Animal Friends OS ships two separate safety nets. Undo gives you a 10-second window to reverse specific mistakes — an accidental booking cancellation, a deleted client or pet, a wrong status change — immediately after they happen; it works from an approved list of actions and money is never undone. Data Safety is a completely different, longer-running feature: every tenant’s data is exported nightly and kept for a full year, so an owner or manager can search for and restore an accidentally deleted record from the dashboard days or months later, even outside the 10-second undo window.
A toast that appears the moment you cancel a booking, delete a client or pet, or make certain other reversible changes. Tap it within ten seconds and the action is genuinely reversed — not "marked as undone," actually rewound in a single transaction.
Every tenant's data is exported automatically every night and kept for a full year. From the dashboard, an owner or manager can find and restore a record days, weeks, or months after it changed — long after any Undo toast is gone.
They share one rule: money is never undone and never restored. Payments, refunds, and other money-class records are preserved for your own history but neither system will ever write them back.
Every one of those runs the actual inverse of the write that just happened — restoring the exact row values that existed a moment before — inside one database transaction, so it either fully reverses or does not apply at all.
The nightly export covers clients, pets, vaccine records, bookings and visits, staff and schedules, services and pricing, settings, messages and campaigns, reports and records, and photos and media — organized into the same categories you see when you browse restore points. You can also trigger an on-demand backup from the dashboard, up to twice a day.
See /os/facts for the complete list of what is and is not built.
Ten seconds. That is the real, coded window — not a marketing round number. It is intentionally short: Undo is for the "wait, I did not mean to click that" moment, not a way to browse back through changes made minutes ago.
No, only on actions that are on an approved list, and only when a truthful reversal can be built before the action even runs. Booking cancellations and moves, deleting a client or a pet, removing a staff member, deactivating a service, changing a grooming status, and a few others currently offer it. Most of the app does not, and never claims to.
No, never. Every table an Undo could touch is checked against the same allowlist the backup-restore engine uses, and anything classified as money — payments, refunds, invoices settled, consent logs, sent messages — is hard-refused. If an action involved money, it simply does not get offered an Undo at all.
Data Safety is the completely separate longer-term feature: every tenant’s data — clients, pets, bookings, staff, services, settings, messages, records, media — is exported automatically every night and kept for a full year. From the dashboard, an owner or manager can look through restore points and bring back an accidentally deleted or changed record long after the 10-second Undo window has closed. You can also trigger a manual backup on demand, up to twice a day.
No. Payments, refunds, and other money-class records are included in the export so the history is preserved for your own reference, but the restore engine refuses to ever write them back. A backup restore, like Undo, cannot un-happen a charge or a refund.
Exactly one of them wins. Claiming an Undo is a single atomic operation, so a double-tap or two people acting at the same instant cannot both apply it — the second attempt is told plainly that it was already undone.
No. The entire reversal runs as one all-or-nothing database transaction. If any part of it fails, none of it applies, and the ticket is marked failed with an honest message rather than leaving some rows reverted and others not.