Privacy Policy

Last updated: 17 April 2026

Your privacy is critically important to us. At PupSavvy, we have a few fundamental principles:

• We are thoughtful about the personal information we ask you to provide and the personal information that we collect about you through the operation of our services.
• We store personal information for only as long as we have a reason to keep it.
• We aim to make it as simple as possible for you to control what information is shared, and to permanently delete your data when you choose.
• We aim for full transparency on how we gather, use, and share your personal information.

Below is our Privacy Policy, which incorporates and clarifies these principles.

1. Who We Are and What This Policy Covers

We are PupSavvy ("we", "our", "us"), the makers of a pet care tracking application designed to help dog owners log daily events, monitor routines, gain AI-powered insights, and coordinate care among household members.

This Privacy Policy applies to information that we collect about you when you use:

• Our website at pupsavvy.app;
• Our mobile applications for iOS and Android; and
• Our web application and all related features and services (collectively, "Services").

Throughout this Privacy Policy we refer to our website, mobile applications, and other products and services collectively as "Services."

2. Information We Collect

We only collect information about you if we have a reason to do so — for example, to provide our Services, to communicate with you, or to make our Services better. We collect information from three sources: information you provide to us directly, information collected automatically through operating our Services, and information from outside sources.

Information You Provide to Us

• Account information: When you create a PupSavvy account, we require an email address and password. Your password is hashed and never stored in plain text. You may optionally set a display name or upload a profile photo.
• Pet data: You voluntarily enter information about your pets, including names, breed, date of birth, sex, weight, and medical notes. This data belongs to you and is stored to provide the core functionality of the app.
• Event logs: When you log events (walks, meals, poos, wees, exercises, accidents, and custom event types), we store the event type, timestamp, optional text notes, and optional photo attachments.
• Photos: If you attach photos to events or upload a profile avatar, we store those images in secure cloud storage with private access policies.
• Location data: If you enable GPS location tracking (a Premium feature, e.g. for walk tracking), we store coordinate data associated with those events. Location tracking is entirely opt-in and can be disabled at any time via your device's operating system permissions.
• Communications: If you contact us for support by email, we store a copy of our correspondence.

Information We Collect Automatically

• Device information: When you open the app, we automatically record your device platform (iOS, Android, or Web), operating system version, and IANA timezone identifier (e.g. Europe/London). This information is stored against your anonymous or registered user profile in our database and is used solely to improve our Services and inform decisions about which platforms and regions to support. We do not use third-party analytics trackers. We do not sell your data to advertisers.
• Usage information: We may collect aggregated, anonymised information about how our Services are used (e.g. feature adoption, error rates) to fix bugs and improve the app. This data is not tied to your personal identity.
• Local storage: The app stores preferences, cached insights, and dismissed items locally on your device using AsyncStorage. This data does not leave your device unless synced as described elsewhere in this policy.

Information We Collect from Other Sources

• Payment information: Subscription payments are processed by Apple (App Store), Google (Play Store), or Stripe (web). We never see or store your card number, CVV, or billing address. We receive only a confirmation of your subscription status via RevenueCat, our subscription management provider.

3. How and Why We Use Information

Purposes for Using Information

We use information about you for the purposes listed below:

• To provide our Services: Store and sync your pet logs, analytics, streaks, badges, and household data across your devices.
• AI-powered insights: Analyse your logged events to generate routine insights (Smart Insights feature). Your event data is processed by our server-side edge functions and may be sent to a third-party AI provider for analysis. Personal identifying information is stripped before processing — only anonymised event patterns (types, timestamps, frequencies) are sent.
• Push notifications: Send reminders you have configured and household activity alerts you have opted in to.
• Subscription management: Verify your premium status and manage billing through RevenueCat and the relevant app store or Stripe.
• To ensure quality and improve our Services: Fix bugs and improve the app based on aggregated, anonymised usage patterns.
• To communicate with you: Respond to support requests and send important notices about our Services.

Legal Bases for Collecting and Using Information

For those in the European Union and UK, our use of your information is based on the grounds that:

1. The use is necessary to fulfil our commitments to you under the applicable terms of service or to administer your account;
2. The use is necessary for compliance with a legal obligation;
3. The use is necessary to protect your vital interests or those of another person;
4. We have a legitimate interest in using your information — for example, to provide and improve our Services, to communicate with you, and to monitor and prevent problems with our Services; or
5. You have given us your consent — for example, before we collect GPS location data or send push notifications.

4. Sharing Information

We do not sell, rent, or share your personal data with third parties for marketing purposes. We share information only in the limited circumstances described below:

• Supabase: Our database hosting and authentication provider. Your data is stored in Supabase (hosted on AWS in the EU region). All data is encrypted in transit (TLS) and at rest. Database access is protected by Row Level Security (RLS) policies ensuring you can only access your own household's data.
• RevenueCat: Subscription management and billing status. We share your anonymised user ID with RevenueCat to manage premium entitlements.
• Apple / Google: Payment processing for mobile subscriptions. We do not receive or store payment card details from these providers.
• Stripe: Payment processing for web subscriptions only, facilitated through RevenueCat. We do not directly handle your payment card data.
• Firebase Cloud Messaging (FCM) / Expo: Push notification delivery. Your device token is shared with these services to deliver notifications you have opted in to.
• AI provider: Anonymised event data (stripped of personal identifying information) may be sent to a third-party AI provider for Smart Insights generation.
• Legal and regulatory requirements: We may disclose information about you in response to a subpoena, court order, or other governmental request.
• To protect rights, property, and others: We may disclose information about you when we believe in good faith that disclosure is reasonably necessary to protect the property or rights of PupSavvy, third parties, or the public at large.
• Business transfers: In connection with any merger, sale of company assets, or acquisition, user information would likely be one of the assets transferred. This Privacy Policy would continue to apply to your information.
• Aggregated or de-identified information: We may share information that has been aggregated or de-identified so that it can no longer reasonably be used to identify you.

5. Household Sharing

PupSavvy allows you to join a household so that multiple family members can coordinate pet care. When you are a member of a household:

• All members can see shared pet data, event logs, and activity.
• Your display name and activity will be visible to other household members.
• Household roles (owner, member) determine administrative privileges.

You can leave a household at any time. Household membership is managed within the app.

6. How Long We Keep Information

We generally discard information about you when it's no longer needed for the purposes for which we collect and use it and we're not legally required to keep it.

Your data is retained for as long as your account is active. If you delete your account, all personal data is permanently removed within 30 days. Anonymised, aggregated statistics may be retained for service improvement.

7. Security

While no online service is 100% secure, we work hard to protect information about you against unauthorised access, use, alteration, or destruction, and take reasonable measures to do so.

• All data is encrypted in transit (TLS) and at rest.
• Database access is protected by Row Level Security (RLS) policies — you can only access your own household's data.
• Photos are stored with private access policies in Supabase Storage.
• Passwords are securely hashed — we never store them in plain text.

8. Choices

You have several choices available when it comes to information about you:

• Limit the information you provide: You can choose not to add optional information like pet medical notes, event photos, or a profile avatar.
• Control GPS tracking: Location tracking is opt-in. You can disable it at any time through your mobile device's operating system permissions.
• Manage push notifications: You can enable or disable push notifications at any time via the app settings or your device settings.
• Disable AI insights: You can toggle Smart Insights off in the app settings to stop event data from being sent for AI analysis.
• Delete your account: Go to Settings → Account → Delete Account in the app. This action is permanent and removes all your data from our servers.

9. Your Rights

European General Data Protection Regulation (GDPR)

If you are located in a country that falls under the scope of the GDPR, data protection laws give you certain rights with respect to your personal data, subject to any exemptions provided by the law, including the rights to:

• Request access to your personal data;
• Request correction or deletion of your personal data;
• Object to our use and processing of your personal data;
• Request that we limit our use and processing of your personal data; and
• Request portability of your personal data.

You also have the right to make a complaint to a government supervisory authority.

US State Privacy Laws

Laws in some US states (including California, Virginia, Colorado, Connecticut, and others) may give you additional rights regarding your personal information, including the right to:

• Request a copy of the personal information we collect about you;
• Request deletion of personal information we collect or maintain;
• Request correction of personal information we collect or maintain;
• Opt out of the sale or sharing of personal information; and
• Not receive discriminatory treatment for exercising your rights.

We never directly sell your personal information. We do not use advertising cookies or tracking pixels.

Exercising Your Rights

You can usually access, correct, or delete your personal data using your account settings and tools within the app (such as the Delete Account feature). If you need additional help or want to exercise any of the rights described above, contact us at support@pupsavvy.app.

10. Children's Privacy

PupSavvy is not directed at children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us and we will delete it.

11. Cookies & Tracking

The PupSavvy web app uses only essential cookies for authentication (session tokens). We do not use advertising cookies, tracking pixels, or third-party analytics cookies.

12. Privacy Policy Changes

Although most changes are likely to be minor, PupSavvy may change its Privacy Policy from time to time. We encourage you to check this page for any changes. If we make significant changes, we will notify you via the app or by email. Your continued use of PupSavvy after changes constitutes acceptance of the updated policy.

13. How to Reach Us

If you have questions about this Privacy Policy, or you would like to contact us about any of your rights described above, please contact us at:
support@pupsavvy.app

14. Creative Commons

This Privacy Policy is adapted from Automattic's Privacy Policy, available under a Creative Commons Sharealike license. You can find the original on GitHub. We've adapted and revised it to reflect PupSavvy's actual practices.