Privacy policy

Who is responsible for your data

The controller of your personal data is:

• Name: [to be filled: legal name]
• Registered seat: [to be filled: registered seat]
• Company registration number: [to be filled: company registration number]
• Tax number: [to be filled: tax number]
• Email: hello@wuffwuffwuff.com

You can reach us about anything in this policy at hello@wuffwuffwuff.com.

What data we process

We process only the data you give the app and the data needed to run it:

• Account: when you start as a guest, an anonymous identifier. When you create an account, your email address; we send a 6-digit sign-in code to it.
• Sign-in with Apple or Google: we may offer these. If you use one, the provider shares your name, email address and an account identifier with us, as shown on its sign-in screen, and we may store the name as your display name.
• Dog records: your dog's name, breed, date of birth, sex, whether it is neutered, weight, microchip number, coat colors and notes; a profile photo if you add one; health events such as vaccinations, medications and vet visits; care checks; routine logs such as meals and walks; and reminders.
• Notification settings: whether reminders and the daily digest are on, and the digest time.
• Technical data: when the app talks to our servers, Supabase processes your IP address and request details. When the app checks for updates, the update service receives request data such as your IP address, device platform and app version.

Photos, camera and notifications

The app asks for access to your photos or camera only when you set a profile photo. The photo is resized on your phone and stored privately; only your account can open it.

Reminders and the daily digest are scheduled on your phone and appear only if you allow notifications. We do not collect a push token. You can turn notifications off in the app or in your phone settings.

What we do not do

The app has no analytics, no advertising, no crash reporting and no location tracking. We do not sell your data. If we ever add any of these, we will update this policy first.

Why we process your data and on what legal basis

We rely on the following legal bases under Article 6(1) of the GDPR:

• Providing the service you asked for (your account, your dog records, sign-in codes and app updates): performance of a contract, Article 6(1)(b).
• Keeping the service secure and preventing abuse, for example limiting sign-in attempts per IP address: our legitimate interest, Article 6(1)(f).
• Notifications: part of the service (performance of a contract, Article 6(1)(b)). They are scheduled only on your phone and appear only after you allow them; you can withdraw that permission at any time.

You do not have to give us any data by law. Some features need certain data: a dog profile needs the dog's name, and an account needs an email address. Without an account you use Wuff as a guest, and your records cannot be restored on another phone. We do not make automated decisions about you and do not profile you.

Who processes data for us

We use these processors. They handle data only on our instructions:

• Supabase (Supabase, Inc., USA): database, sign-in and file storage. Your data is stored in the EU, in Ireland.
• Resend (Plus Five Five, Inc., USA): sends the sign-in emails. They are sent from Ireland, but Resend keeps its email logs, including your email address, in the USA.
• Expo (650 Industries, Inc., USA): delivers app updates.

Where personal data is transferred to the United States, the transfer relies on the EU–US Data Privacy Framework or on Standard Contractual Clauses, where applicable.

Apple and Google are not our processors. They distribute the app through their stores as independent controllers, and their own privacy policies apply. If you sign in with Apple or Google, that provider's policy also applies to the sign-in.

This website

The website has no cookies, no analytics and no forms. It is hosted by Vercel (Vercel Inc., USA), which processes your IP address and request details in its server logs to deliver the site and keep it secure.

The legal basis is our legitimate interest in running a secure website, Article 6(1)(f). Where applicable, the transfer to the United States relies on the EU–US Data Privacy Framework or on Standard Contractual Clauses.

How long we keep your data

We keep your data until you delete your account. You can do this in the app under Account, Delete account. Deleting your account removes the account, every dog with all of its records and reminders, and your stored photos.

Deleting a single dog removes its records, reminders and photo.

A guest account that has not been used for 30 days is deleted automatically, together with its dog records. Its photos are removed from our file storage within a few days.

Server, sign-in and security logs, which can contain your IP address and email address, and backups kept by our hosting providers are deleted on those providers' schedules, not when you delete your account.

Your rights

As a data subject you have the right to:

• access your data;
• have it corrected;
• have it erased;
• restrict its processing;
• receive it in a portable format;
• object to processing based on our legitimate interest;
• withdraw a permission you gave (such as notifications) at any time.

You can delete your account in the app at any time. For any other request, email hello@wuffwuffwuff.com. We answer within one month; if a request is complex, we may extend this by two months and will tell you why.

Complaints

If you think we handle your data unlawfully, please contact us first. You can also complain to the Hungarian data protection authority, or go to court; you can bring the case in the court of your place of residence.

Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH), 1055 Budapest, Falk Miksa utca 9–11.; postal address: 1363 Budapest, Pf. 9.; ugyfelszolgalat@naih.hu; www.naih.hu

Children

Wuff is meant for adults (18 and over) who own or care for a dog.

Changes to this policy

We announce material changes in the app or on this page. The date at the top shows when the current version took effect.