscribe from the newsletter: the link in every email, Profile → «Email newsletter» in the app, or geral@nossovet.pt.
• For any other request: geral@nossovet.pt

You also have the right to lodge a complaint with the Portuguese data protection authority (Comissão Nacional de Proteção de Dados — CNPD): www.cnpd.pt

Access to the data is restricted by authorisation rules at database level: each user can only access their own data, and clinic staff only access the data needed for clinical management. Communications are encrypted (TLS). Sign-in uses one-time codes sent by email, and no user passwords are stored.

The website uses technical cookies that are essential for it to work and anonymous usage analytics (Vercel Analytics), with no advertising or tracking cookies. The mobile app does not use cookies or analytics tools.

The app and the website are intended for people aged 16 and over. We do not knowingly collect data from children.

We may update this policy; the version in force is always available on this page, with its update date. Significant changes will be announced in the app.