Privacy policy

1. Who we are

Canguru is software for veterinary clinics and an app for pet owners (my.canguru.ge). In this policy the clinics that use Canguru are called “Canguru clinics”.

Canguru is responsible for your account and what you enter in the app. Each clinic is responsible for the medical records it makes while treating your pet — Canguru keeps and processes those records on that clinic’s behalf.

2. What we process

Only what the service needs:

• About you: your name, username, email, mobile number, a second phone, city and language — what you enter or confirm yourself.
• Signing in: your password — only in hashed form, so that not even we can read it; if you use Google or Apple, that account’s identifier and email.
• About your pets: name, species, breed, sex, date of birth, colour, microchip number, allergies, weight and the notes you add.
• Clinic records: when you link your account to records clinics already hold, you see in the app what they published about your pets — visits, vaccinations, prescriptions, reviewed results and weights.
• Messages: what a clinic or Canguru sent you, and when.
• Technical: your IP address and one-time codes (stored only in hashed form), to stop abuse. Codes are deleted after 30 days.

3. How we keep your and your pets’ data safe

Safety is how the system is built, not an add-on:

• Every connection is encrypted (HTTPS). Your session lives in a protected cookie that scripts on the page cannot read.
• Passwords are stored hashed and cannot be recovered from what we keep; five wrong tries lock signing in for 15 minutes. Sign-in codes are stored hashed, expire after 10 minutes and are blocked after a few wrong tries.
• Each clinic’s records are kept in a database of their own. One clinic never sees another clinic’s internal information — prices, stock, staff, a vet’s internal notes.
• Clinic staff see only what their role allows them to.
• A pet you add is invisible to clinics: it cannot be found by phone number, microchip or QR tag until you share it.
• Backups are encrypted and kept on a separate server, so your data is not lost.
• When we record an error we keep only an account number — never a name, a phone number or medical information.

4. Sharing with Canguru clinics — only with your consent

A main purpose of Canguru is that your pet’s history can follow it from clinic to clinic. That happens only when you allow it. By using the app and switching sharing on, you consent to the data you choose being passed to the Canguru clinics you choose:

• With a particular clinic: switch on “Can see my details and pets” in the app.
• When a clinic asks: staff at the desk can ask you for access — “Allow” or “Deny” appears in the app; until you allow it, the clinic sees nothing.
• With every Canguru clinic: if you switch on “Any Canguru clinic may find me by my phone number”, a clinic you visit for the first time can find you at the desk. This is off unless you turn it on.
• Per pet: “Share this pet’s record with my other clinics”.

With your consent a clinic sees: your contact details, your pets, the allergies you reported and — for a pet whose record you share — what other clinics published. A clinic never sees another clinic’s prices, invoices or internal notes.

You can withdraw consent at any time, with one tap. The clinic then stops seeing your new changes and other clinics’ records. What that clinic recorded itself during your visits is its medical record and, as the law requires, stays with it.

Every consent and every withdrawal is kept with its date and the clinic it concerns — so it is always clear who was allowed to see what, and when.

5. Finding what clinics recorded — “Is this you?”

If a clinic already has you as a client, the app offers its records only after you prove by SMS code that the phone number is yours. Before you confirm we show only the clinic’s name and your pets’ names. The records are linked to your account only after you answer “Yes, that’s me”; if you answer “No”, nothing changes. Saying yes also lets the clinics that keep those records see the changes you make in the app — they already have you as a client — and you can switch that off for each of them.

What you enter counts as unconfirmed until a member of clinic staff confirms it. Your change never silently replaces a record a clinic confirmed — it waits for the clinic.

6. Who processes data on our behalf

Only the providers the service cannot run without, and only as much as their task needs:

• SMS delivery — sender.ge (the phone number and the message).
• Email delivery — canguru.ge’s mail server.
• The server your data is stored on, and the server that holds the backups.
• Google and Apple — only when you sign in with them.

We do not sell data or give it to anyone for advertising. We pass data to a public authority only where the law requires it.

7. Cookies

One essential cookie that keeps you signed in. No tracking, analytics or advertising cookies.

8. How long we keep it

As long as you have an account. You can delete it from the app at any time: the account, your sign-in methods, your consents, your messages and the pets only you added are deleted. Backups age out within 60 days.

A clinic’s records are its medical records — deleting your account unlinks them from you, but they stay with the clinic.

9. Your rights

Under the Law of Georgia on Personal Data Protection you have the right to:

• know what data we process and receive a copy;
• have wrong data corrected;
• have your data and your account deleted;
• withdraw consent at any time;
• complain to the Personal Data Protection Service of Georgia.

You change or delete most of it yourself in the app. For the rest, write to info@canguru.ge — we answer within 10 working days.

10. Children

A Canguru account is for people aged 18 or over. A minor’s pet is registered by a parent or guardian.

11. Changes and contact

We will tell you in the app before any significant change. If a change concerns sharing your data, we will ask for your consent again.

Questions, requests and complaints: info@canguru.ge.