Overview and scope
Pupwell is provided by Mindvia Digital. This engineering-informed policy draft must receive legal review before publication. Contracting-entity details, jurisdiction, international-transfer terms, age eligibility, and final retention schedules remain business and legal inputs and are not invented here.
Pupwell organizes dog care and provides general education. Dog-care information is not human health data and Pupwell is not a veterinary diagnosis or emergency service.
Account and cloud data
When you create an account, Supabase may process your email address, authentication user ID, session information, and sign-in method. If you choose Google OAuth, Google and Supabase participate in that sign-in flow according to the permissions shown to you.
Authenticated cloud features may store core dog-profile fields, private dog avatars, Moments photos and captions, Family owner/member relationships and invite information, and server-side subscription entitlement mirrors. Family members may see content shared within the Family feature according to their role.
Information stored on your device
Important Pupwell domains are currently local-only and are not automatically backed up to Pupwell’s cloud. These may include learning progress, courses, exercises, achievements, walk history and route coordinates, tracking and care entries, reminders, health and vaccination notes, selected onboarding answers, and some profile metadata.
Local information may be lost when the app is uninstalled, app data is cleared, or the device is reset. Deleting a cloud account does not remotely erase local files from a device that Pupwell cannot reach.
Location, photos, and notifications
- Location: precise foreground location may be used to record a walk route, time, and distance. Pupwell does not currently require background location to record general walk notes.
- Photos and camera: used when you choose images for a dog avatar, walk or tracking record, or private Moment. Some media stays on-device; authenticated avatars and Moments may upload to private Supabase Storage.
- Notifications: used to schedule local dog-care reminders through your operating system. No production remote-marketing push backend is currently identified.
Pupwell does not currently claim microphone recording or Apple HealthKit collection.
Subscriptions and purchases
On iOS, Apple processes payment through the App Store and RevenueCat helps retrieve offerings, restore purchases, and administer entitlement state, including Pupwell Pro and Family access. Pupwell does not receive your full payment-card details from StoreKit. Android billing is not currently available.
Deleting an account does not automatically cancel an App Store subscription, and cancelling a subscription does not delete your account or data.
Service providers
Material providers currently include Supabase for authentication and cloud infrastructure, RevenueCat for iOS subscription administration, Apple for App Store payments and operating-system services, and Google when you choose Google OAuth. Expo and React Native modules support app runtime features; use of a framework does not mean every local record is sent to that provider.
Some app surfaces may load remote media from Unsplash or Tenor, which can receive ordinary network request metadata when those assets load. This must be revalidated against the release build.
How information is used and shared
Information is used to authenticate you, provide and personalize app features, save eligible cloud content, share invited Family content, administer subscriptions, respond to support, maintain security, and troubleshoot the service. Information may be disclosed to the providers above, when required by law, or where necessary to protect users, animals, and the service. Pupwell does not claim to sell personal information.
Retention and security
Cloud retention periods depend on the category, operational requirements, provider settings, and applicable law. A final retention schedule has not yet been approved, so this policy does not promise an invented period. Some records may need to be retained for security, fraud prevention, legal, or accounting obligations after a deletion request.
Reasonable technical and organizational safeguards are intended, including private storage access for eligible media. No system can guarantee complete security. Deployed Supabase backups, logs, region, row-level security, and storage-cleanup behavior require final production verification.
Your choices and rights
Depending on where you live, you may request access, correction, export, restriction, objection, or deletion by emailing support@pupwell.app from the address connected to your account. We may need to verify your identity and will not ask for your Apple password, Google password, Pupwell password, full purchase receipt, or full payment details by email.
For deletion scope and the current verified-request workflow, visit Delete Account.
Children’s privacy
Pupwell is intended for dog owners and is not designed as a service directed to children. Final eligibility and parental-consent language must be confirmed before launch for each offered region.
Changes and contact
We may update this policy as Pupwell, its providers, or legal requirements change. The latest version and updated date will appear here. Questions can be sent to support@pupwell.app.