Privacy Policy

1. Scope, responsibility and public contact

Canivio provides a private record for dog guardians and the people they authorize. The account holder controls the information added to a dog’s record and the access they grant.

Canivio’s owner is the privacy officer for the platform and can be reached publicly at postmaster@nethercore.dev.

2. Information we process

We process only the information needed to operate, protect and support the service.

• Account information, including name, email address, locale and security settings.
• Dog records, including identity, care, health, journal, reminders, documents and emergency information entered by the account holder.
• Access, sharing and audit information needed to enforce permissions and investigate account activity.
• Technical information required for security and reliability, such as session identifiers, request metadata and service logs that exclude email addresses, tokens, private paths and health data.

3. Purposes, consent and withdrawal

Information is used only for the purposes below. When consent is the appropriate basis, it can be withdrawn through Support or the public privacy channel; withdrawal may limit a function required to provide the service.

• Provide the record, reminders, exports, temporary shares and requested support.
• Authenticate users, prevent unauthorized access and maintain an audit trail.
• Operate subscriptions and send transactional messages when those features are used.
• Maintain, diagnose and improve the reliability and accessibility of Canivio.

4. Hosting, Law 25 and data residency

Canivio’s core application data is protected and hosted in Quebec, Canada.

Canivio is designed to support privacy practices required by Quebec’s Law 25, including clear purposes, controlled access, data correction, export and deletion mechanisms. Private documents remain outside the public web root. Account and dog access is isolated in the application and database. Encrypted secrets, opaque sessions and revocable shares add protection in depth.

5. Auxiliary services and transfers

A small number of providers support functions around the core application. They process only the information needed for their role and do not replace Canivio’s primary hosting in Quebec. Some may process limited technical metadata outside Quebec or Canada.

• Off-site backup copies are encrypted before transfer. The storage provider does not receive the Canivio decryption identity.
• Stripe processes checkout, subscription and payment information when a paid plan is selected. Canivio stores subscription references and status, not payment-card numbers.
• The transactional email provider processes the recipient address, message content and delivery metadata for verification, recovery, invitations, reminders and support replies.

6. Sharing and disclosure

Canivio does not sell personal information. Information is disclosed when the account holder invites a family member or caregiver, creates a temporary clinic share, asks us to use an auxiliary service, or when disclosure is required by law.

7. Retention, export and deletion

Information is kept while the account is active and as needed for security, backup rotation and legal obligations. Account holders can request a complete export and schedule account deletion from settings. Revoked shares stop granting access, and expired sessions and tokens are removed according to their lifecycle.

8. Access, correction, withdrawal and complaints

You can request access or correction, withdraw applicable consent, manage notifications and sharing, export the record, or request permitted deletion through Support or postmaster@nethercore.dev. You may complain to the privacy officer and then to Quebec’s Commission d’accès à l’information if the response is not satisfactory.

9. Privacy incidents

A confirmed privacy incident is assessed, contained and recorded. Affected people and authorities are notified when applicable legal thresholds require it. Canivio does not promise that an incident can never occur.