Privacy Policy

Last updated: 26 March 2026

🔒 Short version: We collect only what's needed to run the platform. We don't sell your data. Diary entries are private — only you can read them. You can request deletion at any time.

1. Who We Are

Pethology is an educational platform operated by Nana da Silva, based in Ireland. This policy explains what personal data we collect, why, and how we protect it. As an Irish-based service, we comply with the General Data Protection Regulation (GDPR).

Data controller: Nana da Silva — natr@hey.com

2. What Data We Collect

Data	Why we collect it	Where it's stored
Email address	Authentication and access control	Auth0 (EU region)
Display name & avatar	Personalise your experience	Firebase Firestore
Quiz results & scores	Track progress, power achievements and goals	Firebase Firestore
Work Experience Diary entries	Personal placement journal — private to you	Firebase Firestore
Goals progress	Track your learning milestones	Firebase Firestore
Usage analytics	Understand how the platform is used (aggregate only)	Google Analytics 4

3. Legal Basis for Processing (GDPR)

We process your data under the following legal bases:

Legitimate interest — providing the educational service you signed up for
Consent — for analytics and any optional communications (newsletter)
Contract performance — your account and quiz data is necessary to deliver the service

4. Who Can See Your Data

Diary entries — private. Only you can read them. Teachers can only see that an entry was submitted (date only), not the content.
Quiz results — visible to your teacher for class progress tracking
Display name & avatar — visible to your teacher and classmates within your class
We never sell your data to third parties

5. Third-Party Services

We use the following third-party services to operate Pethology:

Auth0 — authentication (EU region)
Firebase / Google Cloud — database and hosting
Google Analytics 4 — anonymous usage analytics
Netlify — web hosting

Each of these services has their own privacy policy and GDPR compliance measures.

6. Data Retention

We retain your data for as long as your account is active. If you leave your institution and your account is deactivated, your data may be retained for up to 12 months before deletion, unless you request earlier deletion.

7. Your Rights (GDPR)

Under GDPR, you have the right to:

Access — request a copy of your personal data
Rectification — correct inaccurate data
Erasure — request deletion of your data ("right to be forgotten")
Portability — receive your data in a machine-readable format
Objection — object to processing based on legitimate interest
Withdraw consent — for analytics or newsletter at any time

To exercise any of these rights, contact us at natr@hey.com. We will respond within 30 days.

8. Cookies

Pethology uses session storage (not cookies) for authentication. Google Analytics 4 may use cookies for analytics. You can disable analytics cookies via your browser settings.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes. Continued use of Pethology after changes are posted constitutes acceptance.

10. Contact & Complaints

For any privacy concerns, contact us at natr@hey.com.

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Data Protection Commission (DPC) Ireland at dataprotection.ie.

Questions? Contact us at natr@hey.com