Privacy Policy

Who we are

Tamadoggo is run by Sorin Vasiliu, an individual based in Bucharest (051763), Romania. For privacy purposes I’m the data controller for the information described here. You can reach me at hello@tamadoggo.com.

Information we collect

When you create an account we collect your email address and a display name. You can sign up with an email and password, or with Sign in with Apple or Google — in those cases Apple or Google share your email (and, for Apple, the name you choose to share) so we can create your account.

If you log events about your pet in the mobile app we store what you enter: pet profiles (name, breed, birthday), weight, vaccinations and vet names, medications, notes, photos, videos, and any vet documents you upload. We also store your device’s time zone so reminders fire at the right local time, and a push token if you turn on notifications. We don’t use advertising, and we don’t track you across other companies’ apps or websites. The app has no crash-tracking tools. It does use Statlark, our own analytics — see “App analytics” below. On Android, a Google tool the app relies on also reports its own usage statistics to Google — see “Videos and on-device processing” below. The tamadoggo.com website uses our own privacy-friendly, first-party analytics — see “Website analytics” below.

Videos and on-device processing

You can add a short video to an entry. You pick it from your phone, choose up to 30 seconds of it, and the app makes a smaller copy on your phone. That copy is what we store, along with one still image from it. We never receive the original.

A video keeps its sound, so it can include your voice and the voices and faces of anyone else in it. Videos and their stills are kept in private storage, and only you and the other members of that pet can play them.

To pick the still, the app looks through the clip for your pet and, if it doesn’t find one, for a face, so it can frame the picture well. It finds where a face is and how clear a shot it is. It doesn’t work out who anyone is, and it doesn’t create or keep a face profile. All of this happens on your phone: the only results that reach us are the still it chose and the point in the picture to center it on.

On iPhone this uses tools built into iOS. On Android it uses Google’s ML Kit, which also runs the document scanner. ML Kit does its work on your phone and doesn’t send your videos, images, or its results to Google. It does send Google statistics about how well the tool is working and how much it’s used, which Google uses to maintain and improve it, and it can fetch updates from Google.

Why we use your data

We only use your data for the reasons below, each with a legal basis under the GDPR:

• Running your account, storing your journal and filing your entries under a category — to provide the service you signed up for (contract).
• Pro AI features and reminders — to deliver the Pro features you subscribe to (contract).
• Processing payments — to take payment and keep the billing and tax records the law requires (contract and legal obligation).
• A small deletion audit log — to prevent abuse and resolve disputes (legitimate interest).
• Website analytics and attribution — to understand how people find and use tamadoggo.com and to attribute subscriptions to the source that first brought you here (legitimate interest; you can opt out with your browser’s Do Not Track setting).
• App analytics and attribution — to understand how the app is used and which ways of finding us lead to subscriptions (legitimate interest; you can object by emailing us).

Payment information

Subscription payments on tamadoggo.com are processed by Stripe. We receive a Stripe customer identifier and the billing status of your subscription; we never see or store your card number, CVC, or full billing address. App Store subscriptions are processed by Apple, and Google Play subscriptions by Google, under their own terms.

How your data is stored

Account and event data are stored in our Supabase Postgres database (EU region). Photos, videos, and documents are stored in Supabase Storage. Access is restricted by row-level security: only your account — and, for a pet you’ve shared, its other members — can read your data, and our operators only access individual records when responding to a support request.

Website analytics

On the tamadoggo.com website we use Statlark, our own privacy-friendly, first-party analytics, to see how people find and use the site. It records page views using a first-party cookie (set on tamadoggo.com only) and does not follow you across other websites, build advertising profiles, or load third-party trackers. It honors your browser’s “Do Not Track” setting — if that’s on, it collects nothing.

If you’re signed in, we associate your account email with your visit so that, if you subscribe, we can attribute the sign-up to how you first found us. Statlark is our own first-party analytics: the script is served from statlark.com (a domain we operate) and the data it collects runs on a Supabase project we operate — not a third-party analytics company.

We are also currently trialing DataFast, a third-party analytics service, on the website to compare it with Statlark. Unlike Statlark, DataFast is run by a third party: its script is loaded from datafa.st and the data it collects is processed on DataFast’s own systems. DataFast sets its own cookies and, unlike Statlark, does not honor the “Do Not Track” setting — you can block it with a content or ad blocker. We run it only to evaluate the product and will remove it when that evaluation is done.

Changed your mind? Reopen the cookie banner to change or withdraw your choice at any time.

Cookie settings

App analytics

The mobile app uses Statlark too. It records which screens you open and when, whether you’re on a phone or tablet, whether it’s iOS or Android, and your approximate location (city, region and country). The location is worked out from your IP address as the data arrives, and the IP address itself isn’t stored. All of this is tied to a random ID kept on your phone.

When you’re signed in, it also records your account ID and email, so we can see your app and website activity as one person’s. If you subscribe on iPhone, we also record the sale with your email: the plan, amount, currency, date and transaction IDs.

We use this to understand how the app is used and which ways of finding us lead to subscriptions (legitimate interest). It isn’t used for advertising. When you sign out, the app starts over with a new random ID. The app has no setting to turn this off, but you can object at any time by emailing hello@tamadoggo.com.

Who we share data with

We don’t sell your data or share it for advertising. We rely on a small set of trusted providers to run the app, and they only ever process data for your own account:

• Supabase — database, file storage, and sign-in (EU region).
• Anthropic — powers the Pro AI features (United States; see below).
• Stripe — payments on the website.
• Apple — App Store payments, Sign in with Apple, and push notification delivery.
• Google — Google Play payments, push notification delivery on Android, Sign in with Google if you choose it, and ML Kit on Android, which only receives usage statistics (see “Videos and on-device processing”).
• Expo — delivers push notifications to your device.
• Vercel — hosts the tamadoggo.com website, and passes the text of an entry you are writing to TypeSafe AI (United States; see below).
• TypeSafe AI — picks the category of an entry as you write it (United States; see below).
• Cloudflare — receives app analytics first and works out your approximate location before passing them to our own database.
• DataFast — third-party website analytics we’re trialing alongside Statlark (temporary).

Anthropic is based in the United States, so when you use Pro AI features that data is processed outside the EU. Because we use Anthropic’s commercial API, that transfer is covered by the Standard Contractual Clauses in Anthropic’s Data Processing Addendum.

Vercel and TypeSafe AI are also based in the United States, so the text of an entry you are writing is processed outside the EU when its category is picked (see “AI features”).

AI features

When you write a journal entry, the app sends what you have typed so far, whether your pet is a dog or a cat, and how many photos and videos you have added, to TypeSafe AI through Vercel’s AI Gateway. It answers with a category for the entry, such as a vet visit or a walk. This happens for every account, free and Pro, and while you type, so the text is sent even if you close the entry without saving it. Your name, your pet’s name, the date and the photos and videos themselves are not sent, unless you type them into the entry. We ask for zero data retention on these requests: the text is processed to return a category, is not stored and is not used to train models. We keep no copy of it in our own logs.

Pro features send the relevant records to Anthropic for processing: the weekly insights and monthly summaries send your pet’s profile and event history; the document scanner sends a vet document you upload; breed detection sends a photo you upload. Anthropic processes the data only to return a result, does not use it to train its models, and does not keep it after the request. Videos and their stills are not sent to Anthropic. We never send AI providers anything beyond what’s needed for your own account.

Sharing a pet with family

You can invite other people to share a pet with you. When someone accepts your invite they become a member of that pet and can see and add to everything on it — the timeline, photos, videos, health records, reminders, and any AI insights — just like you. Inviting is free, and a pet can have up to six members.

What this means for your privacy:

• Other members are recipients of the pet’s data. Everyone on a shared pet can view and contribute to all of its content, so only invite people you trust with it. The legal basis is your consent — given by sending an invite, and by accepting one.
• Co-members see your name and picture. Other members of a shared pet can see your display name and profile picture in the member list. They cannot see your email address.
• What you add stays with the pet. If you leave a shared pet, are removed, or delete your account, the events, photos, and videos you added remain part of that pet’s record for the other members, but your name is removed from them. A shared pet’s history is held jointly by its members.
• Ownership can pass to another member. If the owner of a shared pet leaves, ownership passes to the longest-standing member, so the pet and its records stay available to the household.
• AI and notifications cover every member. For a shared pet, the Pro AI features and the reminders are available to, and notify, all of its members. AI processing is the same as described above — only what’s needed to return a result, never used to train models.

Pet photos are kept in public storage, so a photo’s direct link may stay reachable by anyone who has it. Videos are not: they stay in private storage. If you need a specific piece of personal data removed — for example your face in a photo or video, or a person’s details inside a document — email hello@tamadoggo.com and we’ll remove it. Deleting your account takes your name off shared pets; a request to us covers anything that needs erasing from a pet you don’t own outright.

Your privacy rights

Under the GDPR you can access your data, correct it, delete it, export it, restrict or object to how we use it, and withdraw consent where we rely on it. You can do most of this straight from the app — edit or delete entries any time, or delete your whole account from Settings. For anything else, email hello@tamadoggo.com. If you think we’ve mishandled your data, you can also complain to Romania’s supervisory authority, ANSPDCP.

Children

Tamadoggo is made for adult pet owners. It isn’t directed to children, and we don’t knowingly collect data from anyone under 16. If you believe a child has created an account, email us and we’ll remove it.

Retention and deletion

While your account is active we keep your data until you remove it. You can delete your account from inside the mobile app at any time, which removes your event data, photos, videos, and subscription records from our systems right away. It doesn’t remove your analytics records (see “App analytics” above). Email hello@tamadoggo.com and we’ll erase those too. The one exception is a pet you’ve shared with others: the events, photos, and videos you added there stay with the pet for the remaining members, with your name removed — see “Sharing a pet with family” above. We keep billing records for as long as tax and accounting law requires.

Deleting an entry deletes its video and still. If a file is ever left behind, for example by an older version of the app, a nightly cleanup removes it within two days. The app also keeps a temporary copy on your phone of videos you’ve played, which is cleared when you sign out.

We also keep a minimal deletion audit log — your email, account id, the date, the reason, and the IP address and device used to make the request — so we can prevent abuse and handle disputes. We don’t keep it any longer than three years.

Changes to this policy

If we change how we handle your data we’ll update the date at the top of this page, and for material changes we’ll email active users so you hear about it directly.

Contact

Questions about privacy? Email hello@tamadoggo.com.