Privacy on this site

Updated September 28, 2026.

Interest and inquiries

Submitting an interest form sends your name, email, organization, message, optional discovery details and selected campaign labels to Canipep’s database. We use them to respond and, only if you request them, send development updates. An inquiry does not automatically subscribe you. No payment information is collected.

Fieldnotes accounts

You can start a journal without an account. Until you save, the draft is kept only in this browser’s storage on your device; nothing is sent to our database. Clear it from the journal start page if you share the device.

To save, you create an account with your email address and a password, or with Google or Apple where those options appear. We store a random account identifier, your email address, whether you have confirmed it, a salted and peppered PBKDF2 hash of your password (never the password itself), your public name, hashed session tokens and your acceptance of the terms. With Google or Apple, we receive only the stable account identifier and email address they share with us, never your password there; Apple may give us a private relay address that forwards to you. Your email address is never shown with anything you share and is used only to sign you in and to send account messages you ask for: a link to confirm the address and password-reset links. Those messages are delivered by Resend. We do not send marketing email from Fieldnotes.

Your public name appears only on journals you submit for review and on approved comments; you can change it in My account. Sessions last up to 30 days unless you sign out. Resetting or changing your password signs you out on other devices. You can optionally add a passkey, made by your device or password manager, to sign in with your face, fingerprint or device PIN; we store only its public key and a sign-in counter and never receive your biometrics or the private passkey. Accounts created before email sign-in may still use a recovery key, of which we store only a hash. Moderators are designated by account identifier and sign in the same way as everyone else.

Private journals and public sharing

Journals, entries, measurement plans, saved drafts and photos are stored on Cloudflare (the D1 database and R2 object storage) on infrastructure Canipep operates. They are private to your account and to authorized Canipep moderators until you request public review. Moderators can read private records to operate and safeguard the service. Only the reviewed version is published; later entries require another review. Approved comments are public. Public material can be copied by others even after you withdraw it.

Notebook sponsorship

Canipep operates Fieldnotes. The six Canitide study notebooks are sponsored by Canitide, the sister company that makes and sells the formulas, and that sponsorship is labeled wherever it appears. Joining a notebook adds a topic label to your journal; it is not evidence that a Canitide product was supplied or used, and it does not enroll your dog in a trial. Canipep can review submitted records for research questions; publishing a record does not grant permission to present it as a product endorsement. Positive, negative, mixed and inconclusive observations go through the same moderation process, and sponsorship does not decide which journals are published. Private journal data is never sold or used to target advertising.

Optional entry assistant

The entry assistant is optional and exists only when the site owner has connected an OpenAI API key. Nothing is sent unless you tick the consent box for that request. It then sends your note and selected structured fields from the current draft to the OpenAI API; it never sends your sign-in identity, photos or full journal. Avoid personal identifiers in your own text. The assistant proposes fields for your review; it does not create entries by itself or give medical advice. Every part of Fieldnotes works without it, and it is not a way to sign in.

Requests ask for no saved response state (store: false). OpenAI may retain abuse-monitoring logs under its API policies, typically for up to 30 days unless an exception applies, and API inputs and outputs are not used to train OpenAI models by default. See OpenAI’s API data controls. Applying a suggestion saves it to your private draft; your note itself is not stored by Fieldnotes.

Photos and receipts

Uploaded photos are resized and stored as JPEGs. Photo metadata, including EXIF location information, is removed from the stored version. Do not upload faces, addresses, patient documents, contact details, or anything you lack permission to share. Hashes describe the stored image and journal record, not the unmodified camera original. Hashes cannot verify the truth of reported events. Private records and their receipt exports require authorized access.

Retention and your choices

Use Withdraw in a journal to remove its public access. Export your journal at any time. For deletion of your account, private records, photos, or an interest request, contact hello@canipep.com or use the contact form. We retain entries until deletion is requested or the service’s operational or legal needs end. Deletion can break receipt verification; platform backups and copies made by readers may persist. We do not sell your submitted information.

Cookies and technical processing

Fieldnotes sets only the cookies it needs to sign you in: a secure, HTTP-only session cookie once you are signed in; a short-lived cookie that ties a Google or Apple sign-in to the browser that started it (ten minutes); and, only while you add a passkey, a five-minute cookie for that step. There are no advertising, analytics or third-party cookies. Cloudflare hosts the site and processes technical information such as IP address, requests, browser information and security events to deliver it; see Cloudflare’s privacy policy. Rate limiting uses a salted identifier derived from the connection address, or from an email address for repeated sign-in attempts, not your identity. When you choose Google or Apple, their own privacy policies apply on their pages.

Tracking

We have not added advertising pixels or third-party analytics. Fixed campaign tags can be included with an interest submission. Fonts and brand images are served with the site.