Privacy Policy

Last updated: 27 September 2026

Your privacy is critically important to us. At PupSavvy, we have a few fundamental principles:

• We are thoughtful about the personal information we ask you to provide and the personal information that we collect about you through the operation of our services.
• We store personal information for only as long as we have a reason to keep it.
• We aim to make it as simple as possible for you to control what information is shared, and to permanently delete your data when you choose.
• We aim for full transparency on how we gather, use, and share your personal information.

Below is our Privacy Policy, which incorporates and clarifies these principles.

1. Who We Are and What This Policy Covers

We are PupSavvy ("we", "our", "us"), the makers of a pet care tracking application designed to help dog owners log daily events, monitor routines, gain AI-powered insights, and coordinate care among household members.

This Privacy Policy applies to information that we collect about you when you use:

• Our website at pupsavvy.app;
• Our mobile applications for iOS and Android; and
• Our web application and all related features and services (collectively, "Services").

Throughout this Privacy Policy we refer to our website, mobile applications, and other products and services collectively as "Services."

2. Information We Collect

We only collect information about you if we have a reason to do so — for example, to provide our Services, to communicate with you, or to make our Services better. We collect information from three sources: information you provide to us directly, information collected automatically through operating our Services, and information from outside sources.

Information You Provide to Us

• Account information: When you create a PupSavvy account, we require an email address and password. Your password is hashed and never stored in plain text. You may optionally set a display name or upload a profile photo.
• Pet data: You voluntarily enter information about your pets, including names, breed, date of birth, sex, weight, and medical notes. This data belongs to you and is stored to provide the core functionality of the app.
• Event logs: When you log events (walks, meals, poos, wees, exercises, accidents, and custom event types), we store the event type, timestamp, optional text notes, and optional photo attachments.
• Photos: If you attach photos to events or upload a profile avatar, we store those images in secure cloud storage with private access policies.
• Location data: If you enable GPS location tracking (a Premium feature, e.g. for walk tracking), we store coordinate data associated with those events. Location tracking is entirely opt-in and can be disabled at any time via your device's operating system permissions.
• Communications: If you contact us for support by email, we store a copy of our correspondence.

Information We Collect Automatically

• Device information: When you open the app, we automatically record your device platform (iOS, Android, or Web), operating system version, and IANA timezone identifier (e.g. Europe/London). This information is stored against your anonymous or registered user profile in our database and is used solely to improve our Services and inform decisions about which platforms and regions to support. We do not sell your data to advertisers.
• Usage information: The app records which screens you open and which features you use, for example that you finished onboarding, logged a walk or opened the Premium screen, with the time, your device platform and your app version. We also record account events such as starting a trial, joining a household or buying Premium. These records are linked to a random account ID, never to your email or name, and never include anything you type, such as your pets' names, notes or the names of your own event types. We use them to see which features work and to improve the app, and we send them to PostHog, our product analytics provider (see Section 4). You can switch this off at any time under Settings → Appearance & Preferences → Share usage data. The choice applies to your account on every device. Switching it off stops the app recording usage and stops anything being sent to PostHog; we still keep our own records of trials and purchases, because we need them to run your subscription.
• Crash and error reports: If the app crashes or runs into an error, it sends a report to Sentry, our crash reporting provider, so we can find and fix the problem. A report contains the device model, operating system version, app version and update identifier, the time of the error, and technical details such as the error message, the code path that failed, and which screen was open. Reports are tied to a random installation identifier rather than to your name or email, and they do not include your pet data, notes, or photos. Your IP address is used to deliver the report and is not stored with it. Reports are kept for 90 days.
• Local storage: The app stores preferences, cached insights, and dismissed items locally on your device using AsyncStorage. This data does not leave your device unless synced as described elsewhere in this policy.

Information We Collect from Other Sources

• Payment information: Subscription payments are processed by Apple (App Store), Google (Play Store), or Stripe (web). We never see or store your card number, CVV, or billing address. We receive only a confirmation of your subscription status via RevenueCat, our subscription management provider.

3. How and Why We Use Information

Purposes for Using Information

We use information about you for the purposes listed below:

• To provide our Services: Store and sync your pet logs, analytics, streaks, badges, and household data across your devices.
• AI-powered insights: Analyse your logged events to generate routine insights (Smart Insights feature). Your event data is processed by our server-side edge functions and may be sent to a third-party AI provider for analysis. Personal identifying information is stripped before processing — only anonymised event patterns (types, timestamps, frequencies) are sent.
• Push notifications: Send reminders you have configured and household activity alerts you have opted in to.
• Subscription management: Verify your premium status and manage billing through RevenueCat and the relevant app store or Stripe.
• To ensure quality and improve our Services: Fix bugs and improve the app based on aggregated, anonymised usage patterns.
• To communicate with you: Respond to support requests and send important notices about our Services.

Legal Bases for Collecting and Using Information

For those in the European Union and UK, our use of your information is based on the grounds that:

1. The use is necessary to fulfil our commitments to you under the applicable terms of service or to administer your account;
2. The use is necessary for compliance with a legal obligation;
3. The use is necessary to protect your vital interests or those of another person;
4. We have a legitimate interest in using your information — for example, to provide and improve our Services, to communicate with you, and to monitor and prevent problems with our Services; or
5. You have given us your consent — for example, before we collect GPS location data or send push notifications.

4. Sharing Information

We do not sell, rent, or share your personal data with third parties for marketing purposes. We share information only in the limited circumstances described below:

• Supabase: Our database hosting and authentication provider. Your data is stored in Supabase (hosted on AWS in the EU region). All data is encrypted in transit (TLS) and at rest. Database access is protected by Row Level Security (RLS) policies ensuring you can only access your own household's data.
• RevenueCat: Subscription management and billing status. We share your anonymised user ID with RevenueCat to manage premium entitlements.
• Apple / Google: Payment processing for mobile subscriptions. We do not receive or store payment card details from these providers.
• Stripe: Payment processing for web subscriptions only, facilitated through RevenueCat. We do not directly handle your payment card data.
• Firebase Cloud Messaging (FCM) / Expo: Push notification delivery. Your device token is shared with these services to deliver notifications you have opted in to.
• Sentry: Crash and error reporting, as described in Section 2. Reports are sent to Sentry (Functional Software, Inc.) and stored in its EU data region. Sentry processes them only to provide the service to us.
• PostHog: Product analytics, as described in Section 2. Usage records are sent to PostHog (PostHog Inc.) and stored in its EU data region in Frankfurt, linked to a random account ID. PostHog does not store IP addresses for us or use them to locate you. PostHog processes the data only to provide the service to us. Nothing is sent if you have switched off Share usage data.
• AI provider: Anonymised event data (stripped of personal identifying information) may be sent to a third-party AI provider for Smart Insights generation.
• Legal and regulatory requirements: We may disclose information about you in response to a subpoena, court order, or other governmental request.
• To protect rights, property, and others: We may disclose information about you when we believe in good faith that disclosure is reasonably necessary to protect the property or rights of PupSavvy, third parties, or the public at large.
• Business transfers: In connection with any merger, sale of company assets, or acquisition, user information would likely be one of the assets transferred. This Privacy Policy would continue to apply to your information.
• Aggregated or de-identified information: We may share information that has been aggregated or de-identified so that it can no longer reasonably be used to identify you.

5. Household Sharing

PupSavvy allows you to join a household so that multiple family members can coordinate pet care. When you are a member of a household:

• All members can see shared pet data, event logs, and activity.
• Your display name and activity will be visible to other household members.
• Household roles (owner, member) determine administrative privileges.

You can leave a household at any time. Household membership is managed within the app.

6. How Long We Keep Information

We generally discard information about you when it's no longer needed for the purposes for which we collect and use it and we're not legally required to keep it.

Your data is retained for as long as your account is active. If you delete your account, all personal data is permanently removed within 30 days. Anonymised, aggregated statistics may be retained for service improvement. Crash and error reports held by Sentry are deleted after 90 days. Usage records held by PostHog are kept for up to one year, and when you delete your account we ask PostHog to delete yours straight away.

7. Security

While no online service is 100% secure, we work hard to protect information about you against unauthorised access, use, alteration, or destruction, and take reasonable measures to do so.

• All data is encrypted in transit (TLS) and at rest.
• Database access is protected by Row Level Security (RLS) policies — you can only access your own household's data.
• Photos are stored with private access policies in Supabase Storage.
• Passwords are securely hashed — we never store them in plain text.

8. Choices

You have several choices available when it comes to information about you:

• Limit the information you provide: You can choose not to add optional information like pet medical notes, event photos, or a profile avatar.
• Control GPS tracking: Location tracking is opt-in. You can disable it at any time through your mobile device's operating system permissions.
• Manage push notifications: You can enable or disable push notifications at any time via the app settings or your device settings.
• Stop sharing usage data: Switch off Settings → Appearance & Preferences → Share usage data. It applies to your account on every device.
• Disable AI insights: You can toggle Smart Insights off in the app settings to stop event data from being sent for AI analysis.
• Delete your account: Go to Settings → Account → Delete Account in the app. This action is permanent and removes all your data from our servers.

9. Your Rights

European General Data Protection Regulation (GDPR)

If you are located in a country that falls under the scope of the GDPR, data protection laws give you certain rights with respect to your personal data, subject to any exemptions provided by the law, including the rights to:

• Request access to your personal data;
• Request correction or deletion of your personal data;
• Object to our use and processing of your personal data;
• Request that we limit our use and processing of your personal data; and
• Request portability of your personal data.

You also have the right to make a complaint to a government supervisory authority.

US State Privacy Laws

Laws in some US states (including California, Virginia, Colorado, Connecticut, and others) may give you additional rights regarding your personal information, including the right to:

• Request a copy of the personal information we collect about you;
• Request deletion of personal information we collect or maintain;
• Request correction of personal information we collect or maintain;
• Opt out of the sale or sharing of personal information; and
• Not receive discriminatory treatment for exercising your rights.

We never directly sell your personal information. We do not use advertising cookies or tracking pixels.

Exercising Your Rights

You can usually access, correct, or delete your personal data using your account settings and tools within the app (such as the Delete Account feature). If you need additional help or want to exercise any of the rights described above, contact us at support@pupsavvy.app.

10. Children's Privacy

PupSavvy is not directed at children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us and we will delete it.

11. Cookies & Tracking

The PupSavvy web app uses only essential cookies for authentication (session tokens). We do not use advertising cookies, tracking pixels, or third-party analytics cookies. Usage records (Section 2) are sent to PostHog from our servers, not from your browser, and set no cookies.

12. Privacy Policy Changes

Although most changes are likely to be minor, PupSavvy may change its Privacy Policy from time to time. We encourage you to check this page for any changes. If we make significant changes, we will notify you via the app or by email. Your continued use of PupSavvy after changes constitutes acceptance of the updated policy.

13. How to Reach Us

If you have questions about this Privacy Policy, or you would like to contact us about any of your rights described above, please contact us at:
support@pupsavvy.app

14. Creative Commons

This Privacy Policy is adapted from Automattic's Privacy Policy, available under a Creative Commons Sharealike license. You can find the original on GitHub. We've adapted and revised it to reflect PupSavvy's actual practices.