Privacy Policy — Critter Command
The short version
Everything you log lives on your phone. If you turn on household sharing, your records travel between your household's phones end-to-end encrypted — the developer cannot read them. There are no accounts, no ads, and no analytics.
Data on your device
Your animals, care history, reminders, notes, photos, and documents (PDFs and photographed paperwork) are stored in the app's private storage on your phone. They are excluded from Android's automatic cloud backup. Deleting the app deletes them. Backup files you export are yours, kept wherever you choose to put them.
Optional household sync — what leaves your phone
Sync is off unless you create or join a household. When it is on, the app transmits your care records (animals, history, reminders, and details), pet photos, pet documents, and the display name you type for each phone to a sync server operated by the developer (a Cloudflare Worker with Cloudflare KV storage), so the other phones in your household can download them.
How synced data is protected
Everything is sealed on your phone with AES-256-GCM before upload. The encryption key derives from your household invite code, which never leaves your phones. The server receives a separately derived credential from which neither the invite code nor the key can be computed, so the developer and Cloudflare only ever store ciphertext they cannot read. All transfers use HTTPS.
Retention and deletion
When a phone leaves a household, its synced record is deleted from the server. Encrypted photo and document files remain stored until the household's data is removed. For full erasure of a household's stored data, email crittercommandapp@gmail.com. Every phone always keeps its own complete local copy — nothing on your phones is ever deleted by the server.
What we never collect
No accounts, no analytics, no crash telemetry, no advertising identifiers, no location, no contacts. The app is fully usable offline.
Bug reports
"Report a problem" opens your own email app with a prefilled message (app version, Android version, device model, and whether sync and notifications are enabled). Nothing is sent unless you send it. We receive your email address and what you wrote, and use them only to fix the problem.
Device features
Reminders use locally scheduled notifications and exact alarms — nothing about them leaves the phone. Photos are added through Android's system photo picker, so the app never has access to your whole gallery. Files you export or share are governed by wherever you send them.
Children
Critter Command is a general-audience utility and is not directed at children.
Changes
If a future version changes any practice described here, this page and the Play Store data-safety listing are updated before that version ships.