Rafus privacy policy

Last updated: October 2, 2026

In short: what you enter in Rafus —your pets, their medication, measurements, supplies and daily checks— is stored on your phone. The app doesn’t ask for your name, email or password, and doesn’t use analytics tools. Only if you choose to share a pet with other people is its data copied to a server, end-to-end encrypted: neither we nor the server provider can read it. The app is free and is supported by a single Google AdMob ad, which has no access to any of that data, and by commissions on purchases made through links you choose to open.

This is a translation. If it differs from the Spanish version, the Spanish version prevails.

1. Who we are

Rafus (“the app”) is an Android and iPhone app that helps you manage a pet’s treatment: medication reminders, measurements, supplies and daily checks. All its features are free. It is developed and published by CloudSys SRL, the controller of the data processing described in this policy. For any question, write to [email protected].

2. What is stored on your phone

The app stores what you enter in it in your phone’s own storage:

Your pets’ names and details.
Medication, doses, schedules, daily checks and measurements.
Supplies (medication, needles, lancets, food and others) and their stock.
Notes and the history of what was done and what wasn’t.
Photos you choose for a pet.
App preferences, such as language.

Some of this information describes a pet’s health. As long as you don’t share a pet, none of it leaves your phone, except for the backups described in section 3.

3. Backups

On-device copy. The app automatically keeps an encrypted copy of its data in its own folder on your phone, so it can be recovered if something goes wrong.
Backup file. From Settings you can export a file with all your data, encrypted with a recovery code that only you know. That file goes wherever you choose.
System backup. Android (Google backup) and iOS (iCloud Backup) may include the app’s data in your phone’s backup, depending on how your Google or Apple account is set up. That backup is made and stored by Google or Apple and is governed by their policies.
Key vault. So that your recovery code and encryption keys aren’t lost when you change phones, the app keeps a copy of them in your account: Google’s Block Store on Android and iCloud Keychain on iPhone. That copy is end-to-end encrypted: Google and Apple can’t read it. On Android, without a screen lock it isn’t uploaded to the cloud.

4. Sharing a pet

Sharing is optional. If you don’t share any pet, Rafus never connects to our server. If you share, you can invite one or more people by having them scan a QR code, and choose for each of them whether they can change the treatment or only log what they do.

What travels and how

When you share or accept an invitation, your phone gets an anonymous identity: a random identifier, with no name, email or password.
What gets synced is what belongs to the shared pets: their tasks, records and supplies, and the name each person chooses to show. All of it is encrypted on the phone before it leaves, with a key that only the household’s phones have. The server stores the encrypted content and can’t read it.
To decide who can see and write what, the server does see some data unencrypted: which household and which pet each record belongs to, what kind of record it is (for example, a dose or a supply), which anonymous identity wrote it, when, and how large it is. Like any server, it also receives the IP address of each connection.
The server is provided by Supabase Inc., with the data hosted in São Paulo, Brazil.

Who sees what

Each invited person sees only the pets shared with them, not the rest of the household.
Whoever shares can remove anyone’s access at any time. From then on, that person stops receiving anything new, but what they had already downloaded to their phone stays there.
If an invited person goes 90 days without opening the app, whoever shares gets a notice; if they don’t come back within the following 30 days and nobody chooses to keep them, they lose access.

Notifications to others

When someone logs something for a shared pet, the other people get a notification on their phones. For this, the server stores for each phone a notification identifier (push token), its language and its operating system. The notification’s content travels encrypted: it is put together by the phone that logs the entry and only the household’s phones can open it. Notifications are delivered through Expo’s notification service, Firebase Cloud Messaging (Google) on Android and Apple’s notification service on iPhone, which see the identifier and that a notification was sent, but not its content. They can be turned off in Settings, and doing so deletes the identifier from the server.

5. Information we don’t collect

We don’t ask for your name, email, phone number or password, not even to share.
We don’t collect your location or contacts.
We don’t use usage analytics services.
We don’t sell information to third parties, for any reason.
We never share your pets’ data with AdMob or any other advertiser. The ad has no access to the app’s content.

6. Advertising

The app shows a single ad, at the bottom of the “Today” screen, provided by Google AdMob (Google Ireland Limited). To show it, AdMob may access your phone’s advertising identifier and technical data such as the model, the language and an approximate IP address. Google processes that data as an independent controller, under the Google Privacy Policy.

In the European Economic Area, the United Kingdom and Switzerland, consent is requested through Google’s standard form (UMP) before the first ad is shown, and it can be changed at any time from Settings → Ads → Ad privacy options. On iPhone, the system first asks whether tracking for advertising is allowed. Ads are limited to content suitable for all audiences.

7. Shopping links and commissions

When a supply is about to run out, the app may offer a link to buy it. If you buy through that link, we may receive a commission from the store, at no extra cost to you. The app tells you this before opening the link.

The link is a product search on the store: we don’t send it any data about you or your pets. Opening it takes you out of Rafus to the store’s website, which is governed by its own privacy policy. The app doesn’t offer links for prescription-only medication: in those cases the restock reminder refers you to your vet.

8. Permissions the app uses

Notifications: for reminders and for notifications about shared pets.
Exact alarms (Android, SCHEDULE_EXACT_ALARM and USE_EXACT_ALARM): so reminders go off at the configured time. A medication reminder that arrives late doesn’t do its job.
Start on boot (Android, RECEIVE_BOOT_COMPLETED): to reschedule reminders after the phone restarts.
Vibration: for the reminders’ haptic alert.
Camera: only to scan an invitation’s QR code. No photos are taken or stored with it.
Photos and files: only when you pick a photo for a pet or import or export a file. The app accesses only the file you choose.
Advertising identifier (Android, AD_ID; on iPhone, the tracking permission): used by Google AdMob for the ad.

9. Exporting information

The app lets you generate a PDF report or send a file to another app. That only happens when you start it and choose the destination. Once information leaves Rafus for another app, it is governed by that app’s privacy policy.

10. App updates

Rafus connects to Expo’s servers (u.expo.dev) to check whether there is an update for the app itself. That connection only sends the technical information needed to deliver the right version, such as the app version and the platform. None of the data you entered in the app is sent.

11. Where the data is and international transfers

What is stored on your phone stays on your phone. What is synced when you share lives on Supabase servers in Brazil, and notifications go through Expo, Google and Apple services that may operate in other countries. If you use the app outside Brazil, that is an international data transfer. The content travels and is stored encrypted, and what the server can see unencrypted is the minimum described in section 4.

12. Children

The app is not directed at children under 13 and doesn’t ask anyone for their age or personal data. Ads are set to content suitable for all audiences, with no processing aimed at children.

13. How to delete your data

On your phone

You can delete data from within the app, or completely by uninstalling it or, on Android, from Settings → Apps → Rafus → Storage → Clear data. System backups and the key vault (section 3) are managed from your Google or Apple account.

On the server, if you shared a pet

From the app: Settings → Delete my data from the server. It deletes the household, everything shared and the anonymous identity from the server. Your own pets stay on your phone with their full history.
Without your phone: on this page, with your recovery code. The code never leaves your browser; it is used to compute a proof, which is the only thing sent.
If you only received pets, you can stop receiving them from the app or by writing to [email protected]. What you logged for them is part of the history of someone else’s pet and stays in their household, without your identity.

What invited people already downloaded to their phones stays there: deleting data from the server can’t reach other phones.

14. Medical disclaimer

Rafus is an organization and reminder tool. It is not a medical device and does not provide medical advice. It does not replace a vet’s judgment. Decisions about medication and treatment should always be made under professional guidance. The developer is not responsible for consequences of reminders not received, since notification delivery depends on each phone’s settings and state.

15. Changes to this policy

If this policy changes, this page and its “last updated” date will be updated. If the app adds a feature that handles data differently, it will be clearly explained before it is turned on.

16. Contact

For any question about this policy or about how your data is handled, write to [email protected].