Privacy Policy

Last updated: September 5, 2026

1. Who we are

Pupperoni ("we", "us") is a puppy journal application that lets you record information about your dog's growth, health, training, and daily life. This policy explains what personal data we process, why, and what rights you have under the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and similar laws.

2. Data we collect

• Account data: your name, email address, and a hashed password. We never store passwords in plain text.
• Journal data: the information you choose to record about your dog (weights, activities, sleep, socialization, health notes, photos, and similar entries).
• Technical data: session tokens, IP address, and user-agent strings needed to keep your account secure.

3. Why we process it (legal bases)

• Contract: to provide the journal service you signed up for.
• Consent: given at signup; you may withdraw it at any time by deleting your account.
• Legitimate interest: to keep the service secure and prevent abuse.

4. Sharing and processors

Your journal data is visible only to you and the people you explicitly share a dog profile with. We use a small number of service providers to operate the app: an email delivery provider (Resend) to send verification, password-reset, and invitation emails, and, if you use the AI insights feature, an AI provider (Anthropic) that receives a summary of your dog's journal data (not your account credentials) to generate suggestions. We do not sell your personal information.

5. Retention

We keep your data for as long as your account exists. When you delete your account, your profile and all dogs you own — including photos and every journal entry — are permanently deleted.

6. Your rights

• Access & portability: export all of your data as JSON from Account settings at any time.
• Rectification: edit or delete individual entries in the app.
• Erasure ("right to be forgotten"): delete your account from Account settings; this cascades to all data you own.
• Objection & restriction: contact us to object to any processing.
• Complaint: EU residents may lodge a complaint with their local supervisory authority; California residents have rights under the CCPA including non-discrimination for exercising them.

7. Cookies

We use only strictly necessary cookies: a session cookie to keep you signed in, and a preference cookie that remembers your language choice. We do not use advertising or cross-site tracking cookies.

8. Security

Data is transmitted over HTTPS and stored in a managed PostgreSQL database. Passwords are hashed. Access to shared dog profiles is role-based (owner, read & write, read only).

9. Children

Pupperoni is not directed at children under 16 and we do not knowingly collect their data.

10. Contact

For any privacy request, contact the operator of this Pupperoni instance via the email address announced on the sign-up page or your invitation email.