The GDPR establishes the global standard for user data rights. Pawscription exceeds it by design: we cannot violate your data rights because we never have access to your data.
Privacy by Design (GDPR Art. 25)
Article 25 of the GDPR requires that systems include data protection from the ground up. Pawscription takes this further: instead of collecting data and protecting it, we eliminated the server entirely. Your data is never transmitted — it exists solely on your device, protected by database-level encryption (SQLite3 Multiple Ciphers) whose key is stored in the system's key store: on Android, wrapped with an AES-GCM key from the Android Keystore (with StrongBox where the device supports it); on iOS, directly in the Keychain with this-device-only protection.
There is no cloud sync, no backend, no user account system. The app is fully functional with no internet connection.
Exercising Your Rights
Because we hold no personal data, GDPR rights are exercised directly and autonomously without contacting us:
- Right of Access (Art. 15): All your data is visible and directly accessible within the app, on your device.
- Right to Portability (Art. 20): Export and import your data in a structured, machine-readable format (JSON) from Settings.
- Right to Erasure (Art. 17): Use Settings › Delete All Data for complete, irrecoverable deletion of your local database.
- Right to Object (Art. 21): Not applicable — we process no personal data.
Sub-processors
None. Pawscription uses no third-party data processors. No analytics services, no crash reporting, no cloud storage providers, no advertising networks.
The only external services involved in running Pawscription are Google Play and Apple App Store for app distribution. These platforms handle your device's app installation independently and are governed by their own privacy policies.
This website, which is separate from the app, is served from Vercel (USA, under EU→US Standard Contractual Clauses) and Hostinger (Lithuania, EU). They process web access logs only, for 30 days at most, and never receive anything entered in the app.
Contact
Given the zero-data nature of Pawscription, we are not required to designate a formal Data Protection Officer. For any GDPR-related questions: contact@pawscriptionapp.com