Privacy notice
Privacy Policy
This policy explains what Good Dog collects, why it is used, which providers help process it, how long it may be retained, and how users can make privacy requests. It applies to the website and mobile apps offered in the initial launch markets described in the Terms of Service.
Privacy contact: support@mail.good-dog.app. Product support: support@mail.good-dog.app.
Effective date: October 13, 2026
Who this policy covers
1. Controller/operator and scope
This Privacy Policy explains how Good Dog collects, uses, discloses, retains, and protects information when you use the Good Dog website, mobile apps, APIs, recommendations, chat, check-ins, reminders, and subscription features.
Nikolay Andreychuk, a self-employed individual (trabalhador independente) established in Portugal and trading as Good Dog, is the operator/controller for the product features Good Dog provides. Public mailing address: Rua Rio Sorraia 10, 2865-540 Fernão Ferro, Portugal. Portuguese tax identification number (NIF): 315547855. App stores, authentication providers, payment processors, and other vendors may also act as independent controllers for their own services and privacy notices.
Privacy contact: support@mail.good-dog.app. Support contact: support@mail.good-dog.app. Telephone: +351 915 839 025.
Nikolay Andreychuk is the designated Privacy Officer for New Zealand and the Data Protection Officer contact for Singapore. Requests and questions for either role can be sent to the privacy contact above. These jurisdiction-specific contact roles do not represent an appointment as a formal GDPR Article 37 data protection officer.
Data categories
2. Information we collect
Good Dog may collect or process the following categories of information:
- Account and authentication data: account identifiers, sign-in provider profile details such as name or email when available, locale, timezone, adult declaration and when it was made, and session or security metadata.
- Website free month:if you sign in on the website to activate the free month for beta testers, we receive the same sign-in data from Clerk as in the app and store when your free month ends. If you had no Good Dog account yet, activating creates one with the website's language and your browser's time zone. If you sign in without activating, no Good Dog account is created, and Clerk keeps your sign-in data until you ask us to delete it.
- Android beta membership:when you join our Google Group for Android testers, Google shows us, as the group's manager, the name and email address of the Google account you join with. Requests you sent through our former beta request form stay in our support mailbox and are kept like support messages.
- Dog profile data: dog name, breed, birth date or birth-date precision, sex, neuter status, and related profile details.
- Questionnaire, check-in, chat, and recommendation content: owner-provided behavior descriptions, household context, daily observations, questions, assistant answers, selected knowledge-base context, generated recommendations, and reminder-related conversation items.
- Payment and subscription metadata: Account identifiers, purchases, subscription status, renewal dates, and refunds. Good Dog does not collect full payment card numbers.
- Push and notification data: Expo push tokens and routing metadata when reminders or notifications are enabled.
- Local device data: auth tokens, questionnaire drafts, reminder choices, schedule preferences, analytics privacy choices, and app settings stored on the device or in browser storage.
- Diagnostics and security data: logs, API request context, device, browser, app, and sanitized Sentry metadata used to debug and secure the service, and the app update checks described in section 7.
- Anonymous aggregate measurement: limited website usage counts without identifying you or tracking individual activity. These anonymous counts apply only to the website.
- Optional product analytics: usage activity, pages visited, platform, language, subscription activity, and pseudonymous identifiers, collected only after you consent.
- AI-processing data: prompts, selected context, user-provided dog and behavior information, and generated outputs sent to AI providers as needed to produce recommendations, chat answers, or article-selection decisions.
We collect information directly from you when you sign in, create a dog profile, answer a questionnaire, use chat, request support or join the Android beta, or change settings. We also receive information indirectly from Clerk and your sign-in provider, Apple or Google and RevenueCat, your device, and service providers that deliver or secure a feature. Server requests generate limited operational and security metadata.
A sign-in identifier, adult declaration, AI-processing permission, and the dog or behavior context needed for the feature you request are required to provide the authenticated service. If you do not provide them, that feature cannot operate. Optional analytics and push notifications are not required. Fields marked optional in a form may be left blank, and private details unrelated to dog behavior should not be submitted.
Purposes and legal bases
3. Why we use information
We use information to:
- create accounts, authenticate users, and prevent unauthorized access;
- personalize dog profiles, recommendations, chat answers, check-ins, and reminders;
- process subscriptions, restore purchases, and maintain entitlement state;
- provide support, run beta tests, respond to legal/privacy requests, and communicate service notices;
- debug, monitor reliability, prevent abuse, and secure the service;
- count a limited set of product milestones without identifying users, devices, sessions, or individual journeys;
- improve product flows using optional privacy-safe analytics and experiment measurements after affirmative consent;
- comply with legal, tax, accounting, app-store, fraud-prevention, and safety obligations.
For EU/EEA users, we rely on contract to create the account and provide requested product and subscription features; consent for third-party AI processing, optional analytics, and device permissions where required; legitimate interests to secure, debug, support, and operate the service and to understand non-identifying website milestone totals; and legal obligations for tax, accounting, consumer, and privacy compliance. Our legitimate interests are limited by necessity, data minimization, user expectations, and your right to object. Third-party AI permission and optional analytics remain separate from general Terms acceptance in every launch market.
Private content and model providers
4. AI processing
Good Dog uses AI-assisted systems to generate dog behavior information from the context you provide. Outputs can be inaccurate, incomplete, delayed, or unsuitable for a specific dog or situation.
Before sharing your content with AI providers, Good Dog asks for your permission and explains what is shared and why. A material change to providers or processing requires renewed permission before you can continue using the app.
With your permission, we share relevant dog profiles, questionnaire responses, check-ins, chat messages, previous recommendations, and reference material with OpenAI to select reference material and generate recommendations and answers.
OpenAI API data is not used for training by default unless the account explicitly opts in. OpenAI may retain data as permitted by its service terms, including for service delivery, abuse monitoring, or legal obligations. See OpenAI's data-handling terms for details.
You can review or withdraw AI-processing permission in mobile Settings. AI processing is required to use Good Dog, so withdrawing blocks the authenticated product until you grant permission again, sign out, or delete your account. It does not change your optional analytics choice. Previously stored service records remain subject to the retention and deletion terms below.
Good Dog is not veterinary care, emergency assistance, a certified professional behavior consultation, legal advice, medical advice, diagnosis, treatment, or a guarantee of any outcome.
Who helps operate Good Dog
5. Vendors and processors
We share information with service providers only as needed for their role, our product operations, security, legal obligations, or the user-requested feature. The providers below support these activities; optional processing depends on your choices.
| Provider | Role | Data handled | Privacy safeguards |
|---|---|---|---|
| Clerk | Authentication, sign-in sessions, and user account management. | Account identifiers, sign-in provider profile data, session/security metadata. | No dog behavior content is intentionally sent for authentication. |
| Resend | Service emails and inbound support-email forwarding. | Email addresses, service messages, and support messages and attachments you send us. | Service emails exclude private dog, conversation, and payment content. Support messages go to our support mailbox and are not stored in the product database. |
| Vercel | Website and app hosting. | Request metadata, server logs, and application traffic needed to operate the service. | May process service requests that contain private app content. |
| Neon | Database hosting for account-linked product records. | Account information, dog profiles, questionnaires, check-ins, chats, recommendations, reminders, and subscription records. | Stores private product content needed to provide the service. |
| OpenAI | AI processing for reference selection, recommendations, and chat answers. | Relevant dog profiles, questionnaire responses, check-ins, chat messages, previous recommendations, reference material, and generated answers. | Receives private content only with your AI-processing permission. Training and retention practices are explained in the Privacy Policy. |
| RevenueCat | Subscription management and purchase restoration. | Account identifiers, purchases, subscription status, renewal dates, and refunds. | Does not intentionally receive private dog or conversation content, or full payment card details. |
| Apple App Store and Google Play | Payment processing, subscription management, refunds, store account controls, and beta testing. | Store account, transaction, subscription, refund, and app-store metadata handled by the stores, and the Google account you use to join our Android tester group on Google Groups, which Google Play uses to admit testers. | Good Dog does not receive full payment card numbers from the stores. |
| Expo application services | Push notification routing for reminders and product notifications when enabled, and delivery of mobile app updates. | Expo push tokens and notification routing metadata; for update checks, a random installation identifier, IP address, app version, platform, update channel and update identifiers, and the name and message of an error that stopped the app during startup. | Notifications use generic text without dog names, behavior details, or recommendation content. Update checks do not include account identifiers, and Good Dog does not intentionally include private dog or conversation content in them. |
| Sentry | Error monitoring, crash diagnostics, and reliability debugging. | Technical device/browser/app metadata and sanitized application context. | Good Dog does not intentionally send questionnaire text, chat content, recommendation text, prompts, or outputs to Sentry. |
| PostHog | Aggregate website usage measurement and optional product analytics. | Unlinked website usage counts; with optional consent, usage activity and pseudonymous account identifiers. | Private dog and conversation content is excluded. Optional analytics require consent; sessions and form contents are not recorded. |
Privacy choices
6. Analytics, cookies, and local storage
The website uses a necessary cookie to remember a language you pick and necessary local storage for your analytics choice. If you open the free month offer for beta testers, Clerk, our sign-in provider, uses necessary cookies and browser storage to sign you in and keep you signed in on the website, and may run a bot check during sign-in. Native mobile apps use secure or local device storage for authentication, drafts, reminders, settings, and privacy preferences.
Good Dog collects limited aggregate website usage counts without identifying users or tracking individual journeys. These counts do not use cookies or account or device identifiers. Optional account-linked analytics require your consent and stop when you withdraw it. Mobile usage analytics, when available, also require your consent. We do not intentionally send private dog profiles, questionnaire answers, chats, recommendations, contact details, payment credentials, or purchase receipts to our analytics provider. We do not record sessions or automatically capture form contents.
If you enable optional analytics, PostHog may use cookies and local storage to associate usage activity with a pseudonymous identifier. Optional analytics are off in every region until you choose to enable them. You can change your choice on the Privacy choices page, linked from the website footer. Core service records are stored separately as needed to provide the service, support, security, and legal compliance.
At launch, Good Dog does not sell personal information, share it for cross-context behavioral advertising, run targeted ads, or use advertising pixels.
Stores and permissions
7. Payments, subscriptions, push notifications, and app updates
Apple, Google, and RevenueCat process subscription and entitlement metadata. Purchase, refund, cancellation, and restore behavior may depend on your app-store account and store rules. Good Dog receives subscription status and related metadata, not full payment card numbers.
Push notifications are optional unless a specific feature requires them. If you enable reminders or notifications, Expo push tokens and routing metadata are used to deliver the notifications you request. You can manage device notification permissions through your device settings.
The mobile app checks Expo's update service when it starts, so fixes can arrive without a new app-store download. Each check sends a random identifier for the app installation, your device's IP address, the app version, platform, update channel, and the identifiers of the installed updates. If the app stopped during startup, the next check also includes that error's name and message. Update checks do not include your account identifier, and Good Dog does not intentionally include private dog or conversation content in them. These checks are part of how the app works and cannot be turned off separately.
How long information is kept
8. Retention, deletion, and account data
We keep account-linked product information while your account is active. If an account has no active subscription and is inactive for 24 months, we will give at least 30 days' notice before deleting it unless you sign in to the app before the date in that notice. Account deletion may take up to 28 days from your request. We act without undue delay and sooner where required by law.
Rolling service backups expire within 30 days after deletion from active systems. Routine operational and diagnostic logs are kept for up to 30 days, optional identifiable analytics for up to 12 months, and minimal consent and privacy-request evidence for up to three years. Tax or accounting records that Portuguese law requires may be retained for 10 years. Confirmed security incidents, disputes, or legal holds may require narrowly scoped records for longer; we will restrict them to that purpose.
Deleting account data does not automatically cancel an App Store or Google Play subscription. Users may need to cancel subscriptions through the relevant store, and Good Dog may retain limited payment, security, fraud-prevention, audit, or legal records where required or appropriate.
Regional privacy rights
9. Your privacy rights
Depending on where you live and which law applies, you may have rights to request access, correction, deletion, portability/export, restriction, objection, withdrawal of optional consent, information about sharing, non-discrimination for exercising rights, and a review or complaint path with a privacy authority.
People in the European Economic Area may have GDPR rights such as access, rectification, erasure, restriction, portability, objection, consent withdrawal, and a complaint to their local supervisory authority. In Portugal, the supervisory authority is the Comissão Nacional de Proteção de Dados (CNPD). Depending on where you live, you may have additional access, correction, deletion, complaint, or other rights under applicable local law. Some obligations depend on statutory business-size, activity, or other applicability thresholds. Good Dog honors applicable rights and does not sell personal information or share it for cross-context behavioral advertising.
To make a request, contact support@mail.good-dog.app. We may need to verify your identity and may retain limited information to document the request and our response.
Where data may be processed
10. International transfers
Good Dog and its providers may process information in the United States, Canada, the European Union, and other countries where service providers operate. Those countries may have privacy laws that differ from your location. Where required, Good Dog will rely on an adequacy decision where available, the European Commission's Standard Contractual Clauses or equivalent contractual safeguards with providers, or another lawful transfer mechanism. You may contact us for information about the safeguard relevant to your data.
No solely automated legal decisions
11. Automated processing and AI
Good Dog uses automated systems to generate informational dog-behavior recommendations and chat answers. These outputs do not make decisions about your legal rights, employment, credit, insurance, healthcare, or access to public services, and they are not intended to produce a similarly significant legal effect. You decide whether to use an output and can report unsafe or unsuitable advice. Subscription access is determined from app-store and RevenueCat entitlement records rather than an AI assessment.
Adult-owner service
12. Children and minors
Good Dog is intended for adult dog owners and caregivers. It is not directed to children or minors. Users must be at least 18 or the age of majority where they live, whichever is higher. Good Dog does not offer parent-managed or guardian-managed minor accounts. Before account use, Good Dog records your adult declaration and when you made it. We do not ask for your birth date or identity document for this check.
If you believe a minor created an account or provided personal information, contact support@mail.good-dog.app so we can review and delete the information where required.
Safeguards
13. Security and incident posture
We use reasonable administrative, technical, and organizational safeguards designed to protect information, including authentication controls, access controls, encryption in transit, provider security features, private-content sanitization for analytics and error monitoring, and operational review of incidents.
No online service can guarantee perfect security. If we identify a security or confidentiality incident that requires notice, we will evaluate applicable obligations and notify affected users, regulators, or authorities as required.
Keeping this policy current
14. Updates and contact
We may update this Privacy Policy when product behavior, vendors, consent controls, retention practices, legal obligations, launch territories, or store disclosures change. Material updates will be reflected by changing the effective date and, where appropriate, providing additional notice in the app or website.
For privacy questions or requests, contact support@mail.good-dog.app. For general support, contact support@mail.good-dog.app.