Privacy policy
Last updated
This policy explains what Pawnanigans collects, why, who else can see it, and how to get it back or get rid of it. We have tried to write it in plain language rather than legalese, because a policy nobody reads protects nobody.
What we collect
Only what the app needs to work:
- Account details — your email address, username, display name, and the password we store as a one-way hash we cannot reverse.
- Your pets — names, species, breed, dates, photos, and anything else you choose to add to a profile.
- What you post — captions, photos and video, comments, likes, and the pack or audience you shared them with.
- Adventures — the route, distance and duration of a walk, recorded only while an adventure is running.
- Health records — vaccinations, medications, weights, documents you upload, and reminders you set.
- Safety alerts and place notes you contribute, together with the location they describe.
- Billing — your plan, its status and renewal dates. Card numbers go straight to our payment processor and never reach our servers.
- Technical records — sign-in times, device and browser information, and IP address, which we keep to spot abuse and to show you which sessions are active.
Why we collect it
- To run the service you asked for: your feed, your packs, your pets, your records.
- To keep accounts secure — verifying your email, detecting unusual sign-ins, and rate-limiting abuse.
- To keep the community safe: reviewing reports, and keeping a record of moderation decisions so they can be checked.
- To take payment for a paid plan, and to meet the tax and accounting rules that come with it.
- To send you what you asked for — a password reset, a health reminder, an alert near you. Marketing email only ever goes out if you opted in, and every one of them has an unsubscribe link.
We do not sell your personal information, and we do not run behavioural advertising.
Location, in particular
Precise location is read only while you are recording an adventure, or when you ask to see what is nearby. It is not collected in the background, and you can revoke the permission in your browser or phone settings at any time — the rest of the app carries on working without it.
A route you record is private to you until you share it. Alerts you file are shown to other members near that spot, because that is the point of them.
Who else can see your information
Other members see what you chose to show them: your public profile, and posts you shared publicly or with your pack. Health records are private to you and to anyone you explicitly share them with, and you can withdraw that share.
A moderator reviewing a report can see the reported content and the account that posted it. Reports are confidential: the person you reported is not told who filed it.
We use a small number of service providers to run the app, and they may process your data on our behalf under contract:
- Stripe — payments and subscriptions.
- Cloudinary — storing and resizing photos and video.
- Resend — transactional email such as verification and password resets.
- Firebase Cloud Messaging — push notifications, where you have turned them on.
- Google Cloud — reading uploaded health documents so their details can be filled in for you, and place information for the map.
- Our hosting and database providers, which store the data at rest.
We also disclose information where the law requires it, or where it is necessary to protect somebody from harm.
How long we keep it
Your content stays while your account is open. Delete a post and it goes; close your account and your profile, pets, posts and adventures go with it.
Two things outlive the account on purpose: billing records, which tax law requires us to keep for several years, and moderation records, which we keep so a decision can still be reviewed and so a banned account cannot simply be recreated. Both are kept to the minimum that serves the purpose.
Your rights over your data
Depending on where you live, you have the right to see the personal data we hold about you, correct it, export it, delete it, or object to a particular use of it. You can do most of this yourself in settings; for anything you cannot, write to us and we will action it within a month.
If you are in the UK or the EU and you think we have handled your data badly, you can complain to your national data protection authority. We would rather you told us first so we can put it right.
How we protect it
Traffic is encrypted in transit. Passwords are hashed, never stored in a readable form. Access to production data is limited to the people who need it, and administrative actions are written to an audit log. If a breach ever affects you, we will tell you and the regulator within the time the law allows.
Children
Pawnanigans is not for children under 16. If we learn that we hold an account belonging to one, we delete it. If you believe your child has signed up, write to us and we will remove it.
Changes to this policy
When this policy changes we update the date at the top of the page, and for anything significant we tell you in the app or by email before it takes effect.
Getting in touch
Data questions and requests go to hello@pawnanigans.com, or by post to 123 Furry Avenue, Pet Haven District.