Who processes your data
The iPalomino app and ipalomino.com are operated by the iPalomino team, Nové Zámky, Slovakia (“we”). For any question about your personal data, write to us at hello@ipalomino.com.
This policy covers the iPalomino mobile app for iOS (“the app”) and the website ipalomino.com (“the website”). We process personal data in line with Regulation (EU) 2016/679 (GDPR) and the Slovak Personal Data Protection Act No. 18/2018.
Your ranch data and its backup
What you create in the app is stored in the app’s storage on your iPhone. While you are signed in, the app also backs it up to your account on our server in the EU (Slovakia), so you can restore it on a new phone and keep it in sync across your devices. This includes:
- animals and their profiles, photos, notes and identification details,
- health records, vaccinations, deworming, weight and breeding,
- tasks, calendar and feeding or medication reminders,
- contacts (such as your vet or farrier), including their phone numbers and emails,
- feed stock, costs, documents and uploaded files,
- the stable location you pick on the map.
We process this data only to provide the backup, restore and sync — we don’t analyse it, use it for advertising or share it with anyone. The one exception is sharing that you set up yourself: if you invite a professional (such as your vet or farrier) to a stable with an invite code, that person sees the stable’s animals, health records, feeding and medication reminders, tasks and calendar and can add health records, medication entries, events and tasks, until you remove their access. If you invite a ranch worker instead, that person also sees the feed stock and the stable’s contacts (including the names, phone numbers and emails saved there) and can add to and update the feed stock. If you invite the owner of a horse boarded at your stable, that person sees only the data of their own horse — its profile and photo, health records, feeding and medication reminders, tasks, events, documents, the feed assigned to that horse and the contacts assigned to it — and can add to and update them. If you assign a task to the horse’s owner, they also see that task — even when it is not about their own horse — and can update it and mark it as done. When the sharing ends, the horse’s owner keeps a copy of that data in their own account. If you join someone else’s stable this way, its owner sees your name next to the records you add, and those records stay in the owner’s account even after you leave. Everyone with access to the stable also sees the names and roles of the others with access, so that a task can be assigned to a specific person. Contacts you save (such as your vet or farrier) may contain other people’s details; we store them only on your behalf. iOS may also back up the data on your device according to your settings (for example an iCloud backup managed by Apple). If you create a PDF (a health record or a stall card) and share it, you decide who receives it.
Data we process on our server
So that the app can run your account, subscription and data backup, we process the following data on our server in the EU (Slovakia):
We never see your card or billing details — Apple handles the whole payment in the App Store. To talk to our server, the app uses an access key that we store only in hashed form, and we verify your identity at sign-in directly with Apple.
Third-party services in the app
Some features rely on services from other companies. Data is shared with them only when you use that feature:
- Apple — Sign in with Apple, App Store payments and maps (showing the map and looking up your stable’s address). Apple acts as an independent controller under its own privacy policy.
- Google (Google Places) — when you search for professionals nearby, we send the type of professional (for example a vet), your stable’s location and your language. If the service is unavailable, we use Apple Maps search instead.
- Vimeo — playing video tutorials in Tips. When a video starts, Vimeo processes technical data such as your IP address and device details.
- WhatsApp (Meta) — only if you choose to join our community group through the link in the app.
The app uses the camera only to scan QR codes on the device itself, and you pick photos from your library yourself. Reminders are local notifications on your iPhone — we don’t send them through our server. The only notifications our server sends concern shared stables: when something changes there — for example a task or an event is added, completed, rescheduled or cancelled, a health record is added, feeding and medication change, feed is running low, an animal is added, or someone joins or leaves the stable — the other people with access receive a push notification through Apple’s push service. It contains the stable’s name, the name of the person who made the change and a short description (such as the title of the task or the animal’s name).
What we don’t do
- We don’t show ads or use advertising identifiers.
- The app contains no third-party analytics or tracking tools.
- We don’t sell or rent your data.
- We don’t track your location — we only use the stable location you pick on the map yourself.
- We don’t make automated decisions or profile you with legal effects.
The ipalomino.com website
When you visit the website, only the technical data needed to run it and visit statistics are processed:
- Hosting — our server at Webhouse in Slovakia may log technical data (IP address, browser, time of access) to keep the site secure and running.
- Google Analytics (Firebase) — pseudonymised visit statistics (for example the number of visits and device type). For this, cookies and similar identifiers are stored in your browser; the data is kept for no more than 14 months.
- Google Fonts — the website’s fonts load from Google’s servers, which see your IP address.
- Language choice — we remember your chosen language in your browser’s storage. This is not personal data.
The legal basis for running the website and its statistics is our legitimate interest in keeping it secure and improving it. You can block analytics cookies at any time in your browser settings or with a tracking-blocker extension. Links to Facebook, Instagram, TikTok and WhatsApp lead to external sites with their own privacy policies.
Recipients and transfers outside the EU
We share data only with our hosting provider (Webhouse, Slovakia) and the partners listed above (Apple, Google, Vimeo), and only as far as each feature requires. Some of them may transfer data to the USA; this happens on the basis of the European Commission’s adequacy decision (EU–US Data Privacy Framework) or standard contractual clauses. Where the law requires it, we may also disclose data to public authorities. If you share a stable with a professional, a ranch worker or a horse owner you invite, that person can see the shared data as well.
How long we keep data
We keep account, profile and sign-in data, as well as your backed-up ranch data, for as long as you have an account. When you delete an item in the app, its content — including photos and documents — is removed from our server at the next sync; only a technical marker without any content (the record identifier and time of deletion) remains so that the deletion also reaches your other devices. When you delete your account in the app, we erase everything immediately; a deletion request sent by email is handled without undue delay and within one month at the latest. We keep purchase data longer only if accounting or tax law requires it.
Your rights
Under the GDPR you have the right to:
- access your data and receive a copy,
- have inaccurate data corrected,
- have your data erased (the “right to be forgotten”),
- restrict processing,
- data portability,
- object to processing based on legitimate interest,
- withdraw consent at any time where processing relies on consent.
To exercise your rights, email us at hello@ipalomino.com; we will reply within one month at the latest. You also have the right to lodge a complaint with the supervisory authority — the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava, dataprotection.gov.sk.
Deleting your account and cancelling your subscription
You can delete your account right in the app: Settings → Account → Delete account. After you confirm with Sign in with Apple, we immediately erase your account, profile, sign-in records, purchase records and all data backed up from the app (including photos and documents) on our server, and the app also erases all data stored on your device. If you no longer have the app, you can also ask for deletion by emailing hello@ipalomino.com from the address you use in the app (if you use Apple’s private relay email, mention that you signed in with Apple). You can also stop using Sign in with Apple for the app in your iPhone Settings. Deleting your account does not cancel your subscription — cancel it in iPhone Settings → your name → Subscriptions, or in the app on the Premium screen.
Security
Communication between the app and our server is encrypted (HTTPS). Your backed-up data, photos and documents are stored on our server in Slovakia, separately for each account, and can only be accessed with your account’s access key; each device has its own key, which we store only in hashed form. Only a small circle of people can access the server. We rely on Apple’s proven services for sign-in and payments. Still, no one can guarantee complete security of data sent over the internet.
Changes to this policy
We may update this policy, for example when we add a new feature. You’ll find the effective date at the top of this page and we will let you know about significant changes. The policy is available in several languages; in case of any discrepancy, the Slovak version prevails.
Questions about your privacy?
Write to us — we’ll reply as soon as we can, within one month at the latest.