← Back to Home

Privacy Policy

Last Updated: January 20, 2026

1. Information We Collect

1.1 Information You Provide

• Account Information: Email address, password (encrypted), date of birth, username
• Profile Information: Display name, role (pup/handler/switch/other), bio, experience level, photos, interests, looking for preferences
• Identity Verification: Age verification status (18+ required)
• Communications: Messages you send through the app, reports, and support inquiries
• User Content: Photos, profile information, and other content you create or upload
• Payment Information: Billing name, address, and payment method (processed through Stripe - see section 3.2)

1.2 Information Collected Automatically

• Location Data: Precise location (GPS) when you use map features, approximate location for nearby user discovery
• Device Information: Device type, operating system, unique device identifiers, mobile network information
• Usage Data: App features used, time spent, interactions with other users, search queries
• Log Data: IP address, app crashes, system activity, access times
• Cookies and Tracking: Session identifiers, analytics data, performance metrics (see section 9)

1.3 Information from Third Parties

• Social Media: If you connect social media accounts, we may receive profile information
• Other Users: Information others provide about you, such as when they report or block you

2. How We Use Your Information

Purpose	Data Used
Provide and maintain the service	Account info, profile data, location
Connect you with nearby users	Location data, profile information, preferences
Enable messaging and communication	Account info, messages, read receipts
Process payments (when applicable)	Billing information, transaction history
Send notifications and updates	Device tokens, contact information, preferences
Safety and security	All data to detect fraud, enforce terms, investigate violations
Improve our services	Usage data, analytics, crash reports
Customer support	Account info, support inquiries, usage data
Legal compliance	All data as required by law

3. How We Share Your Information

3.1 With Other Users

• Your profile information (photos, bio, role, experience level) is visible to other users
• Your approximate location and distance may be shown to nearby users
• Users you message can see your profile and online status
• Users you favorite or who favorite you can see this interaction

3.2 With Service Providers

We work with trusted third-party service providers who process data on our behalf:

Service Provider	Purpose	Data Shared
ProjectCrumb.com	Backend services and API infrastructure	User data, profile information, messages, location data
DigitalOcean	Cloud hosting and data storage (United States)	All app data stored on secure servers
Stripe	Payment processing (future monetization)	Payment card information, billing details, transaction history
Apple/Google	Push notifications	Device tokens, notification preferences
Mailgun	Email delivery (account verification, notifications)	Email address, message content
Analytics Providers	Usage statistics and crash reporting	Anonymized usage data, device information

Data Processing: These providers are contractually obligated to protect your information and use it only for specified purposes. They may not use your data for their own purposes.

3.3 For Legal Reasons

We may disclose your information if required by law or in good faith belief that such disclosure is necessary to:

• Comply with legal obligations, court orders, or government requests
• Enforce our Terms of Service and investigate violations
• Detect, prevent, or address fraud, security, or technical issues
• Protect the rights, property, or safety of PupBoy, our users, or the public
• Respond to emergencies or threats to personal safety

3.4 Business Transfers

If PupBoy is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you via email and/or prominent notice in the app before your information becomes subject to a different privacy policy.

4. Payment Information

4.1 Payment Processing (When Applicable)

If you purchase premium features, subscriptions, or other paid services, payment processing is handled by Stripe, a PCI-DSS compliant payment processor.

What We Collect:

• Billing name and address
• Payment method type (e.g., "Visa ending in 1234")
• Transaction history and purchase records

What We DON'T Store:

• Full credit card numbers
• CVV/security codes
• Complete payment card data

Security: Stripe handles all sensitive payment information using industry-standard encryption. We never store your complete payment card details on our servers. For more information, see Stripe's Privacy Policy.

5. Your Privacy Rights and Controls

5.1 Access and Update

• View and edit your profile information in the Profile section
• Update your privacy settings and preferences
• Control who can see your location and online status
• Request a copy of your personal data

5.2 Delete Your Data

• Delete individual photos from your profile
• Delete message history with specific users
• Delete your account entirely (all data permanently removed within 30 days)
• Request deletion of specific data categories

5.3 Marketing Communications

• Opt out of promotional emails (you'll still receive important account notifications)
• Control push notification preferences in your device settings or app settings
• Opt out of SMS marketing (see section 10)

5.4 Legal Rights (Region-Specific)

California Residents (CCPA):

• Right to know what personal information we collect
• Right to delete personal information
• Right to opt-out of sale of personal information (we do not sell your data)
• Right to non-discrimination for exercising privacy rights
• Right to correct inaccurate personal information

European Union Residents (GDPR):

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

Other U.S. States (Virginia VCDPA, Colorado CPA, Connecticut CTDPA, Utah UCPA):

• Right to confirm whether we process your personal data
• Right to access your personal data
• Right to correct inaccuracies in your personal data
• Right to delete your personal data
• Right to obtain a copy of your personal data
• Right to opt out of targeted advertising (when applicable)
• Right to opt out of sale of personal data (we don't sell data)

How to Exercise Your Rights: Contact us at privacy@pupboy.com with your specific request. We will respond within 30 days (or as required by applicable law).

6. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: All data transmitted over HTTPS/TLS. Passwords hashed with bcrypt
• Access Controls: Limited employee access on need-to-know basis
• Secure Infrastructure: Cloud servers with firewalls and monitoring
• Regular Security Audits: Ongoing assessment of vulnerabilities and security practices
• Incident Response: Documented procedures for data breach response
• Employee Training: Regular security awareness training for all team members

Note: No method of transmission over the internet is 100% secure. While we strive to protect your data using commercially reasonable means, we cannot guarantee absolute security.

7. Data Retention

How Long We Keep Your Data:

Data Type	Retention Period	Reason
Active Account Data	While account is active + 12 months after deletion	Service provision, legal compliance
Messages	12 months from send date	User experience, dispute resolution
Location Data	30 days (rolling)	Real-time matching features
Analytics Data	24 months (aggregated/anonymized)	Service improvement
Log Files	90 days	Security, debugging, abuse prevention
Payment Records	7 years (as required by law)	Tax compliance, financial regulations
Safety Reports	5 years	Legal compliance, pattern detection
Deleted Account Data	12 months maximum	Legal obligations, fraud prevention

7.1 Account Deletion Process

When you delete your account:

• Your profile becomes immediately invisible to other users
• Most personal data is deleted within 30 days
• Some data may be retained for up to 12 months for legal/security purposes
• Backup copies are purged within 90 days
• Messages you sent remain visible to recipients but are anonymized (username changed to "Deleted User")

Legal Holds: We may retain data longer if required by law, legal proceedings, or to prevent fraud and abuse.

8. Children's Privacy (COPPA Compliance)

If We Discover Underage Users:

• We will immediately delete their account and all associated data
• We will terminate access to the app
• We will not retain any personal information
• We will notify appropriate authorities if required by law

Parental Notice: If you believe your child under 18 has created an account or provided personal information to PupBoy, please contact us immediately at privacy@pupboy.com so we can delete the information.

Age Verification: We may request additional age verification if we suspect an account belongs to a minor. Failure to provide verification will result in account suspension.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience and analyze app usage.

9.1 Types of Tracking Technologies

• Essential Cookies: Required for app functionality, authentication, and security (cannot be disabled)
• Analytics Cookies: Help us understand how you use the app (usage patterns, feature adoption, crash reports)
• Performance Cookies: Monitor app performance and identify technical issues
• Preference Cookies: Remember your settings and preferences

9.2 Third-Party Analytics

We use analytics services to improve our app. These services may collect:

• Device information (model, OS version, screen size)
• App usage data (features used, session duration, screens viewed)
• Performance metrics (load times, errors, crashes)

Analytics data is anonymized when possible and does not include personally identifiable information.

9.3 Your Choices

• You can clear cookies through your device settings
• Disabling essential cookies may limit app functionality
• You can opt out of analytics through app settings (Settings → Privacy → Analytics)
• You can reset your advertising identifier in device settings (iOS: Settings → Privacy → Tracking)

10. SMS and Text Message Communications

Text Message Marketing and Notifications:

We may offer SMS/text message notifications and marketing communications. If you opt in to receive text messages:

10.1 What You'll Receive

• Account notifications (login alerts, security notices)
• Security alerts (suspicious activity, password changes)
• Promotional offers and updates
• Event notifications (nearby events, pack activities)
• Message notifications (new messages, sniffs, favorites)

10.2 Message Frequency

• Transactional Messages: Sent as needed (security alerts, account notifications)
• Promotional Messages: Up to 4 per month
• Event Notifications: Varies based on local events and your preferences

10.3 Opt-In and Opt-Out

• Opt-In Required: You must explicitly consent to receive marketing text messages
• Opt-Out: Reply STOP to any text message to unsubscribe. You'll receive one final confirmation message.
• Help: Reply HELP for assistance or contact packleader@pupboy.com

10.4 Costs and Disclaimer

• Message and data rates may apply based on your carrier's plan
• Carriers are not liable for delayed or undelivered messages
• We are not responsible for carrier-related issues

10.5 Service Provider

Text messages are sent through our SMS service provider who receives your phone number and opt-in status solely for message delivery purposes.

11. Location Services

PupBoy uses location data to provide core functionality:

• Map View: Show nearby users on the map
• Distance Calculation: Display distance to other users
• Search Filters: Find users within specified radius
• Event Discovery: Find nearby events and gatherings

Privacy Controls:

• You can disable location services in your device settings (app functionality will be limited)
• Control whether your distance is shown to other users in Profile Settings
• Location data is only collected when the app is in use (not in background)
• Precise location (GPS coordinates) is never shared with other users - only approximate distance

12. International Data Transfers

12.1 Data Storage Location

Your data is primarily stored on servers located in the United States (DigitalOcean data centers).

12.2 Cross-Border Transfers

By using PupBoy, you consent to the transfer of your information to the United States and other countries where our service providers operate. These countries may have different data protection laws than your country of residence.

12.3 Protections for International Users

• We use standard contractual clauses for data transfers
• Service providers must comply with applicable data protection regulations
• We implement appropriate safeguards for international data transfers

12.4 European Users (GDPR)

If you're in the EU/EEA, you have additional rights under GDPR (see Section 5.4). We ensure that data transfers from the EU to the U.S. comply with GDPR requirements through:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequate safeguards for data protection
• Your explicit consent to transfer and processing

13. Do Not Track Signals

Browser "Do Not Track" (DNT) Signals:

Some web browsers have a "Do Not Track" feature that signals websites not to track your browsing. Currently, there is no universal industry standard for how to respond to DNT signals.

13.1 Our Approach

• Our mobile app does not currently respond to DNT signals
• You can control tracking through your device privacy settings
• You can opt out of analytics through in-app settings
• You can reset your advertising identifier in device settings

We may implement DNT support in the future as industry standards evolve.

14. Behavioral Advertising

We do not currently display third-party advertisements in PupBoy.

14.1 Future Advertising

If we introduce advertising in the future:

• We will update this policy with details at least 30 days in advance
• You will be able to opt out of personalized ads
• We will comply with NAI (Network Advertising Initiative) and DAA (Digital Advertising Alliance) opt-out frameworks
• We will not use sensitive information (sexual orientation, health data, etc.) for ad targeting

14.2 Current Data Use

We may use your app activity to:

• Recommend relevant features and content
• Personalize your experience
• Show relevant events in your area
• Suggest potential connections based on compatibility

This is not advertising - it's service personalization to enhance your experience.

15. Third-Party Links and Services

Our app may contain links to external websites or services (e.g., support resources like RAINN, The Trevor Project, NCSF, or user-provided links in profiles/messages).

Important:

• We are not responsible for the privacy practices of these third parties
• Please review their privacy policies before providing information
• We do not control or endorse third-party content
• Use caution when clicking external links

16. Changes to This Privacy Policy

16.1 Updates and Notifications

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service features.

How We'll Notify You:

For Material Changes:

• In-app notification with prominent banner
• Email to your registered email address
• Prominent notice on login screen
• At least 30 days before changes take effect

For Minor Changes:

• Updated "Last Updated" date at top of policy
• Brief in-app notification (optional)

16.2 Your Acceptance

• Continued use of PupBoy after policy changes means you accept the updated policy
• For material changes, we may require explicit acceptance before you can continue using the app
• If you don't agree to changes, you may delete your account

16.3 Version History

Previous versions of this privacy policy are available upon request at privacy@pupboy.com.

Effective Date: Changes become effective on the date specified in the notification, never less than 30 days after notification for material changes.

17. California Privacy Rights

17.1 California Consumer Privacy Act (CCPA)

See Section 5.4 for comprehensive CCPA rights.

17.2 California "Shine the Light" Law (Cal. Civ. Code § 1798.83)

California Civil Code Section 1798.83 permits California residents to request information about disclosure of personal information to third parties for their direct marketing purposes.

Current Practice: We do not share personal information with third parties for their direct marketing purposes.

Your Right to Know: California residents may request once per year:

• Categories of personal information disclosed for direct marketing
• Names and addresses of third parties receiving information (if any)

How to Request: Email privacy@pupboy.com with "California Privacy Rights" in the subject line. Include your name, mailing address, and confirmation that you are a California resident.

18. Contact Us

© 2026 PupBoy. All rights reserved.
Home | Terms of Service | Privacy Policy