Legal

Privacy policy

This policy explains what personal data Animalrounds processes, why, where it lives and what you can do about it. It applies to this website and to the Animalrounds application.

Last updated: 13 September 2026

Who processes your data

Animalrounds is operated by BV Fisser, Baardegem, Belgium, company and VAT number BE 0882.030.896. We are the data controller, for this website as well as for the Animalrounds application. You can reach us at info@animalrounds.com, which is also the address for any question about your data.

We follow the General Data Protection Regulation (GDPR) and Belgian privacy law. This page is written in plain words rather than in legal ones.

What we collect

This website

The marketing site sets no cookies and loads no third-party scripts, fonts or images. Our hosting provider keeps standard server logs (IP address, requested page, user agent, timestamp) for security and troubleshooting; these are deleted after about 30 days.

The contact form

When you send us a message we receive your name, email address, optional organisation, the role you selected and your message. We use it only to answer you and keep it for at most 24 months.

The Animalrounds application

  • About you — your name and email address, and, if you fill them in, your phone number, profile picture and language. If you sign in with Google or Apple, they pass us your email address and your name.
  • About your organisation — the name, type, address and VAT number you enter, and who belongs to it with which permissions.
  • About the animals — profile and pedigree, the medical record and medication, feeding plans, care requirements, behaviour notes, photos, videos and documents. Data about an animal is not personal data — a horse has no privacy. We say that honestly, but we still treat a medical record with care, because it is confidential to the owner and because it can contain people's names (the vet, the farrier, a contact).
  • About the work — tasks and who ticked them off, and the time staff log, possibly with an hourly rate. That is personal data, and in an employment relationship it is sensitive: it shows who worked when and how fast. It exists to account for and pay hours, not to judge anyone.
  • A log — who changed or completed what, and when, per animal and per organisation. That is needed to check who gave a medication or skipped a task.
  • Technical data — device and browser information, and server logs with your IP address and the timestamp, for security and debugging.

Why we process it

  • To provide the service you asked for: an account, an organisation, animal profiles, the agenda, notifications and emails such as an invitation (performance of a contract).
  • To keep the service secure and to notice abuse (legitimate interest) — the reason we keep server logs.
  • To invoice and keep books, should your organisation ever take a paid plan (legal obligation).
  • We do not sell personal data, we do not use it for advertising, and we do not profile you.

Where your data lives

Application data is stored in the European Union, in the Frankfurt region (Germany). Media files are held in private storage and served only through short-lived signed links.

Who helps us

  • Supabase — the database, the file storage (photos, videos, documents) and signing in. The data is stored in the European Union, region Frankfurt (Germany).
  • Vercel — hosting of the web application: serving the pages you request. In doing so Vercel processes traffic data such as your IP address.
  • Resend — sending transactional email: invitations, sign-in links and messages about a transfer. Resend sees the address and the content of those messages.

There are no other parties today. There is no payment provider in that list, because no paid subscriptions are running yet. If we add a party, it will be listed here before it goes into use. Where such a party would transfer data outside the European Economic Area, that happens under the European Commission's Standard Contractual Clauses.

A stable or practice that uses Animalrounds to keep data about its own staff needs a data processing agreement with us. That does not exist as a standard document yet. Ask for it at info@animalrounds.com and we will put it in place.

Who sees what inside Animalrounds

An animal is visible to the organisation that owns it, and to an organisation the owner granted access to, limited to a scope: care, medical, transport or view only. Revoking that access removes it immediately. Records another organisation created while it had access remain part of the animal's history, because that history belongs to the animal's owner.

Inside an organisation, the owner or an administrator decides per person what they may do, using the permissions on the team page. Who may see everyone's time sheet is therefore your choice. Each organisation is itself responsible for what its members enter about other people, for example the details of a contact.

How long we keep it

  • As long as your account or your organisation exists.
  • Delete your account and we erase your profile, your memberships, your notifications, your push-notification device data and your own time entries. Note that those hours are then gone for your employer too — export them first if anyone still needs them.
  • If you are the only member of an organisation, that organisation goes with you and its animals are archived rather than erased, so their history is not lost. If the organisation still manages animals, the app asks you to transfer or remove them first. In an organisation with several members you simply leave it; what the others built together stays.
  • When an organisation disappears, its animals, tasks, time entries and files go with it. For an animal you transferred to another owner, the history stays with the animal: the new owner must be able to see which treatments it had.
  • Server logs: about 30 days. Contact form messages: at most 24 months. Invoices and accounting records: 7 years, as Belgian law requires.

Your rights

You may ask which data we hold about you, have it corrected, have it deleted, have its use restricted, object to processing based on legitimate interest, and get a copy to take with you.

Much of that is a button in the app: under Settings you edit your profile, export your organisation's data as a JSON file, and find a “delete account” button that really erases your account and personal data instead of merely hiding it. For anything a button cannot do, email info@animalrounds.com and we will answer within a month. If you are not satisfied, you can lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit, Drukpersstraat 35, 1000 Brussels).

Security

Data is encrypted in transit and at rest. Access to production data is limited to the people who need it, and row-level security in the database enforces the access rules described above rather than leaving them to application code alone.

Children

Animalrounds is not directed at children under 16. If you believe a child has created an account, contact us and we will remove it.

Changes

Animalrounds is being built further, so this text will change. If something changes that matters to you, we say so in the app or by email before it takes effect. The date above says when this version was written.