Privacy policy

1. Who we are

Doggolos is a product of Farmyard Labs Ltd, a company registered in England and Wales (company no. 17507812), whose registered office is at 124-128 City Road, London, England, EC1V 2NX. Farmyard Labs Ltd ("we", "us") is the controller of the personal information described here, which means we decide why and how it is used. This policy explains what we collect, why, who we share it with, how long we keep it and your rights.

2. What we collect, why, and our legal basis

• Your account. Your email address, display name and password (stored as a one-way hash, so nobody can read it), a random account ID, an avatar colour, a language setting, the date you created the account, and a record of which version of our Terms and Privacy Policy you accepted and when. Handled by our authentication provider, Supabase. We email you a code to confirm a new account or to reset a password. We use it to create and run your account and sign you in. Legal basis: it is needed to provide the service you signed up for (contract). We keep the acceptance record because we have a legitimate interest in being able to show which terms you agreed to. You need an account to use Doggolos.
• Your household and your dogs' records. Your household's name and country, and your dogs' names, coats, breeds and birthdays. Also the dates, tasks, plans, food and spending entries you add, and the notes you write, including anything you save from your vet. Each entry records who added, changed or completed it, and when. This is stored by Supabase so that everyone in the household sees the same records, and each member's device keeps a copy so Doggolos works without a signal. Legal basis: contract. Before you create an account, what you tell Doggolos about your dogs stays on your device and we don't receive it.
• Invites. When the primary invites someone, we create a link and a short code. We keep only scrambled (hashed) versions of them, so we can check them when they are used, along with who invited and who joined. Each works once and expires after 7 days. We don't ask for or keep the email address or phone number of the person invited. Legal basis: contract.
• Your subscription. Apple or Google takes the payment, and we never see your card details. Our subscription provider, RevenueCat, receives the account ID of the person who subscribes (not their name or email), the purchase receipt from the store, and technical details such as the device type and operating system. It tells us whether the household has an active plan, and we keep that plan, its status, when the free period ends and when it renews on the household's record, which the household's members can see. Legal basis: contract.
• Emails about your subscription. We email the person who subscribes: when the free period starts, a reminder before the first charge and before renewals, a notice when the cooling-off period starts, and a note when the subscription is cancelled. They go to the email address on that person's account. Legal basis: contract.
• Your reminders. The choices you make (the time of your morning round-up, your quiet hours and which kinds of reminder you want) are stored with your account, per household, so they follow you to a new device. The reminders themselves are scheduled on your device. We don't use push notifications.
• Support. If you email us, we keep the email so we can read and answer it. Legal basis: our legitimate interest in answering you, and contract where you need help with the service.
• On your device. Doggolos stores your sign-in session, a copy of your household's records and your settings on your device. It is all needed for the app to work, and none of it is used for advertising or tracking.

3. People in your household

• What members see. Everyone in a household can see everything in it: the dogs, dates, notes, food, plans and costs, with the name of the person who logged each thing. They can also see the household's plan, its status and when it renews or ends. They can see your display name and avatar colour. They can't see your email address or anything about how you pay, and we never hold card details.
• What the primary can do. The primary can invite and cancel invites, remove members, hand the primary role to another member, and sees who invited and who joined.
• What stays when you leave. If you leave or are removed, your name stays on what you logged. If you delete your account, it shows as "a former member". The records belong to the household, so they stay for the people still in it.

4. Who we share it with

These providers act on our instructions, under written contracts:

• Supabase, for sign-in and to store your account, your household's records and its invites (Ireland).
• RevenueCat, for subscription status (United States).
• Our email sending service, to deliver the emails described above (sign-in codes and subscription emails).

Apple and Google run the App Store and Google Play and handle your payment. They are separate controllers of the information about your purchase, under their own privacy policies. As with any online service, each provider's servers can see the IP address your device connects from. We don't sell your data, we don't show ads or use tracking-based advertising, and we don't track you across other companies' apps. We may also share information if the law requires it. We don't make decisions about you by automated means that have legal or similarly significant effects.

5. Where your data goes

Your account details, your household's records and its invites are stored in Ireland. The UK treats countries in the European Economic Area as providing adequate protection for personal data. RevenueCat processes data on servers in the United States. Our contract with RevenueCat includes standard contractual clauses together with the UK's International Data Transfer Addendum, which are safeguards the UK recognises for this kind of transfer.

6. How long we keep it

• Your account details, your reminder choices and the record of the terms you accepted are kept until you delete your account, and are then removed from our systems. Any copies in our providers' backups are overwritten as those backups roll over.
• A household's records are kept for as long as the household exists. If you delete your account and others remain in the household, the records stay with them. If nobody is left, the household is archived and deleted after 30 days.
• RevenueCat keeps your subscription record for as long as it is needed to run and account for the subscription and to meet legal obligations. Deleting your Doggolos account does not automatically delete it: email us and we will ask RevenueCat to remove it, apart from what the law requires it to keep. Apple and Google keep billing records for as long as the law and their own policies require.
• Emails you send us are kept for as long as we need them to deal with your query and any follow-up.
• You can delete your account at any time at doggolos.app/delete-account, where we confirm it's you with a code we email you. This permanently removes your account, your place in any household, your reminder choices and the record of the terms you accepted. It does not cancel a subscription: cancel that in your App Store or Google Play settings. If you are the primary of a household with other people in it, hand the primary role to someone else first. Export your records first if you want a copy.

7. Your rights

Under UK data protection law you can ask us to show you the personal information we hold about you, to correct it, to delete it, to restrict how we use it, and to object to our use of it where we rely on our legitimate interests. Where we use information under a contract you can ask for a copy in a portable form, and where we rely on your consent you can withdraw it at any time. Email us using the details below. We will reply within one month and will not normally charge. We may need to check who you are first.

If you are unhappy with how we have handled your information, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

8. Children

Doggolos is for people aged 18 or over. We don't knowingly collect information from children.

9. Changes to this policy

We may update this policy. If a change is significant, the app will show you the new version to accept. The date at the top of the accept screen is the version you are agreeing to, and the version and date are at the top of this page.

10. Contact

Questions about this policy: support@doggolos.app, or write to Farmyard Labs Ltd, 124-128 City Road, London, England, EC1V 2NX.

Farmyard Labs Ltd is registered with the Information Commissioner's Office (registration reference ZC269385).