Privacy Policy

Last updated: August 27, 2026

TailLedger helps you create a local care card for a pet. This policy describes the information handled by the app and the choices available to you.

Information stored on your device

You can enter pet profiles, care instructions, medications, allergies, emergency contacts, veterinary information, reminders, and photos. This information is stored locally on your device. TailLedger does not require an account and does not provide a backend, cloud sync, or caregiver account.

The app does not upload pet photos, entered care information, contact details, medication information, reminder content, or generated PDF content to TailLedger.

Photos

If you choose to add a pet photo, the app requests photo-library access and copies the selected photo into its managed documents directory on your device. A versioned backup includes that photo only when you deliberately open the native share sheet and choose a backup destination. The photo is not sent to TailLedger.

Smart Import

Smart Import reads visible text from a camera or library image on your device and prepares editable vaccine, medication, weight, and pet-name fields. PDFs and remote extraction are not supported. Nothing is saved until you review and confirm the fields. Smart Import does not diagnose, interpret health information, or provide dosing advice.

Selected Smart Import images and extracted record content are not uploaded by TailLedger and are never sent to analytics.

Reminders

Reminders are scheduled as local notifications on your device. Notification permission is requested only when you save your first reminder. Reminder titles, dates, notes, and notification content are not sent to TailLedger analytics.

PDF generation and sharing

Care cards and emergency cards are generated on your device. When you choose Share, iOS presents its native share sheet and you decide whether to send or save the file. The share destination and PDF content are not sent to TailLedger analytics.

Analytics

When enabled, TailLedger uses Aptabase for limited anonymous product analytics. Aptabase receives allow-listed events such as setup progress, reminder creation, dose logging, care-signal views, sharing outcomes, Smart Import funnel counts, fixed reliability categories, and—if Plus is enabled—bounded paywall and entitlement outcomes. It does not receive pet names, notes, medication text, reminder titles or dates, contact details, photos, document contents, filenames, file paths, share destinations, or PDF content.

The analytics configuration does not collect IP addresses, use a persistent device identifier, or perform cross-app tracking. Aptabase may receive limited non-PII technical and session context such as platform, operating-system version, app version, locale, and an anonymous session identifier. Analytics is disabled when the app is built without the Aptabase app key.

Website analytics

The TailLedger website uses Cloudflare Web Analytics for anonymous, aggregate information about site visits, referrers, and device or page performance. It does not collect form submissions or the private pet-care information stored in the app. Cloudflare Web Analytics does not require a TailLedger account and is separate from the app's local records.

Purchases

If TailLedger Plus is enabled, purchases and restores are processed by Apple’s App Store and RevenueCat. RevenueCat receives an anonymous app-user identifier plus product, transaction, and entitlement information needed to verify and restore the purchase. TailLedger does not send pet profiles, care records, contacts, photos, Smart Import documents, or generated files to RevenueCat. Automatic device-identifier collection and RevenueCat SDK diagnostics are disabled.

A Plus purchase is tied to the Apple Account used in the App Store. Deleting TailLedger’s local pet-care data does not cancel, refund, or revoke the purchase.

Deleting local data

You can choose Delete all local data in More. The app cancels scheduled local notifications and removes stored pet-care data and local Smart Import usage metadata from the device. Aptabase manages anonymous analytics sessions separately and does not receive the deleted local records. App Store purchase history remains available for restoration.

Support and changes

For support, visit the TailLedger support page. We may update this policy when the app's data practices change.