Privacy Notice

About this notice

This notice explains how WherePup handles personal information when you use our website or mobile app. It covers accounts, shared household journals, photographs, subscriptions, product analytics, support, data exports and account deletion.

Who we are

WherePup is operated by Outbox Labs Ltd ("we", "us"). We are a company registered in England and Wales under company number 17394954, with our registered office at Suite A, 82 James Carter Road, Mildenhall, IP28 7DE, United Kingdom. We are the controller of the personal information described in this notice.

For privacy questions or requests, email hello@wherepup.com.

Information we collect

Depending on how you use WherePup, we collect:

• Account information, such as your email address, sign-in method, account identifiers and optional display name.
• Household information, such as household membership, invitations, roles and subscription status.
• Journal content, including pup profiles, memories, notes, dates, places, labels and other details you choose to add.
• Photographs and related information, such as capture dates and settings needed to store and display them.
• Purchase information supplied by the app store and our subscription provider, such as the product purchased and whether access is active. We do not receive your full payment-card details.
• Product analytics, such as how features are used and basic technical context associated with those events.
• Support and rights requests, including messages you send us and information needed to respond.
• Security and technical information generated when the service authenticates requests, prevents misuse and investigates faults.

We receive most of this information directly from you. A household owner may also provide an invited person's email address. If you use Apple or Google to sign in, the sign-in provider supplies the account information needed to identify you. Apple, Google and our subscription provider supply purchase and entitlement information.

WherePup has no advertising and does not sell personal information. The app does not use background GPS or location tracking. A place saved in a memory is information you enter or choose; it is not a record of your device's location. There is no public social feed, and we do not turn memories into scores, streaks or performance measures.

How we use your information

We use personal information to:

• create and secure your account;
• store, display, organise, export and delete your household journal;
• manage household invitations and authorised access;
• show subscription options, process purchases through the relevant store, restore purchases and confirm access;
• understand how WherePup's features are used and improve the app's reliability and design;
• respond to questions, complaints and privacy requests;
• detect, investigate and prevent faults, misuse and security incidents; and
• meet legal, regulatory and accounting obligations.

We usually process account, journal, household and subscription information because it is necessary to provide the service you have asked for. We rely on our legitimate interests where appropriate to secure and improve WherePup, understand product use, provide support and protect our legal interests. We process information to comply with a legal obligation where the law requires it. Where consent is legally required for a particular activity, we will ask for it.

Photographs and memories

WherePup asks for camera or photo-library access when you choose to add a photograph. You can refuse or remove that permission in your device settings, although you will not be able to add photographs from that source until you allow access again.

We store private copies of photographs and prepare versions suitable for display in the app. Where available, the app uses a photograph's capture date to help date a memory. Photograph files are not intended to be publicly accessible; the app uses authenticated, time-limited access and may keep a local display cache so images load reliably. Signing out clears the account's local photo-access cache.

You decide what to add. If a photograph or note includes another person, including a child, only upload it where you have an appropriate right or reason to do so.

Sharing a household

If you share a WherePup household, both authorised members can see the household's pup profiles, memories, photographs and other journal content. Each member can add content while they have access. The owner manages household membership and can remove a contributor.

If a contributor leaves or is removed, they lose access. Memories and photographs they added remain with the shared household journal, while their personal account information is removed from that household and their name may be replaced with a general attribution.

Service providers

We use specialist providers to operate WherePup:

• Clerk provides account creation, authentication, email verification, password reset and Apple or Google sign-in.
• Supabase provides the database, private photograph storage and backend functions used for journal access, exports and deletion.
• RevenueCat manages subscription offerings, purchase status, restoration and household access. It does not receive journal text or photographs from us.
• PostHog provides product analytics that help us understand how the app is used and improve it.
• Apple and Google provide app distribution, optional sign-in and app-store payment and subscription services. They also handle information under their own privacy notices.
• Cloudflare provides website analytics. The public website also requests its Lora and Nunito typefaces from Google Fonts.

These providers receive only the information reasonably needed for their role. We may also use providers for website hosting and business email. We do not allow service providers acting on our behalf to use your journal content for their own advertising.

Website cookies and analytics

The current public website does not set cookies. It uses Cloudflare Web Analytics to understand aggregate visits and page performance without WherePup placing a cookie or local-storage identifier on your device. PostHog is used for app product analytics and does not run on this public website. Google Fonts receives the technical request needed to deliver the website's fonts. Read our short Cookies and Similar Technologies notice for more information.

International transfers

Some of our service providers may process information outside the United Kingdom. Where required, we use recognised safeguards for international transfers of personal information. You can contact us if you would like more information about the safeguards relevant to your information.

How long we keep information

We keep your account and journal while your account or shared household remains active. If a contributor leaves, the content they added remains with the household as explained above. When an owner deletes the household, its journal and photographs are removed from active systems through the account-deletion process.

Some information may remain temporarily in backups or logs, or for longer where we need it for security, legal, dispute-resolution or accounting purposes. We keep support, purchase, invitation and analytics information only for as long as reasonably needed for the purpose for which it was collected, taking account of legal requirements and the settings of the providers involved.

How we protect information

We use measures designed to protect personal information, including authenticated access, private storage, household-based access controls, secure device storage for sign-in tokens and time-limited photograph links. We limit access to people and providers who need it to operate or support the service. No online service can guarantee absolute security.

Your rights

UK data-protection law may give you rights to ask for a copy of your personal information, correct it, delete it, restrict or object to its use, and receive certain information in a portable format. These rights can depend on the circumstances and may have legal exceptions.

The app includes two self-service tools under Profile → Account & privacy:

• Download my data creates a JSON record of the shared journal, including account, pup, memory and photograph details. The export does not contain the photograph files themselves.
• Delete account starts permanent deletion after the household safeguards have been completed. You can also read the public deletion instructions.

To exercise a right or ask a question, email hello@wherepup.com. We may need to confirm your identity before acting. If you are unhappy with our response, you can complain to the UK Information Commissioner's Office at ico.org.uk.

Account deletion and subscriptions

Deleting a WherePup account does not cancel an Apple App Store or Google Play subscription. The household owner should manage or cancel the subscription through the relevant store before deleting the account. Account deletion and store billing are separate processes.

Children

WherePup accounts are intended for adults aged 18 or over. We do not knowingly allow children to create accounts. Journal content may include information about children; account holders are responsible for having an appropriate right or reason to add it. Contact us if you believe a child has created an account or personal information has been added without appropriate permission.

Changes to this notice

We may update this notice when WherePup, our providers or the law changes. We will change the date at the top of the page and tell account holders in the app or by email where a change is significant.

Contact

Email hello@wherepup.com, or write to Outbox Labs Ltd at Suite A, 82 James Carter Road, Mildenhall, IP28 7DE, United Kingdom.