Privacy Policy

Turtly (“Turtly,” “we,” “us,” or “our”) is a web application that helps you track care for your turtles and tortoises — feeding, weight, UVB lighting, habitat conditions, and health records. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have. By creating an account or using Turtly, you agree to this policy.

1. Information we collect

Account information

When you sign up, we collect your email address and a password (stored securely by our authentication provider — we never see your plaintext password). You may also add a display name, an avatar photo, your timezone, and notification preferences.

Pet and care data

The core of Turtly is the data you choose to record about your animals, which may include:

• Pet profiles — names, species, type (aquatic or land), and photos.
• Habitat details — temperatures, humidity, water quality, substrate, lighting.
• Feeding, maintenance, weight, and UVB logs.
• Health records — vet visits, medications, symptoms, and notes you enter.

This information is provided voluntarily by you and is used to power the app’s tracking, reminders, and history features.

Technical information

Like most web services, our hosting and infrastructure providers automatically process basic technical data needed to deliver the app — such as your IP address and browser type for security, request routing, and error logging. We use essential cookies to keep you signed in (see Cookies below).

2. How we use your information

• To provide, maintain, and improve the Turtly app and your account.
• To store and display the pet care records you create.
• To send the care reminders and weekly digests you’ve enabled (you control these in Settings, and can turn them off at any time).
• To send essential account and service messages (e.g. password resets, security notices).
• To keep the service secure, debug issues, and prevent abuse.

We do not sell your personal information, and we do not use your pet or health records for advertising.

3. How your data is stored and protected

Your data is stored in a managed PostgreSQL database and file storage provided by Supabase, and the app is hosted on Vercel. Access to your records is protected by row-level security so that you can only read and write your own data. We take reasonable technical and organizational measures to protect your information, but no method of transmission or storage is 100% secure.

4. Service providers (subprocessors)

We share data only with the providers we rely on to run Turtly:

• Supabase — database, authentication, and file storage for your account and pet records.
• Vercel — application hosting and content delivery.
• Resend — delivery of reminder, digest, and account emails to your address.

Each provider processes data only as needed to deliver its service. We may also disclose information if required by law or to protect the rights, safety, and security of Turtly and its users.

5. Your rights and choices

• Access & correction — you can view and edit your account and pet data at any time from within the app.
• Export — you can export your records (e.g. as CSV) from the app.
• Deletion — you can delete individual records, or request deletion of your entire account and associated data.
• Email preferences — you can enable or disable any reminder or digest in Settings.

Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA. To exercise any of these rights, contact us at [email protected].

6. Data retention

We keep your information for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within a reasonable period, except where we are required to retain it for legal or legitimate operational reasons.

7. Cookies

Turtly uses essential cookies to keep you signed in and maintain your session. These are required for the app to function. We do not use third-party advertising or cross-site tracking cookies.

8. Children’s privacy

Turtly is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal data, please contact us so we can remove it.

9. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we’ll revise the “Last updated” date above, and for material changes we’ll provide additional notice where appropriate.

10. Contact us

Questions about this policy or your data? Email us at [email protected].

This is a starter privacy policy provided for convenience and is not legal advice. Please have it reviewed by a qualified professional and confirm the [email protected] address is set up to receive mail before launch.