The short version
Veta is a health record for your pet, made by Soul Surferz LLC ("we" and "us" on this page). We hold the records on your behalf so you can act with confidence at the vet, on the phone, and in the kitchen at 9pm.
We never sell your data. We never share it with advertisers. We never use your pet's records to train public AI models.
Your records, photos, audio, and notes are yours. You can read, correct and delete them in the app, and ask us for a copy at any time.
When you delete your account, deletion is real. Soft-delete the same day. Hard-delete from our primary systems and backups within 30 days.
This page covers the Veta app and helloveta.com, the website. The website uses Google Analytics and our own page analytics; the section called This website explains what they record.
If anything below is unclear, write to us through the contact form.
What we collect
Account. Your email address, your full name (whatever Sign in with Apple or Sign in with Google hands us when you sign up), and the display name you set inside the app.
Pet records. Each pet's name, species, breed, birthdate, photo, and spay/neuter status.
The health timeline. This is the heart of the app. Vet visits, weights, medications, observations (stool, skin, behavior, urine, food, anything else you log), and the worry entries you write when something feels off, including the triage severity and what to watch for. The same timeline holds documents you upload: vet records, vaccine certificates, lab results, and invoices.
Insurance information. Your policy number, the policyholder, the diagnosis on a claim, and where the payout should go. We use this to fill in the claim PDF for you. We don't keep the submitted form on our servers; we only keep metadata about the claim itself.
Audio recordings of vet visits. If you record a visit, the audio is held for 30 days and then deleted unless you pin it. Transcription happens on your device, not on our servers.
Push tokens. The notification token your device hands the app (through Apple on iPhone or Google on Android) so we can deliver the medication and appointment reminders you set up. Stored per account and deleted when you delete the account.
Minimal device info. Just enough to deliver push notifications and send a usable crash report when something breaks. We don't collect advertising IDs, and Veta never asks for tracking permission.
How we use it
We use what you give us to run the app you signed up for, and not for anything else. Specifically:
To show you your pet's timeline and to answer the questions you ask Veta about your own pet.
To generate insurance claim PDFs for the carriers we support: Trupanion, Pets Best, Nationwide, Spot, and ASPCA.
To send the medication reminders, appointment reminders, and routine reminders you set up. Nothing more.
To audit our own work. Every AI request writes a short row to an internal log with timing and performance metrics (never your record content) so we can spot when AI tooling gets slower or less accurate.
To fix bugs and prevent abuse. Crash reports and security audit trails go to our error tracking, then get destroyed on a schedule.
We also use anonymous, aggregate product metrics. How many people opened the app this week, not who. How long the average timeline is, not what's on it.
This website
This section covers helloveta.com, the website you're reading. You don't need an account to read it.
Google Analytics. The website uses Google Analytics to count visits and see which pages people read. Google Analytics sets cookies in your browser and receives the pages you view, the page or search that brought you here, and details about your browser and device. Google uses your IP address to estimate your general location. How Google handles that data is set out in Google's privacy policy.
Our own page analytics. The website also sends us a record of how its pages are used: the page you viewed, the address of the page that linked you here, any campaign tag on that link, your device type (phone, tablet or computer) and browser type, how far down the page you scrolled, how long the page was open in front of you, the last section you reached, which links and buttons you clicked (including the App Store and Google Play buttons), whether the browser reports being run by automation software (so we can leave bots out of the counts), and, when we're testing two versions of a page, which version you saw. A random ID kept in your browser's local storage lets visits from the same browser be counted together. These records don't include your name, your email address or anything from the Veta app, and they're stored in our analytics database in the United States.
Store links. When you tap an App Store or Google Play button, the link carries a short code naming the page you tapped it on (or the campaign tag you arrived with), so the store can tell us how many downloads each page led to. The code names the page, not you.
The contact form. If you write to us through the contact form, we receive the email address, name and message you enter, the topic you pick, the address of the page that linked you to the form, and your browser's user-agent string (a line of text that names your browser and operating system). We use them to reply to you.
You can block or delete cookies and clear local storage in your browser's settings. Reading the website doesn't depend on either.
AI and your data
Some Veta features use third-party AI services to draft summaries, decode vet records, and answer questions you ask about your own pet.
Every AI provider we use is bound by a zero-retention data-processing agreement. Your data is sent for a single response and discarded on their end. Your records are not used to train any public model, and we don't allow that to change without telling you first.
We don't share your records with AI providers for any purpose other than answering the request you made. No advertising use, no training use, no aggregate-research use.
Your rights
These rights apply whether you're in the EU under GDPR, in California under CCPA and CPRA, or anywhere else. We don't sort them by jurisdiction; we honor them across the board.
Read what we have on you. Open the app. Your timeline is the canonical record. There is no hidden second copy.
Get a copy. Ask for one through the contact form below and pick Privacy as the topic. That covers the access right and the portability right.
Correct anything that's wrong. You can edit the details Veta pulled from a scanned record, delete any entry on the timeline, or ask us through the contact form to correct something else.
Delete everything. The in-app account-delete flow soft-deletes the same day and hard-deletes within 30 days, including from backups.
Restrict or object. To restrict or object to how we use your data, including in AI features, write to us through the contact form. Each notification category can be turned off in the app's notification settings. Marketing email is opt-in and the unsubscribe link is in every message.
Withdraw consent. Permissions you gave the app, such as notifications, the microphone and the camera, can be turned off in your phone's settings at any time.
Do-not-sell, do-not-share, and the right to limit use of sensitive personal information (CCPA and CPRA): we don't sell, and we don't share for cross-context behavioral advertising, so there's nothing to opt out of. If that ever changes, this section changes first.
To exercise any of these, or to ask anything else, reach us through the contact form and pick Privacy as the topic.
Where your data lives
Veta's servers are in the United States. If you're in the EU or the UK, your data crosses the Atlantic to reach us.
We rely on Standard Contractual Clauses with the US-based vendors listed above to cover that transfer, and we keep the agreements current as the SCC framework updates.
We don't currently offer Veta directly inside the EU. If we begin to, we'll designate an EU Representative under GDPR Article 27 and update this page before the launch. We'd rather tell you that's still pending than pretend it isn't.
Children
Veta is for adults who care for animals. We don't knowingly collect data from children, and our Terms set the account minimum at 16.
If you're a parent or guardian and you think a child has signed up, write to us through the contact form and we'll remove the account.
How long we keep it
While your account is active, your data stays. The whole point is that the timeline is there when you need it, two years later, in the parking lot before a recheck.
Audio recordings of vet visits are deleted after 30 days unless you pin them. Pinned audio stays as long as the account does.
When you delete your account, the soft-delete is immediate. The hard-delete from our primary systems and backups completes within 30 days.
Operational logs (the AI call audit, the scheduled-job logs, error reports) are retained for 12 months and then destroyed.
Security
Your data is encrypted in transit and encrypted at rest.
Every user-data table on our database is fenced with row-level security. Your records are unreachable to other accounts at the database level, not just the app level.
Your card number never touches our servers. Apple and Google handle payment information through their own billing systems (StoreKit on iPhone, Play Billing on Android).
The internal AI request audit log is internal-only. It isn't readable by your account, and it isn't readable by other accounts.
We patch on a regular cadence and rotate credentials on a regular cadence. No system is perfect; we treat security as work that's never done.
Changes to this policy
If we change anything material, we'll email you at least 30 days before it takes effect. Material changes include adding a new vendor, adding a new data category, or meaningfully changing how we use what we already have.
The date at the top of this page reflects the current version. If you want to read the policy carefully before agreeing to a change, the 30 days is for that.
Contact us
Questions, requests, or anything else: write to us through the contact form and pick Privacy or General as the topic.
We'd rather answer in advance than have anyone guess. Send a note via our contact form and pick ‘Privacy’ as the topic.