Skip to main content

Privacy Policy

Effective date:

Draft document

This document is a working draft. It has not been reviewed by a qualified lawyer yet and may change before release.

This policy explains what information the PuppyPup iPhone app and this website handle, why, and what you can do about it. It is written to be read, not to be skimmed past.

PuppyPup is operated by Denys Petriiev, in Ukraine. Questions about this policy go to support.puppypup@gmail.com.

1. Who is responsible

The operator of PuppyPup is Denys Petriiev, Ukraine. Contact address for privacy questions: support.puppypup@gmail.com. General support: support.puppypup@gmail.com.

2. What this policy covers

This policy covers the PuppyPup app for iPhone and this website at puppypup.app. It does not cover services operated by other companies, even where PuppyPup connects to them — Apple and Google handle sign-in data under their own policies.

PuppyPup is a tool for keeping records about a dog. Those records describe an animal. They are not human medical data, and PuppyPup is not a medical or veterinary service. See the medical disclaimer.

3. What information is handled

Account information
Your e-mail address, whether it has been verified, your display name if you set one, a password hash if you use password sign-in, and the account identifier supplied by Google or Apple if you sign in that way.
Session information
Session and refresh token identifiers, a device installation identifier and your preferred language. These keep you signed in and let you sign out.
Dog profiles
Name, sex, breed, date of birth, description, photo and weight entries — everything you type in yourself.
Family and access
Which family you belong to, your role in it, which dogs belong to that family, and which people have been granted access to which dog, with what permissions and until when.
Care and health records
Feeding schedules and confirmations, grooming, preventive treatments, vaccinations, medicines, medical episodes and events, allergies, chronic conditions and your own notes.
Images
Photos of your dog and photographs of medical documents that you choose to upload, together with a normalised copy and technical file details such as size, type and upload time.
Technical and security information
Server logs, security and audit events such as sign-in attempts and token revocations, rate-limiting identifiers, IP addresses, app version and operating system version.

About photographs of documents

A photograph of a veterinary record, invoice or passport often contains your own name, address, phone number and clinic details as well as the dog’s. Please consider that before uploading one, and crop the image if you would rather not store those details.

4. Where the information comes from

  • From you — everything about your dog, your account details and anything you upload.
  • From Google or Apple — only when you choose to sign in that way: an account identifier, your e-mail address and basic profile information.
  • From another user — when someone invites you to a family or grants you access to their dog, they supply your e-mail address.
  • Automatically — technical information that any internet service receives when your app or browser makes a request, such as your IP address and app version.

5. Why the information is used

  • To create your account, verify your e-mail address and sign you in.
  • To keep you signed in on your device and to let you sign out.
  • To store and show the dog records you create, to you and to the people you share them with.
  • To send service e-mail such as verification and password reset.
  • To deliver reminders that you have configured.
  • To keep the service secure: to detect and slow down brute-force attempts and abuse, and to investigate security incidents.
  • To operate and fix the service.
  • To answer your support requests.

PuppyPup does not use your information for advertising, does not profile you for advertising, and does not sell it.

6. What is required and what is optional

An e-mail address and a sign-in method are required — without them there is no account. Everything about your dog is optional: you can create a profile with nothing but a name.

Photos, documents, health records, schedules and family sharing are all optional. Refusing any of them does not restrict the rest of the app.

7. Who can see your information

  • Your family members, according to the role each of them has.
  • People you have granted access to a specific dog, limited by the permissions you chose and by any expiry date you set.
  • Service providers that run parts of the service on our behalf, described in the next section.
  • Authorities, if we are legally required to disclose information — we do not disclose anything voluntarily.

Nothing you store in PuppyPup is public. Publicly shareable profiles are a planned feature and are not available today; if they ship, they will be off by default and this policy will be updated before they are switched on.

8. Service providers

PuppyPup relies on a small number of providers to run the service. Each of them only receives what it needs for its role:

  • Apple — Sign in with Apple, and distribution of the app through the App Store.
  • Google — Google Sign-In.
  • An e-mail delivery provider — to send verification and password-reset messages.
  • Application hosting, database and object storage providers — to run the backend and store your records and images.
  • Cloudflare — DNS and hosting for this website only.

The individual backend providers are not named here yet, because naming a provider we have not finished verifying would be worse than naming none. This section will be updated with the specific names before the app is released.

9. International transfers

Apple and Google operate globally, so signing in with either of them involves processing outside your own country. The location of the PuppyPup backend infrastructure will be stated in this section before the app is released; until it is confirmed, no claim is made about it.

10. How long information is kept

  • Account and dog records — for as long as your account exists.
  • Individual records — until you delete them.
  • Images — until you delete the record they belong to, or your account.
  • Security and server logs — for a limited operational period. The exact period is not published here, because it has not been confirmed with the providers yet.

After account deletion, copies may persist for a limited time in routine backups. No period is stated here because it has not been confirmed with the infrastructure providers yet. Backups are never used to restore a deleted account.

11. Security

  • Traffic between the app and the backend is encrypted in transit.
  • Passwords are stored as hashes, never in readable form.
  • Sign-in attempts are rate-limited, and security-relevant actions are recorded so that account takeover can be investigated.
  • Sessions can be revoked, and deleting your account revokes them.

No service can promise perfect security, and this one does not. Use a password you do not reuse elsewhere, or sign in with Apple or Google.

12. Your choices and rights

  • See and correct your data — dog profiles, records and account details can be edited in the app at any time.
  • Delete individual records — any record you created can be deleted in the app.
  • Withdraw access — access you granted to another person can be withdrawn at any time.
  • Delete your account — see account and data deletion.
  • Ask a question or make a request — write to support.puppypup@gmail.com.

Depending on where you live, local law may give you further rights, such as asking for a copy of your data or objecting to certain processing. Write to support.puppypup@gmail.com and we will tell you what we can do. This policy does not claim compliance with any specific statute; that assessment is being done separately with legal advice.

13. Google Sign-In

If you sign in with Google, PuppyPup requests only the basic scopes openid, email and profile. That gives us your Google account identifier, your e-mail address and basic profile information such as your name.

PuppyPup does not request access to your Gmail, Drive, Contacts, Calendar or any other Google service, and does not use Google data for advertising. You can review and revoke the connection at any time in your Google Account under third-party connections.

14. Sign in with Apple

If you sign in with Apple, PuppyPup receives an Apple account identifier and an e-mail address. If you choose to hide your address, Apple gives us a private relay address instead, and service e-mail is delivered through it.

You can review and revoke the connection in iOS Settings, under your Apple Account. Revoking it stops you signing in that way; it does not by itself delete your PuppyPup account — use in-app deletion for that.

15. Children

PuppyPup is meant for adults who look after a dog. It is not directed at children and does not knowingly collect information from a child. If you believe a child has created an account, write to support.puppypup@gmail.com and we will remove it.

16. This website

  • This site sets no cookies.
  • It runs no analytics, no tracking pixels and no session recording.
  • It loads no third-party scripts, fonts or embeds — everything is served from puppypup.app.
  • It has no sign-in, no contact form and no newsletter, so it collects nothing you type.

Like any web server, the hosting provider records technical request information such as IP address, user agent and requested URL, for delivery and security. The retention period at the provider is not published here because it has not been confirmed yet.

17. Changes to this policy

When this policy changes, the effective date at the top changes with it, and previous versions stay available on the legal page. For a change that materially affects you, you will be notified in the app or by e-mail before it takes effect.

18. Contact

Privacy questions and requests: support.puppypup@gmail.com. Anything else: support.puppypup@gmail.com.

Operator: Denys Petriiev, Ukraine.