Privacy Policy

1. What we collect

When you use Huxley, we collect the following information:

• Account information — your email address and display name, used to identify your account and send you reminders.
• Pet profile data — names, species, breeds, dates of birth, and photos you add for your pets.
• Health records— vet visits, vaccines, medications, conditions, weight entries, and any other information you enter into your pet's timeline.
• Uploaded documents — PDF files and images you upload (such as vet records). These are stored and processed to auto-fill your timeline via AI.
• Usage data — basic logs such as when you log in or access a page, used for debugging and service reliability. We do not use third-party analytics trackers.

2. How we use your data

We use the information you provide solely to operate Huxley:

• To store and display your pet's health records
• To send reminder emails for upcoming vaccines or medications
• To generate shareable links and PDF summaries on your request
• To parse uploaded documents and suggest timeline entries
• To respond to contact messages you send us

We do not use your data for advertising, behavioral profiling, or any purpose unrelated to providing the service.

3. How your data is stored

Huxley is built on Supabase, an open-source backend platform. Your data is stored in Supabase's managed PostgreSQL database and file storage, hosted on AWS infrastructure in the United States. Supabase encrypts data at rest and in transit.

Uploaded documents (PDFs and images) are stored in Supabase Storage and are only accessible to you and people you explicitly invite to your pet's profile.

Share links you generate give read-only access to your pet's records. You can revoke these links at any time from your pet's profile.

4. We do not sell your data

We do not sell, rent, trade, or share your personal data or your pet's health records with third parties for commercial purposes — ever. We do not work with data brokers or advertising networks.

The only third-party services involved in running Huxley are:

• Supabase — database, authentication, and file storage
• Anthropic — AI document parsing (uploaded documents are sent to Claude's API to extract health record data; Anthropic's privacy policy governs their handling of API inputs)
• Vercel — application hosting and edge delivery
• Resend — transactional email delivery for reminders and confirmations

Each of these providers receives only the data necessary to perform their function.

5. Data retention

Your data is retained for as long as your account is active. If you request account deletion, we will delete your account, pet records, uploaded documents, and associated data within 30 days.

6. How to request deletion

To request deletion of your account and all associated data, contact us through the contact page. Include the email address associated with your account. We will confirm receipt and complete the deletion within 30 days.

Self-serve account deletion is on the roadmap and will be added to settings when available.

7. Cookies and local storage

Huxley uses cookies only to maintain your authenticated session (set by Supabase Auth). We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

8. Changes to this policy

We may update this policy from time to time. We'll post the updated version here with a new "Last updated" date. We will notify you by email if we make material changes that affect how we handle your data.

9. Contact

Questions about privacy? Reach us through the contact page.