Privacy Policy — Nurelio Pet

Last updated: October 3, 2026

This privacy policy describes which data is processed when you use the app Nurelio Pet (Android/iOS). Nurelio Pet helps you keep track of medications, food, appointments, walks and a journal for your pets — on your own or together with your family.

1. Controller

Helge Lange / PrettyLights Software. Contact: PrettyLightsSoftware@gmail.com. For full details, see the Imprint.

2. Overview

• Without an account, everything you enter stays in a database on your device. The only data transmitted is what the features listed in sections 7 to 12 need when you use them, plus anonymous usage counts (section 13).
• With an account and Premium, your pet data is transferred to our server so that all of your family's devices have the same data (section 5). This data is stored there without end-to-end encryption, in a form our server can read and distribute to your family's devices.
• We do not show ads, do not sell data and do not use any third-party analytics or tracking services. There is no crash or error reporting.

3. Data on your device

On your device, the app stores in particular: pets (name, species, breed, sex, date of birth, weight, microchip number, photo, notes), vets, medications with schedules and stock, doses given, appointments, food, weight history, walks with route, journal entries, the Family Cup, as well as your settings and your display name. You can delete this data in the app or remove it by uninstalling the app.

4. Account (optional)

You only need an account for Premium and the family. You create it with email and password or sign in with Google or Apple. For this, we store the following on our server (pet-api.nurelio.net):

• your email address, or the account identifier provided by Google or Apple (and email address, if shared),
• for email and password, a password hash (passwords are never stored in plain text),
• your display name (e.g. “Dad” — it doesn't have to be your real name),
• your Premium status (valid until, subscription status) and your membership in your family.

When you sign in with Google or Apple, the respective provider, after you consent, sends a sign-in token to the app, which our server verifies. Legal basis: Art. 6(1)(b) GDPR (providing the account).

5. Premium: device sync and family

With Premium, your data is synced between your devices and the devices of your family. For this, the app transfers the following content to our server and stores it there: pets, vets, bring-along lists, medications with schedules, doses given (with time and who gave them), stock movements, appointments, walks, food, weight entries, journal entries, the Family Cup and family-wide settings.

• Who sees what: The owner sees all pets in the family; every other member only sees the pets shared with them — with their medications, appointments, journal entries, photos and reminders. Appointments and walks with several pets show only that member's pets; for pets not shared with them, a member sees only the points in the Family Cup. Within the family, the display name and email address of each member are also visible. Invitations are made via a QR code or short code that expires after 10 minutes; joining must be approved by the owner of the family.
• Walk routes: When you start a walk, the app records the route via GPS while the app is open. The route is saved with the walk and, with Premium, transferred to the family. Please note that a route often starts at your own front door. To display maps, the app loads map tiles of the surrounding area from OpenStreetMap (section 10).
• Pet photos: Photos of your pets are uploaded to our server for the family. If you replace a photo or delete the pet, the server removes the old file within two days at the latest.
• Reminders via the server: So that reminders arrive even when the app isn't open on any device, one device in your family uploads the reminder schedule (times, responsible family members and the reminder texts including pet and medication names). Our server sends the reminders at the scheduled time and deletes sent entries after 30 days.
• Deletion: When you delete an entry, the server removes its content; only a deletion marker remains so that the other devices apply the deletion as well.

Legal basis: Art. 6(1)(b) GDPR (providing the feature you purchased).

6. Notifications (push)

If you allow notifications, the app schedules reminders on your device. With an account, it also registers a push token with our server. We store the token, the platform (iOS/Android), the app language (for the language of the reminders) and the link to your account. Delivery is handled by Google Firebase Cloud Messaging or Apple Push Notification service; these providers process the token and the content of the message in order to deliver it to your device. Push notifications are sent for reminders and family events (e.g. “dose given”, a reached team goal, replies to your feedback).

Legal basis: consent under Art. 6(1)(a) GDPR. You can withdraw it at any time in your device settings.

7. Purchases (Premium subscription)

Purchases are handled by the App Store (Apple) or Google Play. To manage subscriptions, we use RevenueCat (RevenueCat, Inc., USA). RevenueCat receives the identifier of your Nurelio Pet account, the store's purchase receipts and technical information about the device and store, and tells our server whether your Premium is active. Neither we nor RevenueCat receive payment details. Legal basis: Art. 6(1)(b) GDPR.

8. Backup to iCloud or Google Drive (optional)

You can back up your data to your own cloud storage: on iPhone to iCloud, on Android to a hidden folder in your Google Drive that only the app can access. The backup contains all data from section 3 and the identifier of the usage counts (section 13), so that a reinstall still counts as the same device. We have no access to this backup; storage is subject to the terms of Apple or Google.

9. Vet search

Location data is processed only if you use the vet search: either the app determines your device location at your request, or you enter a postal code or a place name.

• In Germany, the app converts your input into coordinates via the autocomplete API of vergleichen-und-sparen.de (vergleichen-und-sparen GmbH) and queries tierarzt-onlineverzeichnis.de for vets in the area. The public list of results (practice name, address, phone number, distance) is sent together with the postal code and search radius to our server, which processes it and keeps it in memory for 24 hours. No link to you or your device is stored.
• Outside Germany, or if there are no results, the app uses OpenStreetMap (section 10).
• If you tap “Directions”, the app opens your maps app with the destination address; from then on, that app's terms apply.

Legal basis: Art. 6(1)(b) GDPR (feature requested by you).

10. Maps (OpenStreetMap)

For the vet search and walk maps, the app uses services built around OpenStreetMap: Nominatim (address → coordinates) and the map tiles of the OpenStreetMap Foundation (United Kingdom), the practice search via Overpass (overpass-api.de, FOSSGIS e.V., Germany), and the map library Leaflet, which is loaded from unpkg.com. In the process, your IP address and the displayed map area are transmitted. Information from the OpenStreetMap Foundation: wiki.osmfoundation.org/wiki/Privacy_Policy.

11. Rate & feedback, “Our apps”

Under “About Nurelio Pet”, you can rate the app (stars per area and three free-text fields) and write to us. This is sent to our service api.prettylights.software and stored there with your account identifier, app version, platform and language, so that we can reply and you can see our reply in the app. The app also loads the list of our other apps from there (only the app language is transmitted for this). Legal basis: Art. 6(1)(b) GDPR.

12. App updates

On launch, the app asks api.prettylights.software whether a new version of its content is available and downloads it if so. Platform, technical version information and your IP address are transmitted. In addition, the app checks the App Store or Google Play for a newer version in the store; in doing so, Apple or Google receive the app's identifier and your IP address. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in an up-to-date, error-free app).

13. Anonymous usage counts

So that we can see where the app gets stuck and what it actually achieves, we keep aggregated counts of: which step the first-launch setup reaches, whether data was restored from a backup, whether the installation was active on a given day, how many doses were given and how many were missed, and how many appointment reminders became due.

Only a count per day is transmitted — never names, times or any other content. In addition, the platform, the app version with the identifier of the installed app update, and a randomly generated identifier are sent: not a device or advertising ID, and not your account identifier.

This identifier is not linked to your account. The counts are stored in a separate table with no link to any account, they are transmitted without signing in, and there is no way on the server side to attribute them to an account. From the daily counts, we also create permanent overall totals with no identifier at all.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in improving the app). You can object under Art. 21 GDPR at any time by email to PrettyLightsSoftware@gmail.com; you can find your identifier in the app at the bottom of “About Nurelio Pet”.

14. Permissions

• Notifications — for reminders and family events.
• Exact alarms (Android) — so that reminders arrive on time.
• Location — only while the app is in use: for the vet search and for recording walks.
• Camera — to scan the family's invitation QR code and to take photos.
• Photos — to choose a photo of your pet or of a food package.

15. Server location and recipients outside the EU

Our servers (pet-api.nurelio.net and api.prettylights.software) run on infrastructure in Germany (Strato). They do not keep access logs with IP addresses; the IP address is used only for the connection and briefly in memory to protect against overload. Data is processed outside the EU only where a service requires it: by Google (push delivery, sign-in, Google Drive, Google Play) and Apple (push delivery, sign-in, iCloud, App Store) and by RevenueCat (USA), each under their own privacy policies, and by the OpenStreetMap Foundation in the United Kingdom (EU adequacy decision).

16. Retention period

• Data on your device: until you delete it or remove the app.
• Account and synced data: until your account is deleted; deleted entries lose their content immediately (for the deletion marker, see section 5).
• Pet photos: until the pet, the photo or your account is deleted (old files within two days at the latest).
• Reminder schedule: entries are replaced the next time the schedule is uploaded; sent entries 30 days.
• Push tokens: until Apple or Google invalidate them or your account is deleted.
• Family invitation codes: 10 minutes.
• Ratings and feedback: until you have them deleted or delete your account.
• Vet result lists: 24 hours in memory.
• Anonymous usage counts: 180 days; the overall totals without an identifier are kept permanently.

17. Your rights and deleting your account

Under the GDPR, you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to object (Art. 21). You can also lodge a complaint with a data protection supervisory authority (Art. 77).

Delete your account: in the app under More → Premium → “Delete account”, or by email to PrettyLightsSoftware@gmail.com with the email address of your account (instructions: Delete your account). This deletes your account with all synced data, pet photos, push tokens and reminder schedules, as well as your ratings and your feedback. If you are the owner of a family, it is dissolved and its shared data is deleted; the other members keep the data on their devices. If you are a member, your entries (e.g. doses given with your display name) remain in the family's data until the owner deletes them. Please cancel any active subscription in the App Store or on Google Play. You manage the data on your device and your backup in iCloud or Google Drive yourself.

18. Changes

We update this privacy policy when the app or the legal situation changes. The current version published here applies.