Trea

Trea Privacy Policy

Last updated 15 October 2026 · Version 1

In short

Trea is a care log for your pets and a hand-over for trips. Your pets, care book, dose log and glucose readings live on your iPhone and in your own iCloud, shared only with the household members you invite through iCloud. Trea has no account and no sign-up.

When you travel, each sitter gets a link to a web page and a 4-digit code. Everything the sitter page shows, and everything a sitter adds (stamps, notes, photos), is encrypted on the device with a key that travels only inside the link, after the "#". Our server at trea.1801labs.com stores that encrypted content and the trip's times. It can't read names, doses, door codes, notes or photos. A sitter link stops working 48 hours after the trip's last visit window, and everything about a trip is deleted from our server 30 days after the trip ends. Photos are never backed up.

There are no analytics, no ads, no tracking and no third-party SDKs. Trea is a care log and a sitter hand-over app, not a veterinary service.

1. Who is responsible

Trea is made by Burak Özaslan at 1801 Labs, Maltepe, İstanbul, Türkiye. Email: support@1801labs.com. For any privacy question or request, write to that address.

Who decides what happens to which data:

  • Your household's data in iCloud (pets, care book, dose log, glucose readings, trips, the people in your household and your sitters): we never receive it. You and your household control it, so for this data we are neither a controller nor a processor.
  • Trip content on our server (the encrypted care-book copy, the sitters' names, stamps, notes, photos and house-card views): the owner who creates the trip decides what goes into it and who gets a link. We store this content for the owner and cannot read it.
  • The data our server needs to run (device records, notification tokens, code hashes and attempt counts, times, IP addresses used to limit abuse, error logs): we are the controller.

2. No account

Trea has no sign-up, email address or password. Your household's data uses your Apple Account's iCloud, which Apple runs. When an iPhone first connects to our server for a trip, the app proves to Apple that it is a genuine copy of Trea (Apple's App Attest). Our server stores the identifier and public key of that check and gives the device a random identifier. Sitters never create an account.

3. Your household's data, in your iCloud

  • What: your pets (name, species, colour, an optional photo and description, feeding notes, quirks, and your vet's and emergency vet's names and phone numbers); the care book (feeding, medicines, walks and other care, with times and amounts exactly as you wrote them); the dose log (who marked a dose given or skipped, when, and an optional reason); glucose readings with optional notes; the people in your household; and your trips (dates, visits, sitters' names and, if you add them, phone numbers).
  • On your iPhone. Everything is stored on your iPhone. Your settings (reminders, mascot, glucose unit) stay on that iPhone.
  • In your own iCloud. Trea keeps a copy in a household zone in your private iCloud database (Apple's CloudKit), so the iPhones in your household stay in step. Each record's content is stored in CloudKit's encrypted fields: it is encrypted on your device before it is uploaded, so neither Apple nor we can read it. Your iCloud account is run by Apple under its own privacy policy.
  • Your household. When you invite someone, Trea shares the household with them through Apple's iCloud sharing. They see and can change the same pets, care book, log, glucose readings and trips, including your sitters' names and phone numbers. The keys of each trip also travel in the household, in encrypted fields, so members can follow the trip.
  • Without iCloud. If you are not signed in to iCloud, Trea keeps your data on this iPhone only. Sharing with your household needs iCloud.

4. Trips and the sitter link

  • When you share a trip, your iPhone makes a random key for that trip and encrypts a copy of what your sitters need: your name as it appears in Trea, your pets, the care items for each visit with the how-to and amounts as you wrote them, the visit times, the sitters' names, the house card (door code and Wi-Fi password) if you add one, contact numbers such as yours and your vet's, and the doses your household has already marked during the trip.
  • Each sitter gets their own link: https://trea.1801labs.com/t/…#k=…. The key is the part after #k=. Browsers never send that part to a server, so our server never receives the key.
  • Each link has a 4-digit code that you give the sitter yourself. When the sitter enters it, the code is sent to our server over an encrypted connection; the server keeps only a salted one-way hash of it (scrypt with a secret value of ours). The code is not part of the key: it lets the server limit guessing. After 3 wrong codes in a row the link waits 30 seconds; after 10 wrong codes in 24 hours it locks until you or a household member reset it in the app, or until 24 hours have passed. You are notified when a link locks.
  • You can turn a sitter's link off at any time. It stops working at once.
  • If a visit has no stamp 60 minutes after its time, our server tells you and your household, and tells you again when the first stamp arrives. It works this out from times only.

5. What our server stores

  • About a trip: a random trip identifier, when the trip ends, the time of each visit and which link it belongs to, and the encrypted copy of the care book described in section 4.
  • About each sitter link: a random link identifier, the code's hash and salt, the sitter's name in encrypted form, the times of recent wrong code entries, and whether the link was turned off.
  • Events: each stamp, note, house-card view, finished visit and each dose your household marks during the trip, as encrypted content, with its kind, the visit it belongs to, whether a sitter link or a household iPhone sent it, and when the server received it.
  • Photos: encrypted photo files, with their size, the visit and the time. At most 40 photos and 20 MB per trip.
  • The iPhones that create or follow a trip: a random device identifier, the App Attest key identifier and public key, when the device was first and last seen, the notification tokens Apple gives it and, during a trip, its Live Activity tokens. A household member's iPhone proves that it belongs to the household with a separate household key that never reaches our server; the server stores only a one-way hash of a value made from it.
  • Notification records: which notification went to which device and when, so none is sent twice.

The server sees when things happen and how many there are. It does not see what they say.

6. What our server never sees

  • No names, pet details, care instructions, doses or amounts, notes, door codes, Wi-Fi passwords, phone numbers or photos in readable form.
  • No location. Photos from the sitter page are re-encoded on the sitter's phone before they are encrypted, which removes their location and other embedded details.
  • No contacts, email addresses or Apple Account details.
  • No analytics, advertising or tracking SDKs, no cookies, and no tracking across apps or websites.
  • We never sell or share personal data, use it for advertising, or make automated decisions about anyone.

7. For sitters: the sitter page

If someone sent you a Trea link, this section is for you.

  • No app and no account. The page at trea.1801labs.com opens in your browser. It sets no cookies and stores nothing on your phone. The key stays in the page's memory and is removed from the address bar and the browser history as soon as the page opens; if you reload, open the link from the message again. The page loads nothing from third parties.
  • What you see: the owner's name, their pets, what to do on your visits as the owner wrote it, your visit times, the house card if the owner added one (hidden until you tap Show), the contact numbers under Something's wrong?, and the stamps from other sitters and the household, with names and times.
  • What you add: the 4-digit code (checked by our server and never stored as you typed it); a stamp each time you tap an item, with the time; an optional photo per item; an optional note for the owner; Finish visit; and a record each time you tap Show on the house card, which the owner sees. The name on your stamps is the name the owner typed; you don't enter it.
  • Who sees it: the owner and the people in their household who follow the trip. Other sitters of the same trip see your stamps, and because everyone on a trip shares the same key, they could also read your notes and house-card views. Only the owner and their household can open photos. We cannot read any of it.
  • Where it goes: what you add is stored encrypted on our server for the periods in section 13. The owner's app also turns your stamps on doses into entries in the household's dose log (for example "Given · your name"), and can keep the trip, including your photos, in the household's own iCloud. That copy is under the owner's control.
  • Late visits: if a visit has no stamp 60 minutes after its time, the owner is notified.
  • Your connection: our server sees your IP address while you use the page. It uses it only in memory, for a few minutes, to limit code guessing and abuse. We keep no access logs.
  • Your requests: the owner decides what is in the trip, so you can ask them first; they can turn off your link at any time. You can also write to us at support@1801labs.com with your link, leaving out everything from the "#". We will help with your request for the data on our server. Without the key we can't read it, but we can delete it.

8. Photos

  • Your pets' photos: chosen with the iOS photo picker, which gives Trea only the photo you pick, not access to your library. Trea makes a smaller copy without its embedded details and keeps it with the pet in your iCloud household.
  • Photos on the sitter page: taken or chosen only when the sitter taps Add photo. The page shrinks each photo to a JPEG of at most 300 KB, which removes its location and other embedded details, then encrypts it before upload. Our server deletes them 30 days after the trip and never backs them up.

9. Notifications, Live Activity and widgets

  • Dose reminders are scheduled on your iPhone when you turn on Remind me; nothing comes from a server. They show the pet's name, the care item and the amount on your Lock Screen.
  • Trip notifications (a stamp, a late visit, a sitter checking in, a house card opened, a finished visit, a locked link) come from our server through Apple's Push Notification service. They carry only a generic text and random identifiers. Your iPhone fills in names after decrypting them on the device.
  • The Live Activity on trip days shows how many visits are stamped and when the next one is due. Our server updates it with counts and times only, never names.
  • Widgets show your next dose from the data on your iPhone.

10. Permissions

Each permission is optional, and Trea explains why it asks before iOS shows the request. You can change it at any time in iOS Settings.

  • Notifications: for dose reminders ("Get a nudge at dose time") and trip notifications.
  • Live Activities: for the trip on your Lock Screen.
  • Photos: no permission. The iOS photo picker gives Trea only the photo you choose.
  • Trea doesn't use your location, contacts, microphone, camera or Apple Health. On the sitter page, the browser's own camera or photo picker opens only when the sitter taps Add photo.

11. Purchases

Trea Pro and the Trip pass are bought through the App Store with StoreKit. Apple handles payment; we never see your payment details or your Apple Account. Trea checks your purchase with Apple on your iPhone. Sitters never pay anything.

12. Who else processes data

Our studio rule is that data we store lives on servers we run.

  • DigitalOcean hosts our server in Frankfurt, Germany. The database, the photo files and the backups stay on servers we run.
  • Cloudflare handles DNS and the encrypted connection (TLS) for trea.1801labs.com, so it processes your IP address and the requests in transit. Trip content in those requests is already encrypted on the device. Cloudflare stores none of Trea's data.
  • Apple runs iCloud (CloudKit and iCloud Keychain), delivers notifications and Live Activity updates, provides App Attest and handles purchases, each under Apple's privacy policy.

No one else receives data from Trea.

13. How long data is kept

  • Sitter links: a link stops working 48 hours after the trip's last visit window closes (two hours after the last visit's time). The server then deletes the code's hash and the sitter's encrypted name. Turning a link off deletes them at once.
  • Trip content (the encrypted care-book copy, stamps, notes, house-card views, photos, visit times, links, and the trip's notification tokens and records): deleted by a daily job 30 days after the trip ends, or after its last visit if that is later. If the owner deletes the trip in the app, it is deleted from our server right away.
  • Notification records: 30 days.
  • Device records: deleted 180 days after the device last connected, once it follows no trip.
  • Deleted trips: the random identifier of a deleted trip is kept for 180 days so the trip can't be recreated by mistake. Nothing else about it is kept.
  • Backups: the database is backed up every night, and each backup is kept for 3 days. Deleted trip content can therefore remain in a backup for up to 3 more days. Photos are never backed up.
  • IP addresses: held in memory for a few minutes, for the limits in section 7. We keep no access logs; technical error logs are kept briefly and rotated automatically.
  • Your household's data in iCloud: until you delete it (section 14).
  • Emails you send us: as long as needed to answer you.

14. Your control

  • Remove a pet or a care item: in the care book, open the pet and tap Remove followed by its name, or open an item and tap Remove from the care book. It leaves Today and reminders; doses already logged stay in the log.
  • Turn off a sitter link at any time in the trip's sitter links. The page stops working for that sitter at once.
  • Delete a trip in the app: it is deleted from our server right away.
  • iCloud: you can delete Trea's data from your iCloud in iOS Settings → your name → iCloud → Manage Storage → Trea, and delete the app to remove what is on your iPhone.

15. Legal bases

Under the GDPR, we process data to provide the service you asked for, Art. 6(1)(b), and to keep the server secure and prevent abuse, such as code guessing, Art. 6(1)(f) legitimate interest. Trip content is stored for the owner, who decides what goes into it. Information about your pets' medicines and glucose is about animals, not about you; we still protect it as carefully as sensitive data. Under the Turkish data protection law (KVKK), we process data to perform our contract with you and for our legitimate interest in running the service securely.

16. International transfers

Our server is in Germany, in the European Union. We are based in Türkiye, so storing data there is a transfer abroad under the KVKK, which you agree to by using Trea's trip features or the sitter page. Apple and Cloudflare may process data in other countries, including the United States, under their own safeguards, such as the EU Standard Contractual Clauses.

17. Security

Trip content is encrypted end to end (AES-256-GCM) with a key that stays in the link and on the household's devices. Codes are stored only as salted hashes, and guessing is limited per link and per network. The sitter page and the server use encrypted connections, load no third-party code and send no referrer. Your household's data is protected by your devices' security and by CloudKit's encrypted fields. If you shared a door code, change it after the trip. No system is perfectly secure; if a breach affects your data, we will tell you and the authorities as the law requires.

18. Your rights

Depending on where you live, including under the GDPR (EU and UK), the KVKK and US state privacy laws, you have the right to access, correct, delete and receive a copy of your personal data, to object to or restrict processing, to withdraw consent at any time, and to complain to a data protection authority. Your household's data is in your own iCloud, so you can use most of these rights directly in Trea (section 14). We can't read trip content on our server, but we can delete it. For anything else, write to support@1801labs.com; we answer within one month.

19. Children

Trea and the sitter page are not directed at children. If you think a child has given us personal data, write to us and we will delete it.

20. Emails you send us

If you write to support@1801labs.com, we receive your email address and what you write, and use them only to answer you. If you are a sitter, never send us the part of your link from the "#". Our email is hosted by Apple (iCloud Mail). We keep emails as long as needed to help you, and delete them on request.

21. This website

1801labs.com, where this policy lives, sets no cookies, runs no analytics and loads nothing from third parties. It is served by Cloudflare, which processes your IP address and technical request data to deliver the page and protect it from abuse.

22. Changes to this policy

If this policy changes, we will update this page and the date above. If a change is significant, we will also tell you in the app before it applies.

23. Contact

Burak Özaslan, 1801 Labs, Maltepe, İstanbul, Türkiye. support@1801labs.com.