🐾 VetCalc 日本語版

Privacy Policy

This Privacy Policy explains how VetCalc (the "App") handles information. By using the App you agree to the practices described below.

1. Operator

2. Information We Collect

As a rule, the App does not transmit your personal information or any identifier-bearing usage data to our servers. The only exceptions are optional features that transmit data solely when you explicitly use or enable them — DICOM transfer (Section 4), backup export (Section 5), Facility Sharing (Section 6), anonymous usage statistics (Section 7), and feedback submission (Section 2.5) — together with the license validity check on the desktop version (Mac / Windows), which sends only a portion of the license code (Section 8). The anonymous usage statistics are opt-in (off by default) and, even when enabled, never include device identifiers, user IDs, advertising IDs, or any of your calculations (see Section 7). The App displays no advertising and does not use advertising identifiers (IDFA / AAID). For the desktop version's (Mac / Windows) license check and update check, see Section 8.

2.1 Data Stored Locally on Your Device

The following information is saved in your device's localStorage and, except when you upload it via Facility Sharing (see Section 6), is not sent to our servers:

• Custom settings: drug concentrations, dose ranges, preset doses, home-screen favorites, language preference
• Saved CRI calculation cases and custom drugs
• Saved anesthesia protocols
• Crash Mode (emergency support, beta) session records and drug administration logs
• Anesthesia Record (beta) data (intra-operative events, vitals, imported monitor CSV data, etc.), except when you explicitly upload records via Facility Sharing (see Section 6)
• Urine Output Monitor (beta) records
• Saved WBC differential counts
• Current case information shared across screens (case ID and body weight)
• DICOM connection settings and the last patient information entered (see Section 4)
• Disclaimer acceptance timestamp
• VetCalc Pro (monthly subscription) and "Unlock Mac & Support" (one-time) purchase/subscription state (iOS / Android) and desktop license activation state (Mac / Windows)

2.2 Advertising (None)

The App displays no advertising. It does not use advertising identifiers (IDFA on iOS, AAID on Android), does not connect to any third-party ad network (such as Google AdMob), and does not collect or track any data for advertising purposes. Accordingly, no App Tracking Transparency (ATT) permission prompt is shown on iOS.

2.3 In-App Purchases (App Store / Google Play / RevenueCat)

To process, renew, and restore the "VetCalc Pro" auto-renewable subscription and the "Unlock Mac & Support" one-time purchase, transactions are handled through Apple's App Store, Google Play, and RevenueCat. These services may process:

• Purchase and subscription state for management, renewal, and restoration
• Linkage with your Apple ID or Google account (managed by the respective platform)

These services have their own privacy policies:

• Apple: https://www.apple.com/legal/privacy/
• Google: https://policies.google.com/privacy
• RevenueCat: https://www.revenuecat.com/privacy/

The desktop version (Mac / Windows) contains no in-app purchases. The desktop license code is generated within the iOS / Android app based on your purchase or subscription. The format and signature of the code are verified on-device, but in order to confirm that the subscription has not been cancelled or expired, the app sends a portion of the license code (the first 8 characters, used as an identifier) to our server when online (see Section 8).

2.4 Information We Do Not Collect

The App does not collect:

• Your name, address, phone number, or other personal identifiers (except the optional reply email address you may enter in the feedback form — see Section 2.5)
• Precise GPS location
• Usage history or analytics that identify you or your device (no identifier-bearing usage data is transmitted; the anonymous usage statistics are sent only when you opt in and never identify a user or device — see Section 7)
• Patient (animal) medical records — unless you voluntarily enter them as case identifiers or DICOM patient information; even then, the data stays on your device or is sent only to a destination you specify, and the Operator never receives it (see Sections 3 and 4)

2.5 Optional Feedback and Bug Reports

Only when you send feedback, we store its category and text, an optional reply email address, the open screen, app version, platform, and display language. We do not store device identifiers. We do not store your IP address itself; only an irreversible keyed hash (HMAC) of it is kept, solely for the rate-limit window used to prevent abuse. We use submissions only to reply and improve the App. Reply email addresses are deleted after 180 days; submission records, including text, are deleted after two years. Discord, Inc. (United States) is used to notify the Operator with the first 500 characters of the text, environment information, and whether a reply was requested. The email address itself is not sent to Discord. Only what is necessary for the notification is sent, and it is handled under Discord's terms of service and privacy policy. Please do not include personal or clinical information in the text.

3. Case Save and Recording Features

The App lets you save CRI calculation parameters and anesthesia protocols under a user-supplied case ID, and store Crash Mode session records (drug administration logs) and Urine Output Monitor records on your device. Note that:

• Do not include any personally identifiable information of the animal owner or the animal in case IDs — we recommend internal clinic reference numbers.
• Data is stored on the local device and is not sent to the Operator, except when you upload it using facility sharing (see §6).
• Uninstalling the App deletes all saved data.
• You can delete individual records from within the App.

4. DICOM Transfer Feature

The DICOM transfer feature (beta) lets you send user-selected images, together with patient information you enter (case number, patient name, date of birth), to a DICOM server (PACS) on your own clinic network that you configure yourself.

• Images are sent only to the server you specify; the Operator never receives or has access to any images or patient information.
• Transfers occur only upon your explicit action.
• Connection settings and the last patient information entered are stored only on your device for convenience.
• You and your facility are responsible for the security of your clinic network and for how patient information is managed on the receiving server. We recommend using internal reference numbers rather than personally identifying names.

5. Backup (Export / Import)

The App can export the locally stored data described in Section 2.1 as a JSON file and import it on another device.

• Exports occur only upon your action; the file is never sent to the Operator.
• The exported file contains your case IDs and records. You are responsible for choosing and managing where the file is stored (cloud storage, email, etc.).

6. Facility Sharing Feature

Facility Sharing is an optional (opt-in) feature that lets members of the same clinic share anesthesia protocols, CRI sheets (drug settings only), anesthesia records (beta), and procedure preset lists by signing in with a facility ID and passphrase. Unless you explicitly use this feature, it transmits no data off your device. In addition to manual uploads, an auto-sync option can exchange the above data with the shared shelf automatically; auto-sync is also off by default and runs only after you explicitly enable it from the Settings menu.

• Data stored on the server: the facility ID, an irreversible (one-way) hash of the passphrase (the plaintext passphrase is never stored), the uploaded anesthesia protocol / CRI sheet data (configuration values such as drug names, doses, and concentrations), the uploaded anesthesia record data (sheet ID, procedure, intra-operative events, vital entries, etc.; raw monitor CSV data is not included), the uploaded procedure preset list (procedure names and their order), and the last-updated timestamp and device type.
• Data not stored: personal information such as patient or owner names, location data, and device identifiers. Do not include any personal information in shared data — we recommend internal clinic reference numbers.
• Where data is stored: on cloud infrastructure operated by Cloudflare, Inc. under contract with the Operator. Data may be stored on servers outside Japan and outside your country of residence.
• Purpose of use: solely to provide data sharing within the same facility. The data is never provided to third parties or used for advertising or analytics.
• Retention and deletion: data is retained until the facility account is deleted. You can permanently delete all server-side data from within the App via "Facility Sharing → Delete facility account".
• Transport security: all communication is encrypted with TLS.

7. Opt-in Anonymous Usage Statistics

The App includes an anonymous usage statistics feature to help us understand which features are actually used and prioritize improvements. This feature is disabled (off) by default and operates only when you explicitly enable it from the settings menu. Every feature of the App works exactly the same if you keep it off.

• Information sent: the date, the app version, the platform (whether iOS / Android / Mac / Windows / Web), the display language (Japanese / English), the number of times each screen was opened per day, and the number of app launches. All of these are daily aggregate counts.
• Information not sent: no device identifier, user ID, advertising ID, or any other identifier; no calculations or input values; no case data; no patient or owner names; and no location data are ever sent.
• Country / region: your country or region is derived server-side at the time of transmission and stored only as part of the daily aggregate. The IP address itself is not stored: only an irreversible keyed hash of it is stored as a short-term rate-limit counter (abuse prevention); it cannot be converted back into your IP address and is not used for any other purpose.
• Where data is stored: like Facility Sharing (Section 6), the data is stored on cloud infrastructure operated by Cloudflare, Inc. under contract with the Operator, and may be stored on servers outside Japan and outside your country of residence.
• Form and retention: only daily aggregate counts that cannot identify an individual or device are stored, for a maximum of 26 months.
• Purpose: used solely to improve the App. The data is never provided to third parties or used for advertising.
• Opting out: you can turn this off at any time from the settings menu. When you turn it off, any not-yet-sent aggregate data on your device is deleted. Aggregate counts already sent are anonymous and cannot be tied to an individual or device, so individual deletion is not technically possible.

8. Desktop Version (Mac / Windows) — License Check and Auto-Update

8.1 Online License Status Check

The desktop version (Mac / Windows) checks your license status with our server at launch, in order to confirm that a VetCalc Pro subscription has not been cancelled or expired.

• What is sent: only the first 8 characters of the code body — that is, the license code with the leading "VCMC" prefix and separators removed — used as an identifier. The signature portion of the code and any device-identifying information are not sent
• Connection metadata: your IP address and the time of the request are processed by the server. The IP address is not stored as-is: an irreversible transformation (HMAC hash) of it is stored and used solely as a short-term request-rate-limit counter (abuse prevention). Once the limit window (one minute) has passed, the value is no longer counted against you; it cannot be converted back into your IP address and is not used for any other purpose
• What is not sent: no name, email address, Apple ID / Google Account, device identifier, calculation input, case data, or patient/owner information
• Where it is stored: on cloud infrastructure operated by Cloudflare, Inc. under contract with us, the same as the Facility Sharing feature (Section 6). Data may be stored on servers outside Japan
• Purpose: solely to verify license validity. It is never provided to third parties or used for advertising or analytics
• Offline behavior: if you are offline or the check fails, the app continues to work using on-device verification alone. The app is never disabled merely because the check could not be completed
• One-time purchase: codes issued through the "Unlock Mac version / Support development" one-time purchase are not subject to expiry

8.2 Auto-Update

The desktop version (Mac / Windows) connects to GitHub (a distribution service operated by GitHub, Inc.) at launch and periodically to check for updates. Connection metadata such as your IP address is sent to GitHub in the process, governed by the GitHub Privacy Statement. No user-entered data is transmitted during update checks.

9. California Residents — CCPA / CPRA

If you are a California resident, the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) grant you specific rights:

• Right to Know: You can request information about the categories and specific pieces of personal information we have collected about you.
• Right to Delete: You can request deletion of personal information we have collected from you, subject to legal exceptions.
• Right to Correct: You can request correction of inaccurate personal information.
• Right to Opt Out of Sale or Sharing: We do not sell or share personal information. The App contains no advertising and does not use advertising identifiers, so there is no cross-context behavioral advertising to opt out of.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of these rights.

Opt-in usage statistics contain no identifiers, are not linked to any individual or device, and therefore do not constitute personal information under the CCPA/CPRA.

To exercise these rights, contact us at spvetsurgeryns@scopyandport.com. We will verify your identity before responding.

Do Not Sell or Share My Personal Information: We do not sell or share personal information, and the App shows no advertising.

10. Children's Privacy — COPPA

The App is intended for licensed veterinary professionals and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will delete it promptly. Parents or guardians who believe their child has provided personal information should contact us at spvetsurgeryns@scopyandport.com.

11. European Union and United Kingdom Users — GDPR

If you are located in the European Economic Area (EEA) or the United Kingdom, the EU General Data Protection Regulation (GDPR) and the UK GDPR apply to the limited processing of personal data described in this Policy. The Operator (Section 1) is the data controller for that processing. As described in Section 2, the App is designed so that almost all data stays on your device; the server-side processing that does occur is minimal and avoids identifiers wherever technically possible.

11.1 Legal Bases (Article 6 GDPR)

• Consent (Art. 6(1)(a)) — the transmission of the opt-in anonymous usage statistics (Section 7). During transmission your IP address is processed to derive a country code; the IP address itself is not stored (see Section 7 and the rate limiting described under legitimate interests below), and the stored statistics are aggregate data containing no identifiers. You can withdraw consent at any time from the settings menu; withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Performance of a contract (Art. 6(1)(b)) — processing required to provide features you explicitly use: in-app purchases and subscription management (Section 2.3), Facility Sharing (Section 6), and the desktop license validity check that confirms your subscription is active (Section 8.1).
• Legitimate interests (Art. 6(1)(f)) — abuse-prevention request-rate limiting on the server endpoints (Sections 2.5, 6, 7, and 8.1): an irreversible keyed hash of your IP address is stored and used solely as a short-term rate-limit counter; it cannot be converted back into your IP address and is not used for any other purpose. This processes only the minimal connection metadata necessary to operate the service securely.

Feedback (Section 2.5): the legal basis for processing the text you choose to send, in order to answer you and improve the App, is legitimate interests (Art. 6(1)(f)); the optional reply email address is processed on the basis of your consent (Art. 6(1)(a)), given by entering it, and you can withdraw consent at any time by contacting us. Retention: reply email addresses are deleted after 180 days and the text and other submission records after two years. The Operator is notified through Discord, Inc. (United States) with the first 500 characters of the text, environment information, and whether a reply was requested; the email address is never sent to Discord. Only what is necessary for the notification is sent, under Discord's terms of service and privacy policy. You may contact us to request access or deletion.

11.2 Your Rights (Articles 15–21 GDPR)

You have the right to request access to, rectification or erasure of, and restriction of processing of your personal data, the right to data portability, the right to object to processing based on legitimate interests, and the right to withdraw consent at any time. To exercise these rights, contact us (Section 16). You also have the right to lodge a complaint with the data protection supervisory authority of your EU member state or, in the United Kingdom, with the Information Commissioner's Office (ICO).

Please note: most App data is stored only on your own device and never reaches the Operator — you can view, edit, export, and delete that data directly in the App. The stored usage-statistics aggregates contain no identifiers and are not, and cannot be, attributed to an identified or identifiable person; the Operator therefore treats them as anonymous information outside the material scope of the GDPR (Recital 26). In any event, to the extent such aggregates were considered personal data, the Operator is not in a position to identify any data subject from them, and Article 11(2) GDPR applies to requests under Articles 15–20; you can stop any future transmission at any time (Section 7). Facility Sharing data can be permanently deleted from within the App (Section 6).

11.3 International Data Transfers

The Operator is located in Japan, a country recognized by both the European Commission and the United Kingdom as providing an adequate level of data protection. Because the Operator is directly subject to the GDPR under Article 3(2) for the processing described in this Policy, your data is protected by this Policy and the GDPR itself. Recipients outside your country of residence are:

• Cloudflare, Inc. (United States) — hosts the server-side data described in Sections 2.5, 6, 7, and 8.1 as the Operator's processor. These transfers are safeguarded by the European Commission–approved Standard Contractual Clauses and, for transfers subject to the UK GDPR, the UK International Data Transfer Addendum, both incorporated in Cloudflare's Data Processing Addendum.
• Discord, Inc. (United States) — receives only the operator notification described in Section 2.5, limited to what is necessary for the notification (never the reply email address), and handled under Discord's terms of service and privacy policy.
• RevenueCat, Inc. (United States) — processes purchase and subscription state (Section 2.3) as the Operator's processor, under a Data Processing Agreement incorporating the Standard Contractual Clauses and the UK International Data Transfer Addendum.
• Apple and Google — process purchases and subscriptions as independent controllers under their own privacy policies (Section 2.3).
• GitHub, Inc. (United States) — the desktop auto-update check connects directly to GitHub, which acts as an independent controller for the connection metadata it receives (Section 8.2).

We will provide a copy of, or a reference to, the safeguards applicable to any transfer described here upon request (Section 16).

11.4 Retention, Automated Decision-Making, and Special Categories

• Retention: Facility Sharing data is retained until you delete the facility account (Section 6); anonymous usage aggregates are retained for up to 26 months (Section 7); feedback email addresses are deleted after 180 days and feedback text after two years (Section 2.5); hashed rate-limiting values are used only within their respective rate-limit windows (Sections 2.5, 6, 7, and 8.1) and serve no other purpose.
• Automated decision-making: the App performs no automated decision-making or profiling that produces legal or similarly significant effects (Article 22 GDPR).
• Special categories: the App does not knowingly process special categories of personal data. Clinical data you enter concerns animal patients; do not include personal data of animal owners in case IDs or shared data (Sections 3, 4, and 6).
• Providing data: you are never required to provide any personal data to use the App's core calculation features. Declining the optional features described in Sections 4–7 means only that those specific features are unavailable; the App is otherwise fully functional.

12. International Users

The App is offered or being made available for distribution in the United States, Canada, Australia, New Zealand, the member states of the European Union, and the United Kingdom. Information processed by Apple, Google, and RevenueCat (for in-app purchases), as well as data you upload via the optional Facility Sharing feature and any opt-in anonymous usage statistics you enable (both hosted on Cloudflare, Inc. infrastructure — see Sections 6 and 7), may be transferred to and processed in the United States or other countries where these providers operate. The App operator is based in Japan.

13. Limitation of Liability for Clinical Use

Calculations provided by the App are reference values only. Final clinical decisions, including any prescription or treatment, must be made by the attending licensed veterinarian based on the veterinarian's own judgment and authoritative sources. The operator is not liable for medical damages arising from use of the App. See the in-app disclaimer and the Terms of Service for full details.

14. Data Security

Aside from data you voluntarily upload via Facility Sharing (Section 6) or submit through feedback (Section 2.5), the App does not transmit user-entered data to our servers. Facility Sharing data is transmitted over TLS-encrypted connections, and passphrases are stored only as irreversible hashes. Device-local data is protected by the operating system's standard sandboxing. You are responsible for the physical security of your device, for any backup files you export, for keeping your facility passphrase confidential, and for the security of any network and DICOM server you configure for transfers.

15. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be announced in the App or on this page. Your continued use of the App after such changes constitutes acceptance of the revised policy.

16. Contact

Questions about this Privacy Policy? Reach us at spvetsurgeryns@scopyandport.com or via the contact form.