Privacy policy

Last updated: 28 October 2026

In short

Your pet plans and entries stay on your phone when you use the app purely locally. For technical notices the app retrieves a file from our server. In doing so the hosting provider processes, among other things, your IP address and the time. If you send a problem report, join shared care, open the page with the prices or use online features, further data is transmitted for that. We explain each of these below.
With an account and Premium, your pets’ data is transmitted over an encrypted connection and stored in a Google database in the European Union. Sign-in itself is also processed by Google in the USA.
The owner’s contact details stay on the device, unless you deliberately pass them on when sharing a pet.
There is no advertising and no tracking across apps or websites. We do not analyse how you use the app.
You can delete your account or your guest access yourself in the app at any time.

Controller

Patrick Gutsch, Klatschmohnweg 4, 38300 Wolfenbüttel, Germany. Email: support@fellbert.app.

No data protection officer has been appointed; the legal requirements for doing so are not met.

Visiting this website

This website (fellbert.app and fellbert.de) is delivered by Google (Firebase Hosting). With every request, Google processes the IP address, the time, the page requested, the browser identifier and the page you came from, and records this in logs. Google keeps these logs for 30 days by default.

From these logs we count how often each page was requested on each day and how often the buttons to the App Store and to Google Play were tapped. We also count how many of these requests came from our ads on Instagram and Facebook; we recognise this by an addition that Meta appends to the link. We do not read out the IP address, do not distinguish between people and do not create profiles. The website sets no cookies and contains no analytics scripts and no tracking.

Reviews and comments

If you review Fellbert in the App Store or on Google Play, or comment on a Fellbert post on Instagram, we retrieve the review or comment via the interfaces of Apple, Google and Meta in order to read it and reply to it. In doing so we process the name under which you published it, the text, the stars, the date and, where the provider supplies them, country or language and the app version. We receive an email to our mailbox about new entries.

The legal basis is our legitimate interest in reading and replying to public feedback (Art. 6(1)(f) GDPR). We store this information in a Google database in the European Union and delete it there after 90 days. The review or comment itself remains with Apple, Google or Meta until you delete it there.

Use without an account

By default, Fellbert processes everything solely on your device: pet profiles, feeding and medication plans, ticked-off doses, observations, weight, appointments and the contact details of owner and veterinary practice. This data is not transmitted to us or to third parties. We have no access to it.

Reminders are scheduled locally by the operating system. As long as you use no account, nothing leaves the device for this.

When opened, the app asks fellbert.app whether there is a notice from us to all users, for example that an update is required. This is the retrieval of a file, like opening a web page: our host (Google, Firebase Hosting) processes the IP address, the time and the usual technical details of such a request. The app does not send any information about your pets or your entries in the process. This happens at most once an hour, and also without an account.

If you send a problem report from the app or redeem an invitation code, the app creates guest access with Firebase for this: a random identifier without a name and without an email address. It is a pseudonym; your actions can be linked to one another through it. What is then transmitted is the report (your free text, device, app and system version, this identifier and, if you give one, an address for replies) or the code. The report reaches our mailbox as an email. We delete reports after 90 days.

If you help look after a pet as a guest, we store: your guest identifier, the name you give, your role and how long the share is valid, your phone’s address for notifications with its language, the app version and the time it was last updated, and what you enter for the pet. You do not need an email account for this.

If you open the page with the prices in the app, the app retrieves the prices from the purchase service RevenueCat. RevenueCat assigns a random identifier to this phone and processes technical details of the request, such as IP address, country and app version. As long as you do not open this page and have no account, the app does not contact the purchase service.

Account and synchronisation

If you create an account to keep several devices in sync or to share a pet with someone, we additionally process:

Email address and password for signing in. Firebase Authentication does not store the password in plain text but as a hash.
The data of the pets you synchronise: profile, plans, medication, daily logs, history, observations and appointments.
A photo of your pet, if you add one. It is saved in Cloud Storage and distributed to the people you share the pet with. Without an account it stays on your device. You can remove it at any time; deleting the pet or the account deletes it.
An address of your phone for push notifications, so your second phone learns that something was ticked off here. With it the phone’s language, the app version and the time the address was last updated. The owner of a pet sees the app version and this time for every person who helps look after it.
Your phone’s follow-up questions “Has anyone …?” for the next two days, for pets that sync: the time, which dose, and the finished text of the question with the pet’s name and, where relevant, the medication’s name. At the time of the question our server checks whether the dose has already been ticked off and only then sends it. Afterwards we delete it; a question that is no longer needed is replaced by your phone straight away.
Shares: which name an invited person gave when redeeming the code, what role they have and until when the share is valid.
When you look after a pet together, the people with access see your chosen name and when you ticked off an entry or answered a query about it. That is how you can tell your entries apart.
The status of your subscription, so Premium is unlocked. For this the purchase service RevenueCat receives your account’s identifier. When you subscribe we also record which version of the terms of use applied and when. We do not receive payment details, those stay with Apple or Google.

What stays on the device

The owner’s contact details, name, address, phone number and email, which appear as the letterhead of the vet report, are not synchronised. They stay on the device where you entered them, even if you use an account. The one exception: when sharing a pet you can deliberately pass them on, so that a report from a second phone carries your letterhead. They then travel with the invitation. The colour scheme and your confirmations of the notices likewise stay on the device.

Purposes and legal bases

Providing the account, guest access, synchronisation and shares, including attributing entries to the person who made them: performance of the contract, Art. 6(1)(b) GDPR.
Push notifications to your devices: performance of the contract, Art. 6(1)(b) GDPR; you also grant notification permission in the operating system.
Handling the subscription: performance of the contract, Art. 6(1)(b) GDPR.
Operational security, abuse prevention, debugging, retrieving the notice file and the record of which version of the terms applied when subscribing: legitimate interest, Art. 6(1)(f) GDPR.
Delivering this website and counting page requests per day and page: legitimate interest in secure operation and in knowing how many people the website reaches, Art. 6(1)(f) GDPR.

Service providers

We use the following service providers. Apple and Google are themselves responsible for purchases in their stores; the others process data on our behalf.

Google Ireland Limited, Dublin: Firebase Authentication (sign-in), Cloud Firestore (database), Cloud Storage (pet photos), Cloud Functions and Hosting. The database and the server functions are located in the European Union. Sign-in is also processed by Google in the USA; Google names the EU-US Data Privacy Framework and the European Commission’s standard contractual clauses as the basis.
Strato AG, Berlin: sending and receiving our emails, such as the confirmation link for your account, a problem report and our reply to it. It processes your email address and the content of the message.
650 Industries, Inc. (Expo), USA: delivery of push notifications, including the follow-up questions “Has anyone …?” sent by our server. The notification text contains the pet’s name, the occasion, e.g. “feeding” or a medication’s name, and the name of the person who ticked it off. The provider names the European Commission’s standard contractual clauses as the basis for the transfer.
Apple Inc. and Google LLC: delivery of notifications to the device and handling of purchases in the stores. The purchase, the payment and the data processed for them are governed by the privacy notices of the respective store.
RevenueCat, Inc., USA: retrieving prices, verifying and managing subscriptions. It processes a pseudonymous identifier (that of your account or, without an account, a random one for the phone), the purchase status and technical details of the request, no payment details. RevenueCat also provides us with aggregated figures on subscriptions. The provider names the standard contractual clauses as the basis for the transfer.

No advertising, no tracking

Fellbert contains no advertising networks and no tracking across apps or websites. We do not analyse how you use the app, create no profiles about you and sell no data. From the purchase service we receive aggregated figures on subscriptions, such as how many are currently running.

Retention and deletion

We store synchronised data for as long as your account exists and you use Fellbert Premium. If Premium ends, we keep the synchronised copy for 30 more days and delete it afterwards, at the latest 45 days after the end; the data on your devices remains. If you start Premium again before then, the copy is kept. If you delete a pet, its data and the associated shares are removed.

If you delete your account or your guest access, we delete: the sign-in, the data and photos of your own pets, your shares, the addresses of your phones for notifications and their registered follow-up questions, your invitations, your problem reports, the status of your subscription and your account with the purchase service. Your name next to ticks and answers for a pet that belongs to someone else remains part of that person’s records until they delete the pet or their account: they need it to trace who ticked off what and when.

Logs of our server functions contain an account’s identifier and the operation, not the pets’ contents. Google keeps them for 30 days by default. We delete invitation codes one day after they expire and problem reports after 90 days.

You can delete it in the app under Settings, without going through us. You may also request deletion via the “Delete account” page. Data that exists only on your device is deleted by removing the app. On Android the phone’s backup does not include the app’s data. On iPhone a device backup may contain the app’s data; you manage that in your iPhone’s settings.

Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). Please write to support@fellbert.app. We handle your request without undue delay and as a rule reply within one month. Should an extension permitted by law be necessary, we inform you within that month of the reason and the further period. You can also save your entries as a file yourself at any time, in the app under “Account and Premium”, even without a subscription.

You may also lodge a complaint with a supervisory authority; ours is the State Commissioner for Data Protection of Lower Saxony, Prinzenstraße 5, 30159 Hannover, Germany.

For users in Switzerland: where the Swiss Data Protection Act applies, the information in this policy applies accordingly. Your data is processed in the European Union and, with the providers named above, in the USA. For the USA these providers state that they rely on standard contractual clauses.

Children

Fellbert is aimed at adults. You may only use access as an owner or as an invited carer if you are of full legal age.

Changes

If the way Fellbert processes data changes, we update this policy and adjust the date above. We additionally announce material changes in the app.