The short version
Pupp is a puppy movement companion. We use the minimum information needed to keep your profile and activities working. We do not sell personal information or run behavioural advertising. Location is optional for doghouse walks.
Information Pupp collects
Profile: a randomly generated profile identifier, the owner and puppy names you choose, Pupp avatar, daily goal, and an optional profile photo you choose to upload.
Movement and gift activity: the local calendar day, current-day step summary needed for gift discovery and syncing, gift events, and the movement memories already connected to your account.
Doghouse walks: Pupp asks for location when you open the map to center it on you. Without permission, an approximate city from your network connection can open the map. For visits and draws, Pupp checks that you are close enough. We save the place you visited, doghouses you build, and draws you make, not a route or a history of your exact coordinates.
Passkey information used to complete onboarding: a credential identifier, public key, usage counter, device type, and backup state. Pupp never receives your fingerprint, Face ID data, or private key.
Private chats: messages and photos you choose to send, the conversation members, delivery time, and read position. Chat content is available only to members of that conversation.
Support information: anything you choose to send when contacting the developer for help, access, correction, or deletion.
Basic connection and security records processed by our hosting provider when the app or website contacts Pupp’s service.
App analytics and diagnostics: app version, device type, operating system, language, screen views, selected controls, walk and feature events including credited walk duration, and technical errors. These records use the random profile identifier. Pupp does not send your names, photo, precise location, or raw health readings to analytics.
Permissions stay purposeful
Photos: used only when you choose a profile photo or a photo to send in a private chat. Pupp uploads only the edited photo you approve; it does not scan your library.
Steps: with your permission, Pupp reads the daily total from the system health service to find and hatch gifts. On Android, Pupp requests only steps and background step access. Raw and hourly health readings are not uploaded.
Notifications: used only if you allow them. Pupp may send health cards, friend activity, chat messages, and movement starts. While notification access is allowed, Pupp stores a notification delivery identifier with your profile so these messages can reach you. If notification access is turned off, the app asks the service to remove that identifier the next time it opens. Deleting your account also removes it.
Location: requested when you open the doghouse map, to center the map and show the interaction range. You can browse from an approximate network location without granting permission. Pupp does not request background location.
How we use information
Provide an anonymous walking profile without requiring an email address or password.
Sync gifts, profile choices, movement memories, and the summaries needed for rewards across devices when you use a Passkey.
Prevent duplicate or implausible walk credits and keep the service secure and reliable.
Show Pupp content, reminders, gift progress, and your walking memories.
Understand whether the core walk works, find friction, and diagnose crashes or failures so Pupp can improve.
Respond to support, privacy, or safety requests and comply with applicable law.
Health readings and device choices
With your permission, Pupp reads your daily step total from Health Connect on Android or Apple Health on iPhone to find and hatch gifts. The Android version requests only steps and background step access. You can manage access in system health settings.
Pupp sends only the summaries needed for gift rewards and syncing. Accepted friends may see your current local-day step total. Raw and hourly health readings, heart rate, precise location, and other personal health measurements are not shared with friends or analytics.
Who processes information
Cloudflare provides Pupp’s hosting, database, file storage, content delivery, and network security. Information may therefore be processed in countries where Cloudflare operates. Service providers may use information only to provide and protect Pupp and must apply protections consistent with this statement. We may also disclose information when required by law or necessary to protect people, rights, or the service.
PostHog provides app analytics and error diagnostics, and Google Analytics for Firebase provides app analytics. These services use the random profile identifier, and Google Analytics may derive an approximate region from masked network information. They process information only to provide and protect analytics for Pupp, not for behavioural advertising. Pupp’s PostHog project is hosted in the United States.
Expo processes the Expo Push Token and notification content only to relay optional remote notifications through Apple or Google.
We do not sell or rent personal information, and we do not share it with advertising networks or data brokers.
Your choices and rights
You can use a Pupp avatar instead of uploading a photo and can choose not to enable reminders. A Passkey is required to finish onboarding.
You can change your owner name, puppy name, avatar, photo, and daily goal in Pupp. Friends see your owner name; your puppy name is used for interactions between you and your puppy. You can turn notifications or motion access off in system settings.
You may ask for access to, correction of, or deletion of information connected to your walking profile through the support contact below.
Deleting the app removes local settings and access from that device, but does not change information already synced to Pupp. You can request permanent account deletion in Settings or at /delete-account. A person reviews the request within 7 days; your account remains available until approval. After approval, deletion cannot be undone or recovered.
If you are in New Zealand, you may also raise a concern with the Office of the Privacy Commissioner.
Retention and security
We keep active profile, movement, analytics, and diagnostic information only while it is needed to provide and improve Pupp or meet security and legal obligations. After a deletion request is manually approved, we permanently remove identity, authentication, health summaries, photos, chats, and social data and ask connected service providers to do the same. We retain only de-identified issuance, purchase, refund, and anti-abuse records needed to prevent duplicate rewards or transactions, or information required by law. Short-lived Passkey challenges expire automatically.
Pupp uses encrypted connections, hashed anonymous session tokens on the server, platform-protected Passkeys, and access controls. No service can guarantee absolute security, but we limit collection and use safeguards appropriate to the information involved.
The website
The Pupp website does not use advertising trackers, behavioural analytics, or marketing cookies. Cloudflare still processes ordinary request information, such as IP address, time, requested page, and browser or device details, to deliver and protect the site.
Children
Pupp is not directed to children under 13. If you believe a child has provided personal information without appropriate permission, contact the developer so it can be reviewed and removed.
Changes to this statement
We may update this statement when Pupp’s features, providers, or legal obligations change. The effective date above will change, and material changes will be communicated in the app or through the distribution channel when appropriate.