Privacy Policy, Carobi

Last updated: 10 June 2026 · Effective: 10 June 2026

Carobi ("Carobi", "we", "us") helps you record your pet's medication, food, water and toileting, send on-device reminders, and optionally share that record with people you invite. This policy explains what we collect, why, the legal basis, and your rights.

Who we are (data controller)

Carobi is provided by James Horsman (sole proprietor), trading as Carobi, FDRK0910, Compass Building, Al Shohada Road, Al Hamra Industrial Zone-FZ, Ras Al Khaimah, United Arab Emirates. Privacy contact: info@manasoftware.info.

We are the data controller for the personal data below.

What we collect

• Account info: your email address and password (passwords are stored only as a salted hash, we never see them).
• Pet records you create: pet name, pet icon or photo; medicines (name, dose, optional medicine photo) and schedules; and the entries you log, medication doses, food, water, pee and poo, each with its time and the display name of the account that logged it.
• Shared-pet data: if you invite someone (or join via a code), the pet's records, including each member's display name and the times they log, are visible to all members of that pet.
• Technical data: basic server logs needed to run and secure the service (which may include your IP address and request times).

We do not collect your location or contacts, do not use advertising identifiers, cookies or third-party tracking SDKs, and do not use App Tracking Transparency tracking.

Medical records stay on your device

Documents you add under History → Records (photos/PDFs of vet notes, prescriptions, etc.) are stored only on your device. They are not uploaded to our servers, not shared with people you invite, and are removed if you delete the app, we never see them. This is separate from the pet icon and medicine photos above, which are stored in our backend as part of your synced records.

Our legal basis

We process your data primarily under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021, "PDPL"), on these bases:

• To provide the service (create your account; store and sync your records; deliver reminders; share with members you invite; manage your subscription), performance of our contract with you / your consent given by using the app.
• To keep the service secure, prevent abuse, troubleshoot, and keep minimal server logs, our legitimate interest in a safe, reliable service.

If you are in the EU/EEA or the UK: because we offer the app to you there, the EU GDPR / UK GDPR also apply to your data. The same processing is justified as performance of a contract (Art. 6(1)(b)) and our legitimate interests (Art. 6(1)(f)), and you have the GDPR rights described below.

We do not process special-category (sensitive) data about you. Pet medical information is data about your animal, not about you.

Where your data is stored & international transfers

Your account and care data is held in our backend (PocketBase) hosted on Railway in the EU (Netherlands). As a UAE-based controller, we transfer your data to that EU facility to provide the service; the EU provides a strong, recognised level of data protection. For EU/EEA and UK users, your data is stored within the EEA. Apple processes subscription payments under its own terms. If we ever host elsewhere we will update this policy and put an appropriate safeguard in place.

Who we share data with (sub-processors)

• Railway, hosting/infrastructure for our backend (EU region).
• Apple, App Store payment processing and subscription management, when you subscribe.

We have processing terms in place with our processors. We do not sell your data or share it for advertising. We otherwise disclose data only to people you invite to a pet, or where required by law.

How we protect your data

Passwords are stored hashed; data is transmitted over encrypted connections (HTTPS/TLS); access is restricted by per-user security rules; and the backend is access-controlled.

Data breaches

If a personal-data breach occurs we will assess it and, where required, notify the UAE Data Office and - for EU/EEA or UK users, the relevant supervisory authority, and notify you without undue delay where the risk to you is high.

How long we keep it

• Your account and care data: deleted within 30 days of you deleting your account.
• Backups: overwritten on a rolling 30-day cycle, so deleted data is gone from backups within 30 days.
• Server logs: kept for 90 days, then deleted.

When you delete your account we remove your account and personal data. Entries you added to a shared pet may remain as part of other members' records; where they do, your account/email is deleted and only the display name on past entries persists, to preserve the integrity of other members' records.

Sharing a pet with others

Invited members are separate account-holders who can see and add to the shared pet's records, and what they add stays in the shared record even if they later leave. Each member can exercise their own data rights with us. Only invite people you trust.

Your rights

You have the right to access, correct, delete, restrict or object to our processing of your personal data, and to data portability. To exercise any of these, email info@manasoftware.info; we respond within the period required by law. Under the UAE PDPL you may also complain to the UAE Data Office. If you are in the EU/EEA or UK, you may complain to your local data-protection authority (in the UK, the Information Commissioner's Office, ico.org.uk).

California residents: we do not "sell" or "share" your personal information for cross-context behavioural advertising as defined under the CCPA, and you may exercise access/deletion rights via the contact above.

Children

You must be 16 or over to create a Carobi account; the app is intended for people aged 16 and over caring for a pet. If we learn an account belongs to someone under 16, we will delete it.

Changes

We may update this policy; we'll change the "Last updated" date and, for significant changes, tell you in-app or by email.

Contact

info@manasoftware.info · James Horsman trading as Carobi, FDRK0910, Compass Building, Al Shohada Road, Al Hamra Industrial Zone-FZ, Ras Al Khaimah, United Arab Emirates.