Privacy
Last updated 2026-09-13.
This is a plain-English summary written by the people who built AllPets. It's not legal advice, and it hasn't been reviewed by a lawyer.
AllPets isn't the business you booked with
AllPets is software a pet-care business uses to run its bookings, records and invoices. We're not a dog walker, boarder or pet sitter, we didn't provide the care, and we're not a party to the agreement between a business and its client. The business sets its own prices, its own cancellation and late-pickup policies, and its own client agreement — that's theirs to set, not ours. This page just covers how we handle the data that agreement runs on.
This data belongs to the business, not to us
A business's client and pet records — names, contact details, bookings, medical and behaviour notes, everything — belong to that business. AllPets holds it on the business's behalf so the software can run. We don't sell it, and we don't use it to market to anyone, on our own behalf or anyone else's.
What we store
For each business: their name, logo, rates and policies, and the owners and staff who sign in. For each business's clients: name, contact info, emergency contact, Instagram handle if given, and — only if they choose to give it — home access details for in-home visits. For each pet: name, breed, medical and behaviour notes, vaccine records, and a photo if one's on file. Bookings, invoices, payment records and signed agreements tie it together.
Where it lives, and for how long
Everything is stored in the United States, in a database only AllPets' servers can reach — there's no public API and no way for a client-side bug to expose it. A few things are cleaned up automatically on a schedule rather than kept forever:
- A booking request's original submitted details are wiped 90 days after the business has turned it into a booking.
- The text of messages and assistant questions and answers is purged after 30 days — we keep the fact that something was sent, not the content.
- A file uploaded partway through a request form that's never finished is deleted within 24 hours.
- If a business deletes its account, everything is permanently gone 30 days later (see Deletion below).
Home access details
A key location, gate code or alarm code a client gives for in-home visits is encrypted before it's stored, separately from the rest of that client's record. It's only decrypted to show it to the business's own owners and staff inside the app, and it's stripped out of every log, calendar entry, email, text and export it would otherwise appear in.
Who can see it
Only the owners and staff a business has invited can see that business's data — one business never sees another's. AllPets staff (John) don't look at it except to fix a bug that's been reported. There is no way for us to sign in as a business and use the app as them.
Google Calendar
If a business connects Google Calendar, AllPets asks Google only for permission to create and manage calendars it makes itself — never access to a calendar the business already had. Disconnecting removes that connection on our side and leaves the business's calendar untouched.
Who else touches it
We use a handful of services to run AllPets, and each only sees what it needs to do its job: Resend sends email on our behalf, Stripe handles card and bank payments if a business connects it, Google Calendar syncs bookings if a business connects it, and Anthropic's Claude answers questions asked through the in-app Ask assistant (never anything more than that conversation).
PostHog counts visits for us. It sees which pages get visited (including which business's page), which outside links get clicked, when someone starts signing a business up, and whether a booking request or signup went through — plus what any website gets from a visit, like the browser, device type and IP address. It never sees names, emails, phone numbers, pet details or messages, and it never sees the private links AllPets sends for invoices, agreements, booking requests, sign-in and team invites: the code in each link is removed before anything goes to PostHog.
We don't sell any of this to them, and each one handles what passes through it under its own terms.
Exporting or deleting your data
A business owner can go to Settings → Export everything for a full copy of everything the business has put in — every client, pet, booking, invoice and file — any time, no questions asked. Settings → Delete business starts a 30-day countdown; inside that window it can be undone by replying to the confirmation email. After 30 days everything is permanently deleted — client records, pet records, files, all of it — except invoices and payments, which we keep in anonymised form (no client name, email, phone or address attached) as tax records.
If you're a client of a business that uses AllPets and you'd like a copy of your own data, or to have it deleted, ask that business directly — it's their record and they can act on it right away. If you'd rather ask us, email us at the address below with the business's name and we'll pass it on and follow up.
Cookies
One cookie keeps an owner signed in. PostHog sets one more, and keeps a copy in your browser's storage: a random ID so we can count returning visitors without knowing who you are, a session ID, and the address of the first page you opened here with private link codes removed (plus which website sent you, if one did). It lasts a year. PostHog only ever receives those addresses with private link codes removed. We don't run ads.
Who runs AllPets
AllPets is a product of What We Do Collective, 4237 West 61st Street, Los Angeles, CA 90043.