The short version: Your pet's health records live on your iPhone. We have no servers, no accounts, no third-party analytics SDKs, no ads, and no cross-app tracking. The app emits Apple's own on-device OSLog and MetricKit signposts for paywall-flow diagnostics — these stay on your device unless you opt into Apple's system-wide diagnostic sharing. The only data that ever leaves your device is (1) optional household sync via your personal iCloud and (2) the questions you send from the Pro AI chat tab, together with a short summary of the pet you're asking about (name, species, breed, age, medication names, recent symptom notes, latest weight, last vet-visit date), which OpenAI's API processes to generate the answer. OpenAI may retain API data for up to 30 days for abuse monitoring; it is not used to train models and is never shared with us.
1. Overview
Sirrius ("the App") is a privacy-first pet health tracker for iPhone. It helps you manage pet profiles, health records, medication reminders, vet visits, vaccinations, weight tracking, symptom journals, and food safety checking.
Sirrius is not a veterinary tool. It does not diagnose conditions, provide medical advice, or replace professional veterinary guidance. Always consult your veterinarian for health concerns about your pet.
We (Kynoss Studios) operate no servers, databases, or cloud services ourselves. We do not create user accounts. We have no mechanism to collect, receive, view, or store your personal data. Your pet records live on your device (and, optionally, in your personal iCloud for household sharing). The Pro AI chat tab sends the text of your questions, plus a short summary of the pet you're asking about, through OpenAI's API for processing — this is described in detail in Section 3.
2. Pet Health Data
Sirrius stores the following types of data, all entered by you:
- Pet profiles: Name, species, breed, birthday, weight, photo
- Health records: Vet visits, vaccinations, medical notes
- Medications: Names, dosages, schedules, administration logs
- Symptom journal: Free-text symptom entries with dates and severity
- Feeding logs: Feeding times and amounts
- Weight history: Weight measurements over time
All data is entered manually by you. Sirrius does not access your camera roll, contacts, microphone, location, or any other device sensor. The only photo access is when you explicitly choose to add a pet profile photo.
3. AI Chat Processing
Your full records stay on your device — but Pro AI questions don't travel alone. When a Pro subscriber uses the AI chat, Sirrius sends your question together with a short summary of the pet you're asking about — including medication names, recent symptom notes, latest weight, and last vet-visit date — over HTTPS to OpenAI's API to generate the answer. OpenAI may retain API data for up to 30 days for abuse monitoring, then deletes it; it is not used to train models. We never see any of it — we have no servers.
What the AI chat sends to OpenAI
When a Pro subscriber sends a message in the Chat tab, Sirrius calls OpenAI's API (the gpt-4o-mini model) directly over HTTPS. The request contains:
- The exact text of your question (for example, "Can Luna have grapes?" or "Summarize Mochi's recent symptoms").
- A pet context summary assembled on your device at request time. For each pet it includes: name, species, breed, age, active medication names (up to 5), recent symptom notes (entries from the last 30 days, up to 3), latest weight, and last vet-visit date. This is a compact summary built fresh for each request — not your full record — but it does include health details you have saved about your pet.
- Recent turns of your in-app conversation so multi-turn answers stay coherent. These turns live only in memory during the session and are not persisted anywhere by us.
The Symptom Pattern Analysis feature (Pro) additionally sends up to 20 of the selected pet's symptom journal entries — their text, dates, and severity levels — to OpenAI to summarize patterns over time.
Requests do not contain your photos, full vet-visit notes, feeding logs, or any information about you: no name, email, account, device identifier, or advertising identifier is ever sent.
What OpenAI does with your queries
OpenAI is used as a processor under its standard API terms. Per those terms, API requests are not used to train OpenAI's models and are not retained for training. OpenAI's privacy practices are described at openai.com/policies/privacy-policy.
OpenAI may transiently retain API request data for abuse monitoring for up to 30 days before deletion. Sirrius does not pass any account, device, user, or advertising identifier to OpenAI — requests are authenticated with the app's developer API key, not a per-user identifier, so individual users are not identifiable at the OpenAI layer.
Free tier
The free tier of Sirrius does not call the OpenAI API at all. Free users' chat messages are handled entirely on-device by keyword matching and the local food safety database. If you never subscribe to Pro, no text you type in Sirrius ever leaves your device.
Food & plant safety checker
The food and plant safety checker works for all users — free and Pro — and runs entirely offline against a curated local database bundled with the app. Food safety queries never leave your device.
Stored records and journals
Your symptom journal entries, vet records, medications, weights, photos, and pet profiles remain in local storage (plus iCloud if you enable household sharing). The only parts that are ever transmitted are the per-request summaries described above — sent to OpenAI when you, as a Pro subscriber, use the AI chat or Symptom Pattern Analysis. Your photos and complete record history are never transmitted, and nothing is ever sent to any server we operate — we have none.
Disabling AI entirely
To stop all AI API calls, simply don't subscribe to Pro, or cancel an existing Pro subscription. The app remains fully functional for record-keeping, safety checks, reminders, and household sharing without any subscription.
4. iCloud & Household Sharing
Sirrius offers optional household sharing so family members can view and update the same pet records.
- Sharing uses Apple's CloudKit (CKShare) framework. Data syncs through your personal iCloud account, not through our servers.
- You control who has access. Only people you explicitly invite can see your pet data.
- Shared data is encrypted in transit and at rest by Apple's iCloud infrastructure.
- We have no access to your iCloud data. CloudKit sharing is a direct peer-to-peer connection between iCloud accounts managed by Apple.
- User preferences (display settings, notification preferences) are stored privately and never shared.
Household sharing is entirely optional. Sirrius works fully as a single-user app without iCloud.
5. Data Storage
All data is stored locally on your iPhone. We have no servers, no cloud infrastructure, no databases, and no backend of any kind. We literally cannot access your data because we have no system to receive it.
Data is stored using Apple's Core Data framework, protected by:
- iOS Data Protection (encrypted at rest, tied to your device passcode)
- App sandboxing (only Sirrius can access its own data)
- Standard iOS security architecture
Sirrius does not use:
- Any third-party SDKs, frameworks, or libraries
- Analytics services (no Firebase, no Mixpanel, no Amplitude)
- Advertising SDKs or ad networks
- Crash reporting services
- Any form of user tracking or fingerprinting
6. Data Retention & Deletion
- Delete the app: Deleting Sirrius permanently removes all local data. No data exists anywhere else (unless you enabled household sharing, in which case shared records remain in iCloud for other household members).
- In-app management: You can delete individual pets, records, or entries at any time within the app.
- There is no server-side data to delete, no account to close, and no request process needed.
7. Data Sharing & Third Parties
We do not sell your data, share your data with advertisers, or use any analytics, tracking, or advertising SDKs. Two narrowly-scoped third parties are involved, and only at your explicit opt-in:
- Apple iCloud (optional): If you enable household sharing, your pet records sync through your own iCloud account via Apple's CloudKit framework. This is a peer-to-peer connection between iCloud accounts managed by Apple — we have no access. Governed by Apple's Privacy Policy.
- OpenAI (Pro AI features only): If you subscribe to Sirrius Pro and use the AI Chat tab or Symptom Pattern Analysis, the text of your messages plus a pet context summary (name, species, breed, age, medication names, recent symptom notes, latest weight, last vet-visit date) is sent over HTTPS to OpenAI's API for processing. OpenAI may retain API data for up to 30 days for abuse monitoring, then deletes it; it does not train on API data. See Section 3 for the exact scope of what is sent. Governed by OpenAI's Privacy Policy.
- We do not sell your data.
- We do not share your data with advertisers or data brokers.
- We do not use third-party SDKs that could collect data.
- We do not serve advertisements.
- We do not engage in data mining or profiling.
- We never transmit your photos or your complete record history to any third party. The only stored-data excerpts that ever leave your device are the Pro AI summaries described in Section 3, sent to OpenAI solely to answer the question you asked.
8. Data Security
- Encryption at rest: All local data is protected by iOS Data Protection.
- App sandboxing: iOS prevents other apps from accessing Sirrius's data.
- Minimal network exposure: The app's only network traffic is optional iCloud sync (encrypted end-to-end by Apple) and the Pro AI requests to OpenAI described in Section 3 (sent over HTTPS).
- No accounts: No credentials to steal, no passwords to breach.
9. Children's Privacy (COPPA)
Sirrius is not directed at children under 13. We do not knowingly collect personal information from children. Sirrius collects no personal information about any user — the only transmission is the pet-related Pro AI content described in Section 3, which contains no information about the person using the app — so it does not create the data collection risks COPPA addresses.
If you are a parent or guardian with concerns, contact us at kynossstudios@gmail.com.
10. Your Rights Under GDPR
If you are in the European Economic Area, the GDPR provides you with specific rights. Because your data never reaches us, you have full control:
- Access: All data is on your device and accessible within the app.
- Rectification: Edit any record within the app.
- Erasure: Delete individual records or the entire app.
- Restrict processing: Disable household sharing or AI features at any time.
- Portability: Your data is stored locally on your device.
- Object: Stop all processing by deleting the app.
The only cross-border transfer that can occur is the Pro AI request content described in Section 3, processed by OpenAI (a U.S. processor) and retained at most 30 days. No other data is transmitted to any server.
11. Your Rights Under CCPA/CPRA
If you are a California resident:
- Right to know: This policy describes all data the app processes.
- Right to delete: Delete the app or individual records.
- Right to opt out of sale: We do not sell your personal information. Never have, never will.
- Right to non-discrimination: We will not discriminate against you for exercising privacy rights.
12. Apple Platform Disclosures
App Privacy Nutrition Label
Sirrius's App Store privacy label discloses the Pro AI feature under Apple's App Privacy definitions as User Content — collected for App Functionality only, Not Linked to Your Identity: the chat messages and pet summaries described in Section 3 are processed by OpenAI, which may retain them for up to 30 days for abuse monitoring. No other data is collected. In practice:
- Kynoss Studios (us): We collect nothing. We have no servers.
- OpenAI (Pro AI processor): API calls are used only to generate the current response; data is not linked to your identity (no account, no device ID, no advertising ID is passed), is not used to train models, and is deleted after OpenAI's abuse-monitoring window of up to 30 days.
- Apple CloudKit (optional household sharing): Runs under your iCloud account; governed by Apple's own policies.
CloudKit
If you enable household sharing, data syncs through Apple's CloudKit under your iCloud account. This is governed by Apple's Privacy Policy.
App Tracking Transparency
Sirrius does not track users across apps or websites, does not pass any identifier to any third party, and does not use the App Tracking Transparency framework because no tracking occurs.
13. Changes to This Policy
We may update this policy to reflect changes in functionality or legal requirements. The effective date will be revised. Continued use constitutes acceptance.
14. Contact Us
For privacy questions or concerns:
- Email: kynossstudios@gmail.com
- Support: Sirrius Support
We will respond to privacy inquiries within 30 days.