Privacy Policy
Zelavi Privacy Policy.
This policy covers Zelavi: Cuidados Pet, including test versions, and the site, blog, tools, affiliate links and waitlist.
Free materials and the editorial newsletter
Using or downloading a resource does not subscribe you to the newsletter or app waitlist. The budget worksheet runs in your browser; entries are not sent or saved automatically. The editorial newsletter has a separate purpose: pet homes, budgets, and purchases.
Editorial newsletter signup is not available in this version. The materials panel does not collect email addresses.
With analytics permission, the tracker may record opening the form and requesting a download. These clicks do not prove subscription, confirmation, or delivery. Email addresses and entered values are excluded from events.
Last updated: October 30, 2026.
Controller and contact
Renata de Souza Dias Silva is responsible for Zelavi and the data processing described here. Zelavi: Cuidados Pet is published under developer name vrtech on Google Play (com.vrtech.pet_control). Privacy and support: zelavicuidadoqueacompanha@gmail.com.
Data we collect in the app and why
An account is required for account-based app features. Photos, additional fields and subscriptions are optional. Notifications can be controlled in app and system settings. Public site tools can be used without an app account.
- Required account data: name, email, account identifier, language, adult-age confirmation, accepted terms version and acceptance date, and essential preferences. A profile photo is optional. We do not collect a birth date or identity document to prove age. Local passwords are stored as protected hashes, with data needed for access recovery. Google Sign-In uses authorized identity information to authenticate and link the account; we do not receive your Google password. To keep you signed in, Android stores session credentials in protected device storage and the server retains only a cryptographic representation of the renewal token. On the server, a session expires after 30 days without use or no later than 90 days after login, and may end earlier when you close the web version, log out or change the password.
- Your records: pet profiles and photos, species, breed, weight, dates, notes, vaccines, medication, exams, food, parasite control, appointments, reminders and costs. Free text may include professional names or other personal information you enter. Records are synchronized with our server to organize your pet care routine.
- Photos and exam attachments: images you choose for your profile or pets, and PDF or image files attached to exams to store and consult their records. Upload is optional and happens when you save. Unrestricted gallery access is not required. Avoid unnecessary personal documents, human health data or information about other people.
- Notifications: delivery token, device type, notification preference and reminder data, used to deliver notices through Firebase Cloud Messaging (FCM). Delivery depends on device permissions and your settings.
- Subscriptions: account identifier, product/plan, purchase status, validity, events and transaction identifiers needed to enable, restore and reconcile Plus/Premium access through Google Play and RevenueCat. The identifier sent to RevenueCat is associated with your Zelavi account; it is not treated as anonymous. Zelavi does not receive your full card number.
- Operation and usage: app interaction events associated with the account, technical information, dates and records needed to understand usage, diagnose errors, secure the service and operate subscriptions. These differ from optional blog analytics.
Legal bases
We process account, pet, record, file and subscription data to provide the requested service and take steps related to the contract. Minimum records may be processed to comply with legal obligations or exercise legal rights. Security, fraud prevention, error diagnosis and strictly necessary service improvement may rely on legitimate interests after considering necessity and effects on data subjects. Optional analytics, advertising and choices that require consent are enabled only under the choice presented; withdrawal stops new processing based on that choice without invalidating prior lawful processing.
If a purpose cannot rely on the stated basis, we will request a specific choice before processing or will not perform the operation.
Storage and service providers
We do not sell personal data. We disclose information to providers as necessary to deliver the requested service, comply with legal obligations, protect security and rights, or fulfill your request. Providers may process information in other countries, subject to the stated purposes and applicable data protection rules.
- Render and PostgreSQL host the API and store account, pet, reminder and subscription-status data.
- Cloudflare hosts and protects the site; R2 stores uploaded photos and exam attachments. The normal exam-attachment flow uses the authenticated API. Photos and direct or legacy media URLs may remain accessible to anyone holding the address until private-access migration is complete; do not share those addresses.
- Google Sign-In authenticates Google accounts, and Firebase Cloud Messaging delivers notifications.
- Google Play and RevenueCat handle purchases, subscription validation, restoration and access changes. Google Play also processes store-account, payment and installation data under its own rules.
- Google AdMob and the User Messaging Platform (UMP) provide the native ad on the Android Free plan, ad measurement, fraud prevention and applicable privacy choices.
- Site services include Cloudflare, Google Fonts, Google Analytics when permitted, and the form/newsletter services described in this policy. Support emails and sender addresses are processed to answer the request.
Advertising on the Free plan
The Android app may display identified Google AdMob native ads on the Home and Costs screens for Free accounts. Zelavi Plus does not display these placements. Ads stay separate from health and purchase actions and are requested only when the corresponding Zelavi remote configuration is enabled and the SDK is allowed to request ads under applicable privacy choices.
The Google Mobile Ads SDK may automatically collect and share IP address for general location, app and ad interactions, diagnostic information, and device or account identifiers, including the advertising ID when available. Google states that it uses this data for advertising, analytics, security and fraud prevention, encrypted in transit. Zelavi requests non-personalized ads and does not send names, email addresses, pet data, health records, costs or the Zelavi account identifier to AdMob for personalized targeting.
Where required, Google User Messaging Platform presents a consent message and lets you reopen privacy options in the app. You can also reset or delete the advertising ID in Android settings. Non-personalized ads may still use context, general location and technical information for delivery, measurement, security and fraud prevention.
Retention, rights and deletion
We keep account and pet records while needed to provide the service and meet the disclosed purposes. At zelavicuidadoqueacompanha@gmail.com, you may request confirmation and access, correction, anonymization, blocking or deletion of unnecessary or noncompliant data, portability where applicable, information about disclosures, review of consent choices and opposition to unlawful processing, in addition to the controls in the app. We may request proportionate identity confirmation to avoid disclosing or changing another person's data.
In Profile → Privacy and data → Download my data, you can generate a ZIP copy containing structured account data, pet records, subscription, sessions and associated events, plus available photos and attachments. The app asks you to confirm the email and, for local accounts, the current password. Passwords, session tokens, notification tokens, provider credentials and operational secrets are excluded. The manifest identifies included or unavailable media. The ZIP is delivered directly to the device and is not retained by Zelavi as a new export file.
In Profile → Delete account, confirm your email and, for local accounts, your current password. The app removes the account and linked records from the primary database. Separately stored photos, exam attachments and records held by external providers may require additional support processing; completion of that step must be confirmed with support. Our public deletion page allows you to initiate and follow up a request without installing or accessing the app.
Minimum transaction, support and security records may need to be retained for legal obligations, fraud prevention or the defense of rights, only for the period needed for the relevant purpose. Technical copies may remain until replaced or deleted under the provider’s cycle. This retention is not used to keep an erased account in normal operation. Where retention applies to your request, support will explain the data, reason, duration or duration criterion, and the completion timeframe.
Deleting your Zelavi account or uninstalling the app does not cancel your Google Play subscription. Cancel renewal in Google Play subscriptions. Store purchase records are governed by the store’s own obligations and policy. Newsletter, waitlist and support-message requests can be made through the same contact; unsubscribing is separate from app account deletion.
Security, children and changes
App-to-API connections use HTTPS. The service uses authentication, access controls, rotating session credentials, request limits and hashes for local passwords. Renewal and reset tokens are stored only as cryptographic representations. Render-managed PostgreSQL uses AES-256 encryption at rest for instances and backups, and external database connections use TLS. Authorized people and services still need usable access to provide requested functions, so at-rest encryption does not replace access control, minimization, monitoring and incident response. No service eliminates every risk. Protect your device and credentials; do not send passwords, authentication codes or payment card data to support.
We investigate events affecting confidentiality, integrity or availability. When an incident may create relevant risk or harm, we notify the competent authority and affected individuals under applicable requirements, with available information and mitigation measures.
The Zelavi app is exclusively for people aged 18 or older. New accounts require an adult-age declaration and acceptance of the Terms and Privacy Policy. We currently provide neither accounts for minors nor a parental-authorization mechanism, so a person under 18 must not create or use an account, even with informal parental permission. Processing involving children and teenagers must always protect their best interests; if we identify a minor’s data, we will stop associated collection, make proportionate checks and remove the data unless a legal or protective basis requires otherwise. A parent or guardian may contact us to request review and removal. Avoid entering human health data or sensitive personal information unnecessary for pet care.
This page will be updated when data, purposes or services materially change. The date identifies the current version; material changes will be communicated through the service when applicable.
Site and analytics data
The site may process technical data such as pages visited, approximate origin, browser, device, date, language, performance signals, and aggregated events. We may use Cloudflare, Google Analytics, and form providers to operate and improve the service.
Technical fonts and Google services
To display typography, your browser requests styles and font files from Google Fonts (fonts.googleapis.com and fonts.gstatic.com). These technical connections occur when the page opens, separately from optional analytics.
Advertising status
The site has been submitted for advertising review, but does not load ad scripts or display ads. Static domain verification does not activate advertising. If that changes, this policy and consent choices will be updated for the services actually used.
Cookies and analytics
Cookies, IP addresses, and technical identifiers may be used for audience measurement, security, and performance. Zelavi does not use programmatic advertising on the blog, and analytics events must not contain names, email addresses, or other personal data.
Consent and choices
Optional analytics stay off until you choose Allow analytics. You can decline or change your choice in Analytics preferences in the footer. The choice is stored in this browser; if it cannot be saved, no new tracking is enabled. Tools and navigation work without permission.
Turning analytics off stops new events and removes analytics cookies accessible to the site without reloading or clearing the tool fields. It does not undo data already sent. Values, names, search text, and tool fields are not included in analytics events. Print requests do not prove that a document was printed. The manual Cloudflare Web Analytics loader is disabled in this version; hosting and security logs are separate from optional browser analytics.
Affiliate links and external stores
Some pages may contain identified affiliate links. When a reader chooses to open an offer, the external store processes the visit and any purchase under its own policy. Zelavi may record the product, partner, source content, and click position without adding personal data to the tracking link.
Waitlist and app updates
When you request updates by email or an available launch form, you provide contact information for project, testing and release news. Request removal through the communication channel or policy contact. This does not create an app account.
On resource pages, with analytics permission, only predefined campaign codes from the pet home and budget series may be recognized. Free-form parameters and full query URLs are not sent.
Sensitive information and pet health
Pet health records may reveal sensitive household routines even when they are not human medical data. We limit collection to what is needed for the stated service and do not use those records to create diagnosis, treatment, or automated clinical decisions.