Bureau des Truffes — Records

Privacy Policy

Truffe is a health-tracking app for dogs and cats, paired with an NFC medallion that helps identify a lost pet. This policy sets out precisely which data we process, why, for how long, and with whom it is shared.

It applies to the Truffe mobile app, the truffe.pro website and the public medallion-scan portal.

1. Data controller

Ruben Sà Coelho
Chemin du Chasseron 3 B
1004 Lausanne, Switzerland
Contact: hello@truffe.pro

We are established in Switzerland. Processing is governed by the Federal Act on Data Protection (revised FADP) and, for persons located in the European Union, by the General Data Protection Regulation (GDPR).

2. Data we process

Account and profile

E-mail address and password (stored as a one-way hash, never in plain text), or your Apple identifier if you use “Sign in with Apple”. Display name, profile photo, language, friend code. Your approximate location if you enable proximity alerts, together with the notification radius you choose.

Your pet's profile

Name, species, breed, sex, date of birth, weight, colour, photo, microchip number, NFC medallion identifier. Medical notes, allergies, your veterinarian's contact details, emergency contacts, feeding instructions and notes for the pet-sitter.

Your pet's health data

Vaccinations and due dates, weight history, treatment reminders (dewormers, antiparasitics), body condition checks, computed health indicators and weekly summaries. This data concerns your pet, not you.

Location

This is the most sensitive category, so we detail it:

• Walk tracks — when you start a walk, the app records the sequence of GPS points covered, the distance, the duration and the average speed. Only while the app is open in the foreground: we do not request any background location access.
• Lost pet alert — the position you report as the last known location, and the broadcast radius you choose.
• Sighting reports — if you report having seen a pet that is being searched for, the position of the sighting, rounded before being shared.
• User location — if you enable proximity alerts, an approximate position is used to determine whether an alert concerns you. It is never shown to other users.
• Medallion scans — when a third party scans your pet's medallion, the scan location may be recorded, rounded to roughly one kilometre, and passed on to you. The scanner's full IP address is not retained.

Content and social features

Posts, photos, comments, “likes”, friend list, private messages, messages exchanged about an alert, meet-ups between pets, participation in challenges.

Usage and technical data

Your device's push notification token, log of notifications sent, in-app usage events (screens viewed, actions performed) and crash reports.

Subscription

Status of your Truffe+ subscription, start and end dates, transaction identifier. We never see your payment method: the purchase is processed by Apple, which passes on neither your card number nor your bank details to us.

3. Why we process this data

4. What we do not do

• We do not sell any data.
• We do not use any data for targeted advertising, and we do not engage in any cross-app advertising tracking.
• We do not request background location access.
• We do not disclose your precise location to other users.

5. What others can see

Some features deliberately make information public. You remain in control:

• NFC scan portal — when a third party scans the medallion, they see the pet's name and photo, and a way to contact you without your phone number being revealed, unless you choose to display it.
• Lost pet alert — the pet's name, photo and description and the search area are broadcast to users located within the chosen radius.
• Public pet profile — disabled by default. If you enable it, you choose field by field what is visible.
• Social feed — your posts are visible to your friends, or to everyone if you choose “public”.
• Temporary access — pet-sitter and veterinarian links grant time-limited access, which you can revoke at any time.

6. Processors

Transfers outside Switzerland and the European Union are governed by the European Commission's Standard Contractual Clauses and the equivalent safeguards recognised by the Swiss Federal Data Protection and Information Commissioner.

7. Retention periods

These periods are enforced automatically: a task runs every night and permanently deletes data that has reached the end of its retention period.

8. Automated processing

Truffe automatically computes certain elements, without human intervention:

• Health score and signals — from the data you enter (weight, meals, walks, reminders), the app computes a weekly indicator and flags changes that deserve your attention, for example an unusual weight variation.
• Predictive alerts — a simple statistical projection, by linear regression over your pet's weigh-ins from the last four months, estimates its weight trend. No language model is involved.
• Contextual alerts — heatwaves, ticks, toxic foods: triggered by fixed rules combining the weather, the season and your pet's profile.
• Summaries and insights — periodic summaries of your activity.

This processing concerns your pet's health and has no legal effect on you. It conditions neither access to the service nor its price. These are indications, never a diagnosis: the decision remains yours, together with your veterinarian. You may ask us to explain the logic applied, contest a result, and disable the corresponding notifications in the settings.

9. Your rights

You may at any time request access to your data, its rectification, its erasure, its portability in a machine-readable format, the restriction of processing, or object to processing based on our legitimate interest.

Two of these rights can be exercised directly in the app, without writing to us:

• Export your data — Profile tab, My data section.
• Delete your account — Profile tab, My data section, “Delete my account” button. Deletion is permanent and erases all associated data.

For any other request: hello@truffe.pro. We respond within 30 days.

You may also lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC, Switzerland), or with the supervisory authority of your country of residence in the European Union.

10. Children

Truffe's content is suitable for all ages, but opening an account requires the ability to give valid consent to the processing of one's data. In Switzerland, this requires the capacity of judgement; in the European Union, the age of digital consent varies from 13 to 16 depending on the country. A minor below that age must use Truffe under a parent's account, through the Household feature.

We do not knowingly collect data from a child below that age. If you believe this has happened, write to us and we will delete it.

11. Security

Data is encrypted in transit. Access to data is segregated per user at the database level. Session tokens are stored in your device's secure keychain, not in ordinary storage. As no system is infallible, we will notify any breach presenting a risk: to the Federal Commissioner as soon as possible (FADP art. 24), to the competent European authority within 72 hours (GDPR art. 33), and directly to you if the risk to your rights is high.

12. Changes

Any substantial change will be announced in the app before it takes effect. The version date appears at the top of this document.

Truffe — truffe.pro · Terms of Use · Version française · Versión en español · hello@truffe.pro