← Back to FYNvet

Draft — pending legal review. This document describes how the app works today but has not yet been reviewed by an attorney and may change before launch.

Privacy Policy

Version 2026-10-13 · Effective October 13, 2026

This policy explains what the FYNvet Pet Parent Portal collects, why, who it is shared with, and the control you have. We try to say it plainly.

What we collect

  • Account details: your name, email, phone number, and password (stored only as a secure hash by our authentication provider).
  • Pet details you enter: name, species, breed, age, microchip number, weight, allergies and conditions.
  • Records you upload: bloodwork, X-rays, CT and MRI studies, vaccination and medical history, invoices and receipts, and any notes you add.
  • Insurance details: insurer, policy number, policyholder name, plan, deductible, and reimbursement terms.
  • Claim details: dates, diagnosis, treatment descriptions, itemized expenses, the records you attach, and your electronic signature (typed name, time, and IP address).
  • Payment details: handled by Stripe. We never see or store your full card number; we keep payment status, amounts, and receipts.
  • Security and usage records: sign-in events, permission changes, and a log of when information is shared with an insurer.

How we use it

  • To run the portal: store your pets' records, prepare claim forms, and show your plan and payments.
  • To send a claim to your insurer — only when you submit one, and only the claim and the records you attach to it.
  • To process payments you choose to make, and your subscription.
  • To keep the service secure, prevent fraud and abuse, and meet legal obligations.

We do not sell your personal information, and we do not use your pet's records or your claims for advertising.

Who it is shared with

  • Your insurance company — when you submit a claim, we send it and the records you attached. You authorize each submission with your signature.
  • A veterinary hospital connected to your account — only what the permissions you grant allow (see below).
  • Service providers who help us run the portal: our database, file-storage and hosting providers (Supabase, Vercel), our payment processor (Stripe), and our email provider (for sending claims). They may only use your information to provide their service to us.
  • Authorities or other parties when required by law, or to protect safety and rights.

Your permissions

You choose what is shared, and you can change your mind at any time in Settings → Privacy & sharing:

  • Coordinator access — lets a connected hospital's financial coordinator see your estimates, payments, and records.
  • Network sharing and records search — let other FYNvet hospitals find that your pet has records (limited details only) so you aren't asked to repeat information.
  • Claim filing — lets FYNvet transmit claims you submit to your insurer on your behalf.

Every permission change is recorded with the date and the version of these terms in effect, and you can see that history in Settings. Turning a permission off stops future sharing; it can't recall information already sent to an insurer or hospital.

Your pet's health records and HIPAA

Pet medical records are not human health information. FYNvet is not a "covered entity" or "business associate" under the U.S. Health Insurance Portability and Accountability Act (HIPAA), and HIPAA does not govern pet records or pet insurance.

We nonetheless treat these records as sensitive. We use access controls so only you (and anyone you permit) can see them, store uploaded files privately, encrypt data in transit and at rest through our providers, log sharing, and let you export or delete everything. Some states also have rules on veterinary confidentiality and consumer privacy that apply to this information, and we aim to meet them.

Your rights and choices

  • Access and download: Settings → Privacy & sharing → Download my data gives you a copy of what we hold.
  • Correct: you can edit your profile, pets, policies, and records at any time.
  • Delete: Settings → Privacy & sharing → Delete my account removes your account, pets, records, files, policies, and claims. A short-lived record of payments may be retained where tax or fraud-prevention law requires.
  • Ask us: use the contact address below for any other request, including questions about what we've shared.

Depending on where you live (for example California), you may have additional legal rights over your personal information; we honor them.

How long we keep it

We keep your information while your account is open. When you delete your account we delete your pets, records, files, policies, and claims promptly. Backups are overwritten on a rolling schedule. Records of sharing with insurers may be kept in de-identified form for security auditing.

Security

We use reasonable, industry-standard safeguards: encrypted connections, private file storage with expiring download links, database rules that isolate each parent's data, separate protections for payments (handled by Stripe), and logging of sharing. No system is perfectly secure, so we can't guarantee absolute security. If we learn of a breach affecting your information we will notify you as required by law.

Children

The portal is for adults (18+). We do not knowingly collect information from children.

Changes

If we make a material change we will update the version above and ask you to review and accept it the next time you use the portal.

Questions or privacy requests: [privacy contact email — set NEXT_PUBLIC_SUPPORT_EMAIL before launch]