Privacy Policy

Data we collect

• Account data: when you first open the app we create an anonymous account — a random identifier (UID) with no name, email, or phone number attached. If you later choose to create a login, we additionally store your email address and a credential managed by our authentication provider. We never require your name or phone number.
• Your dog's profile: the details you enter (name, breed, age, weight, sex, activity level, allergies, behavior concerns) are stored on your device. They are transmitted to our servers only within each coaching request, to generate the response, and are not stored on our servers.
• Coaching conversations: your chat messages with the coach are stored on your device only. When you send a message, it (together with your dog's profile) is transmitted through our infrastructure to our AI provider to generate the coach's reply. We do not store your conversations on our servers.
• Subscription state: if you start a trial or subscription we store a minimal entitlement record keyed to your UID: tier, source, and expiry timestamps. Payment itself is handled entirely by Google Play or the Apple App Store — we never see or store your payment card details.
• Usage statistics (optional): with your consent (a toggle in Profile, on by default and switchable at any time), we record a small set of product events (for example "app installed", "first message sent"). Each event contains only: the event name, the date, the app version, your country (derived at our server edge, not GPS), a cohort week, and an acquisition channel. Events are keyed by an irreversibly hashed version of your UID (salted, one-way) — we cannot link them back to you. Turning the toggle off stops all event collection immediately.
• Website behaviour: on this marketing site only (dawg.city), we collect product-analytics events plus session replays — what you tap and scroll, which pages you visit, and how far you get in the free assessment. Inputs in forms (name, email, message bodies) are masked by default and never recorded in the replays. We use this to find drop-off points and improve the funnel, not to profile individuals. Replays do not run inside the mobile app and do not run if your browser sends a Do-Not-Track signal.

What we do NOT collect: precise location, contacts, photos, microphone or camera data, advertising identifiers, or any data from other apps.

How we use it

• Personalised coaching: your dog's profile is sent with each chat request to the AI model so the response is specific to your dog — then discarded server-side.
• Trials and subscriptions: the entitlement record decides what your account can access.
• Keeping the service safe: short-lived, automatically-expiring rate-limit counters protect the service from abuse.
• Service improvement (with consent only): anonymized, unlinkable usage events help us understand aggregate product usage. We do not use your data for advertising and we do not sell or rent it to anyone, ever.

Third-party services

Dawg relies on a small number of processors. Each one handles only the data it needs.

• Google Firebase — authentication only: your anonymous UID, and your email if you create a login.
• Cloudflare — our server infrastructure (Workers, database, storage) and this website. Sees request traffic and the minimal records described above.
• Anthropic — runs the AI model that powers the coaches. Your messages and dog profile are sent per request to generate the reply; per our API agreement this content is not used to train their models.
• PostHog — product analytics + session replay on dawg.city only. EU-region hosting. Form inputs are masked by default. We honour the browser's Do-Not-Track signal — when DNT is on, PostHog records nothing. Does not run inside the mobile app.
• Google Play / Apple App Store — billing, under their own policies; we receive only entitlement status. Card details never touch our servers.

We do not share data with any other third parties, except if required by law.

Data retention

On-device data (dog profile, conversations) stays until you delete the app's data or your account. Server-side: the entitlement record persists while your account exists; rate-limit counters expire automatically within 48 hours; web-to-app assessment handoffs expire within 30 days; anonymized usage events are retained as aggregate statistics (they cannot be linked back to you).

Deleting your account and data

You can delete your account at any time, in the app: Profile → Delete account. This permanently removes your account identifier, your entitlement record, and any pending server-side data, and wipes the training history stored on your device. It cannot be undone.

If you can no longer access the app, follow the steps on our account deletion page or email support@dawg.city from any address, and we will process your request within 30 days. Anonymized usage statistics are not affected by deletion, because they cannot be tied to your account.

Security

Traffic is encrypted in transit (HTTPS). Server-side records are minimal by design — see "Data we collect". Authentication credentials are managed by Google Firebase, not stored by us.

Your rights

Depending on where you live (e.g., GDPR in the EU/UK, CCPA in California), you may have rights to access, correct, export, or erase your personal data, and to withdraw consent. The in-app deletion path and the usage-statistics consent toggle implement erasure and withdrawal directly; for anything else, email support@dawg.city and we'll respond within 30 days. You may also have the right to complain to your local data-protection authority.

Children

Dawg is not directed at children under 13 (or the higher age your jurisdiction requires) and we do not knowingly collect personal data from them. If you believe a child has provided us data, email support@dawg.city and we'll delete it.

Changes

We will post any material changes to this policy at this URL and, where appropriate, notify you in the app. The date above always reflects the current version.

Contact

Privacy questions and data requests: support@dawg.city.