Your information
Privacy & care data
Your care pack may contain personal contact information. Review what you save and what you deliberately share. This page describes the current launch implementation.
Information you provide
The studio accepts pet details, care routines, notes, caregiver and emergency contacts, packing lists, and journal entries. Save only information you have permission to use. Avoid entering passwords, alarm codes, payment card details, or unrelated sensitive information in free-text fields.
Temporary drafts and sign-in handoff
Before you sign in, your draft exists only in the open studio’s memory. Reloading or closing the page can discard it. SitterLeaf does not keep care packs in persistent browser local storage. If you click Sign in while working on a draft, the studio temporarily places that draft in this tab’s session storage to carry it through the sign-in redirect. The handoff expires after 30 minutes and is consumed and removed when you return.
Use Discard temporary changes to clear the current unsaved work without deleting a pack already saved to your account. A sign-in handoff can include the notes and contacts you entered; it is temporary browser data, not an encrypted backup. Downloaded JSON backups and printed copies are separate files you deliberately create and remain under your control.
Cloud saves and account records
Signed-in edits are saved to the service’s database on its cloud-hosted server after a short pause. This server database is the permanent store for saved care packs, journals, sharing permissions, AI request and credit records, and any enabled payment records. Wait for the saved status before leaving; an interrupted or failed save is not a completed cloud save. Save failures are shown in the studio, and you can retry. There is no persistent local fallback for a failed cloud save.
SitterLeaf has its own email-and-password accounts. Your account has a stable internal identifier used to scope saved records and check access. Returning to the studio while signed in loads your account’s saved packs. You do not need a ChatGPT account; OpenAI is an optional AI processing provider, not the account system.
Account access and recovery
The service stores your email address, display name, and a salted password hash, rather than a readable password. Email addresses are not currently verified. A session cookie maintains sign-in for up to 30 days. The database stores a hash of the session token and recovery code, not their readable values.
A successful recovery replaces the recovery code and revokes prior sessions. Keep the new code shown to you somewhere private. The current service does not send password-reset emails; losing both your password and recovery code can prevent you from recovering access. Authentication attempts are rate-limited using hashed identifier/address buckets. Account access data is separate from care-pack content, so deleting one pack does not delete the account.
Sharing is a deliberate action
Creating a share link makes the entire saved care pack and its journal available to anyone who holds that link. This includes contact fields, home notes, veterinary instructions, and later saved changes. There is currently no field-by-field sharing selection. Review all fields before sending a link.
Link holders can add journal entries using a name they enter themselves. The name is not a verified caregiver identity. A link is not a password-protected invitation to a named individual. Share only with intended recipients and revoke shared access when it is no longer needed. Revocation or deletion prevents later access through the service; it cannot recall a screenshot, downloaded file, printed copy, or information a recipient has already copied.
Optional AI editing
If you choose an AI editing action, selected pet-care information is sent to the AI provider selected in the site’s deployment configuration. DeepSeek is the default; the operator can manually select OpenAI instead. Each request is sent only to the active provider. There is no automatic fallback from one provider to the other. This choice does not change your SitterLeaf sign-in account.
The input includes the pet profile, stay dates, feeding, walking, comfort and other notes, routine instructions, and packing item labels. Dedicated owner and emergency contact fields, home notes, medical notes, and journal entries are excluded. The request also indicates whether certain contact and medical fields have been filled, without sending their contents.
Free-text fields are not automatically anonymized. Personal or medical details entered in a pet profile, routine, packing item, or another included note may still be sent to the active provider. Review those fields before using AI. You can use the manual care-pack tools without requesting AI editing. Each provider processes requests under its applicable service terms and data practices; this page does not promise a particular provider retention or training policy. Review AI output against your original information before saving or sharing it.
Service providers and operational records
The site relies on cloud hosting to deliver the application. Hosting services and the application may process technical request information needed to operate, protect, and troubleshoot the service. If paid checkout is enabled later, the payment provider will process payment information; SitterLeaf should not receive your full payment card details.
This preview does not make a claim that no provider retains logs or that all copies are immediately erased. Provider retention and backup practices may differ from deletion of a record in the application.
Reviewing and deleting care packs
Go to the studio to review, edit, or delete your saved packs. Delete a pack only after saving any copy you want to keep. For a saved pack, deletion removes the pack and its journal, revokes its share links, and clears stored generation responses associated with that pack. It does not delete your SitterLeaf account, copies on other devices, or copies held by other people. Generation status and credit-accounting records may remain separate from care-pack content. Any purchase records, if payments are enabled, are also separate.
Operator and privacy contact
The operator’s name has not yet been published for this launch preview.
A valid operator contact email has not yet been published for this launch preview.
You can delete saved care packs in the studio. An account-wide privacy request workflow is not yet available in the application. Review these launch limitations before providing personal information.
Changes to this page
We will update this page when the implemented data flow changes. Check the date above and review the current sharing controls before providing or sharing personal information.